Edit tour

Windows Analysis Report
Setup.exe

Overview

General Information

Sample name:	Setup.exe
Analysis ID:	1584712
MD5:	2902e39c85dd5de70d317957a8dd1683
SHA1:	54b92618d4e08f3a06e1b510d14cd764a003acf1
SHA256:	536d9c6365af64660702c6cd49bf2939de2ae3d6798b8167f3b21b8d120f75bd
Infos:

Detection

Score:	45
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for dropped file

Multi AV Scanner detection for submitted file

Yara detected Generic Downloader

Allocates memory with a write watch (potentially for evading sandboxes)

Checks if Antivirus/Antispyware/Firewall program is installed (via WMI)

Contains functionality to dynamically determine API calls

Contains long sleeps (>= 3 min)

Detected potential crypto function

Drops PE files

Enables debug privileges

Found dropped PE file which has not been started or loaded

Found potential string decryption / allocating functions

HTTP GET or POST without a user agent

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

May sleep (evasive loops) to hinder dynamic analysis

Monitors certain registry keys / values for changes (often done to protect autostart functionality)

PE file contains an invalid checksum

PE file contains sections with non-standard names

Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines)

Queries the volume information (name, serial number etc) of a device

Sample file is different than original file name gathered from version info

Suricata IDS alerts with low severity for network traffic

Uses 32bit PE files

Uses code obfuscation techniques (call, push, ret)

Classification

Process Tree

System is w10x64

Setup.exe (PID: 5808 cmdline: "C:\Users\user\Desktop\Setup.exe" MD5: 2902E39C85DD5DE70D317957A8DD1683)

WebCompanion-Installer.exe (PID: 5040 cmdline: .\WebCompanion-Installer.exe --savename=Setup.exe --partner=IN240402 --nonadmin --direct --tych --campaign=21794599196 --version=13.900.0.1080 MD5: A27F9713DB1688D03D2082BFA1827803)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security

Unpacked PEs

Source	Rule	Description	Author
1.0.WebCompanion-Installer.exe.920000.0.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
0.3.Setup.exe.204e4b8.2.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
0.3.Setup.exe.204b8b8.1.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security
0.3.Setup.exe.204ceb8.3.raw.unpack	JoeSecurity_GenericDownloader_1	Yara detected Generic Downloader	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ETPRO MALWARE Common Downloader Header Pattern H

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-06T09:41:50.941294+0100	2803305	3	Unknown Traffic	192.168.2.4	49732	104.16.148.130	80	TCP
2025-01-06T09:42:01.908996+0100	2803305	3	Unknown Traffic	192.168.2.4	49768	104.16.149.130	443	TCP
2025-01-06T09:42:10.216009+0100	2803305	3	Unknown Traffic	192.168.2.4	49769	104.16.149.130	443	TCP
2025-01-06T09:42:18.195213+0100	2803305	3	Unknown Traffic	192.168.2.4	49770	104.16.149.130	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

ReversingLabs: Detection: 20%

Multi AV Scanner detection for submitted file

Source: Setup.exe	Virustotal: Detection: 41%			Perma Link
Source: Setup.exe	ReversingLabs: Detection: 29%

Source: Setup.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, LARGE_ADDRESS_AWARE, 32BIT_MACHINE

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

File created: C:\Users\user\AppData\Local\Temp\WcInstaller.log

Jump to behavior

Source: Setup.exe

Static PE information: certificate valid

Source: unknown	HTTPS traffic detected: 104.16.148.130:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.149:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.130:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.130:443 -> 192.168.2.4:49768 version: TLS 1.2

Source:	Binary string: Application/WebCompanion-Installer.pdb source: WebCompanion.zip.1.dr
Source:	Binary string: &Application/WebCompanion-Installer.pdb source: WebCompanion.zip.1.dr
Source:	Binary string: c:\Temp\Release\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, WebCompanion-Installer.exe, 00000001.00000002.3515345052.00000000066E2000.00000002.00000001.01000000.00000007.sdmp, Newtonsoft.Json.dll.0.dr
Source:	Binary string: eApplication/WebCompanion-Installer.pdbPK source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FDE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FDA000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FE6000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FE2000.00000004.00000800.00020000.00000000.sdmp, WebCompanion.zip.1.dr
Source:	Binary string: Application/WebCompanion-Installer.pdbPK source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FDE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FDA000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FE6000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FE2000.00000004.00000800.00020000.00000000.sdmp, WebCompanion.zip.1.dr
Source:	Binary string: c:\Windows\Temp\drone-ME4saUyIgSY9rSgY\drone\src\WebCompanion\Installer\WebCompanionInstaller\obj\Release\WebCompanion-Installer.pdb source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr

Source: C:\Users\user\Desktop\Setup.exe

Code function: 0_2_00405434 FindFirstFileA,FindFirstFileW,

0_2_00405434

Networking

Yara detected Generic Downloader

Source: Yara match	File source: 1.0.WebCompanion-Installer.exe.920000.0.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Setup.exe.204e4b8.2.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Setup.exe.204b8b8.1.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: 0.3.Setup.exe.204ceb8.3.raw.unpack, type: UNPACKEDPE
Source: Yara match	File source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe, type: DROPPED

Source: global traffic	HTTP traffic detected: POST /api/feature/WC HTTP/1.1Content-Type: application/jsonHost: featureflags.lavasoft.comContent-Length: 194Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=Start&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 447Connection: Keep-Alive
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=Start&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 398
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 508
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 646
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 515
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 482
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 515
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 488
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 527
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 466
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 527
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 458
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 520
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 460
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 520
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 475
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 520
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 491
Source: global traffic	HTTP traffic detected: POST /api/Update/WC HTTP/1.1Content-Type: application/jsonHost: featureflags.lavasoft.comContent-Length: 194
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 517
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 485
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.com
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.com
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.com
Source: global traffic	HTTP traffic detected: POST /v1/event-stat?Type=ErrorInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 728
Source: global traffic	HTTP traffic detected: POST /v1/event-stat-wc?Type=ErrorInstall&ProductID=wc&EventVersion=1 HTTP/1.1Content-Type: application/jsonHost: flwadw.comContent-Length: 674
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.lavasoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.lavasoft.com

Source: Joe Sandbox View	IP Address: 104.16.149.130 104.16.149.130
Source: Joe Sandbox View	IP Address: 104.16.148.130 104.16.148.130
Source: Joe Sandbox View	IP Address: 104.16.148.130 104.16.148.130

Source: Joe Sandbox View

JA3 fingerprint: 3b5074b1b5d032e5620f69f9f700ff0e

Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49732 -> 104.16.148.130:80
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49768 -> 104.16.149.130:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49769 -> 104.16.149.130:443
Source: Network traffic	Suricata IDS: 2803305 - Severity 3 - ETPRO MALWARE Common Downloader Header Pattern H : 192.168.2.4:49770 -> 104.16.149.130:443

Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.com
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.com
Source: global traffic	HTTP traffic detected: GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1Host: wcdownloadercdn.lavasoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.lavasoft.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: geo.lavasoft.com

Source: global traffic	DNS traffic detected: DNS query: geo.lavasoft.com
Source: global traffic	DNS traffic detected: DNS query: featureflags.lavasoft.com
Source: global traffic	DNS traffic detected: DNS query: flwadw.com
Source: global traffic	DNS traffic detected: DNS query: wcdownloadercdn.lavasoft.com

Source: unknown

HTTP traffic detected: POST /api/feature/WC HTTP/1.1Content-Type: application/jsonHost: featureflags.lavasoft.comContent-Length: 194Connection: Keep-Alive

Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://aia.entrust.net/evcs2-chain.p7c01
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertAssuredIDRootCA.crt0E
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crt0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertTrustedRootG4.crt0C
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://crl.entrust.net/csbr1.crl0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://crl.entrust.net/evcs2.crl0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://crl.entrust.net/g2ca.crl0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertAssuredIDRootCA.crl0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedG4RSA4096SHA256TimeStampingCA.crl0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertTrustedRootG4.crl0
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://defaultcontainer/UI/ResourceDictionary/icon-failed.pngd
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://defaultcontainer/WebCompanion-Installer;component/ui/customerrorview.xamld
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://defaultcontainer/WebCompanion-Installer;component/ui/installerfooter.xamld
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://defaultcontainer/WebCompanion-Installer;component/ui/installerheader.xamld
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://defaultcontainer/WebCompanion-Installer;component/ui/installerheaderextension.xamld
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://foo/UI/ResourceDictionary/icon-failed.png
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://foo/bar/ui/customerrorview.baml
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://foo/bar/ui/customerrorview.bamld
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://foo/bar/ui/installerfooter.baml
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://foo/bar/ui/installerfooter.bamld
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://foo/bar/ui/resourcedictionary/icon-failed.png
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://foo/bar/ui/resourcedictionary/icon-failed.pngd
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://foo/ui/customerrorview.xaml
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://foo/ui/installerfooter.xaml
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://geo.lavasoft.com
Source: WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://geo.lavasoft.com/
Source: Newtonsoft.Json.dll.0.dr	String found in binary or memory: http://james.newtonking.com/projects/json
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://localhost:9008Fhttp://localhost:9008/webcompanion/4http://rt.webcompanion.com
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://ocsp.digicert.com0A
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://ocsp.digicert.com0C
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://ocsp.digicert.com0X
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://ocsp.entrust.net00
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://ocsp.entrust.net01
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://ocsp.entrust.net02
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://rt.webcompanion.com/notifications/download/rt/typolist.txt.http://www.lavasoft.com6http://www
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://rt.webcompanion.com/notifications/download/rt/typolist.txt5Creating
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/actor/next
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/encoding/
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/soap/envelope/
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/fault
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D54000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DC6000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://staging-cloudflow.lavasoft.net/v1/event-stat-wc
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/$
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/:WebHttpBinding4
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/GetComponentsInfoByProductT
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/GetComponentsInfoT
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/GetComponentsVersionInfoT
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/GetProductInfoT
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/ILocalyHostedServiceInstaller/ChangeScreen
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/ILocalyHostedServiceInstaller/ChangeScreenResponse
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/ILocalyHostedServiceInstaller/GetDropDownValues
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: http://tempuri.org/ILocalyHostedServiceInstaller/GetDropDownValuesResponse
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/SignZipInstallerByProductT
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/SignZipInstallerT
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://tempuri.org/T
Source: Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: http://wc-update-service.lavasoft.com/components.asmx
Source: Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: http://wc-update-service.lavasoft.com/update.asmx
Source: Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: http://wcdownloadercdn.lavasoft.com/13.0.0.1080/WebCompanion-13.0.0.1080-prod.zip
Source: Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: http://wcdownloadercdn.lavasoft.com/13.0.0.1080/webinstaller-13.0.0.1080-prod.zip
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://www.entrust.net/rpa0
Source: Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://www.entrust.net/rpa03
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://www.lavasoft.com
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: http://www.webcompanion.com
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DAD000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D54000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D51000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D4B000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://acs.lavasoft.com/api/v2/url/blacklist
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DAD000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D54000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D51000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D4B000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://acs.lavasoft.com/api/v2/url/permanentwhitelist
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://acs.lavasoft.comZhttps://acs.lavasoft.com/api/v2/url/blacklistlhttps://acs.lavasoft.com/api/
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://acscdn.lavasoft.com/urlnotificationlist.json
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://acscdn.lavasoft.comhhttps://acscdn.lavasoft.com/urlnotificationlist.json0https://webcompanio
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://featureflags.lavasoft.com
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://featureflags.lavasoft.com/api/Update/WC
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://featureflags.lavasoft.com/api/Update/WCyhttps://sandbox-featureflags-api.lavasoft.net/api/fe
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D7F000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://featureflags.lavasoft.com/api/feature/WC
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://featureflags.lavasoft.com/api/feature/WC$https://flwadw.comFhttps://flwadw.com/v1/event-stat
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://flow.lavasoft.com/v1/event-stat/v1/event-stat
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DC6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DC6000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://flwadw.com/v1/event-stat
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DC6000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://flwadw.com/v1/event-stat-wc
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com/v1/event-stat-wc?Type=ErrorInstall&ProductID=wc&EventVerLR
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com/v1/event-stat-wc?Type=ErrorInstall&ProductID=wc&EventVersion=1
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002E26000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002F35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com/v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com/v1/event-stat?Type=ErrorInstall&ProductID=wc&EventVersion=1
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002E26000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002F35000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com/v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002E26000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com/v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1Hs
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DC6000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://flwadw.com/v1/event-stat?Type=Start&ProductID=wc&EventVersion=1
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://flwadw.com/v1/event-statJhttp://staging-cloudflow.lavasoft.netlhttp://staging-cloudflow.lava
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://partner-tracking.lavasoft.com/api/Tracking/Decrypt
Source: Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DAD000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D54000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D51000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D4B000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr, WcInstaller.log.1.dr	String found in binary or memory: https://rt.webcompanion.com/notifications/download/rt/dci/latest/Webprotection.zip
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://rt.webcompanion.com/notifications/download/rt/dci/latest/Webprotection.zipHs
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://sandbox-featureflags-api.lavasoft.net/api/Update/WC
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D7F000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://sandbox-featureflags-api.lavasoft.net/api/feature/WC
Source: Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: https://staging-webcompanion.lavasoft.net/dci/4.0.0.14/Webprotection.zip
Source: Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanion-13.0.0.1080-internal.zip
Source: Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-internal.exe
Source: Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: https://wcdownloader-qa.lavasoft.com/13.0.0.1080/webinstaller-13.0.0.1080-internal.zip
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp	String found in binary or memory: https://wcdownloadercdn.lavasoft.com
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FF2000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr	String found in binary or memory: https://wcdownloadercdn.lavasoft.com/13.0.0.1080/WCInstaller_NonAdmin.exe
Source: Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	String found in binary or memory: https://wcdownloadercdn.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-prod.exe
Source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FF2000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr	String found in binary or memory: https://wcdownloadercdn.lavasoft.com/13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://webcompanion.com/en/help.php
Source: WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://webcompanion.com/en/install.php?partner=
Source: WcInstaller.log.1.dr	String found in binary or memory: https://webcompanion.com/images/favicon.ico
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://webcompanion.com/uninstall.php?utm_source=wc&utm_medium=
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://webcompanion.com/unsafe.php?utm_source=WCHhttps://webcompanion.com/en/help.php.https://www.a
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://webcompanion.com/unsafe.php?utm_source=WCghttp://pp.webcompanion.com/unsafe.php?utm_source=W
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://www.adaware.com/privacy-policy
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	String found in binary or memory: https://www.adaware.com/terms-of-use

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 104.16.148.130:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.149:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.130:443 -> 192.168.2.4:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.149.130:443 -> 192.168.2.4:49768 version: TLS 1.2

Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00416076	0_2_00416076
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_0040E38E	0_2_0040E38E
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00412480	0_2_00412480
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_004039C8	0_2_004039C8
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00418CC1	0_2_00418CC1
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00418D9B	0_2_00418D9B
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_02AE0DE0	1_2_02AE0DE0
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_02AEF0D0	1_2_02AEF0D0
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_02AEE390	1_2_02AEE390
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_058C3FE0	1_2_058C3FE0
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_060A0F90	1_2_060A0F90
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06AE7120	1_2_06AE7120
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06AEAA60	1_2_06AEAA60
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06B99E60	1_2_06B99E60
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06B9A730	1_2_06B9A730
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06B9B1B0	1_2_06B9B1B0
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06B99B18	1_2_06B99B18

Source: C:\Users\user\Desktop\Setup.exe	Code function: String function: 00413724 appears 176 times
Source: C:\Users\user\Desktop\Setup.exe	Code function: String function: 00403A63 appears 33 times

Source: Setup.exe, 00000000.00000000.1660858437.0000000000427000.00000002.00000001.01000000.00000003.sdmp	Binary or memory string: OriginalFilenameInstaller.exeR vs Setup.exe
Source: Setup.exe, 00000000.00000003.1661498913.0000000001F11000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameInstaller.exeR vs Setup.exe
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameWebCompanion-Installer.resources.dllL vs Setup.exe
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameNewtonsoft.Json.dll4 vs Setup.exe
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: get_OriginalFilename vs Setup.exe
Source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameWebCompanion.exe> vs Setup.exe
Source: Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: get_OriginalFilename vs Setup.exe
Source: Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameWebCompanion.exe> vs Setup.exe
Source: Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameWebCompanion-Installer.resources.dllL vs Setup.exe
Source: Setup.exe, 00000000.00000003.1662804456.0000000002011000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameWebCompanion-Installer.resources.dllL vs Setup.exe
Source: Setup.exe, 00000000.00000003.1662804456.0000000002011000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: OriginalFilenameICSharpCode.SharpZipLib.dll8 vs Setup.exe
Source: Setup.exe	Binary or memory string: OriginalFilenameInstaller.exeR vs Setup.exe

Source: Setup.exe

Static PE information: RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, LARGE_ADDRESS_AWARE, 32BIT_MACHINE

Source: ICSharpCode.SharpZipLib.dll.0.dr, InflaterInputBuffer.cs	Cryptographic APIs: 'TransformBlock'
Source: ICSharpCode.SharpZipLib.dll.0.dr, DeflaterOutputStream.cs	Cryptographic APIs: 'TransformBlock'
Source: ICSharpCode.SharpZipLib.dll.0.dr, ZipAESTransform.cs	Cryptographic APIs: 'TransformBlock'

Source: WebCompanion-Installer.exe.0.dr, RemoveRegistry.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()
Source: WebCompanion-Installer.exe.0.dr, InstallUtils.cs	Security API names: System.IO.DirectoryInfo.SetAccessControl(System.Security.AccessControl.DirectorySecurity)
Source: WebCompanion-Installer.exe.0.dr, InstallUtils.cs	Security API names: System.IO.DirectoryInfo.GetAccessControl()
Source: WebCompanion-Installer.exe.0.dr, InstallUtils.cs	Security API names: System.Security.AccessControl.FileSystemSecurity.AddAccessRule(System.Security.AccessControl.FileSystemAccessRule)
Source: WebCompanion-Installer.exe.0.dr, App.cs	Security API names: System.Security.Principal.WindowsPrincipal.IsInRole(System.Security.Principal.WindowsBuiltInRole)
Source: WebCompanion-Installer.exe.0.dr, App.cs	Security API names: System.Security.Principal.WindowsIdentity.GetCurrent()

Source: classification engine

Classification label: mal45.troj.winEXE@3/17@4/3

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

File created: C:\Users\user\AppData\Roaming\Lavasoft

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Mutant created: NULL

Source: C:\Users\user\Desktop\Setup.exe

File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380

Jump to behavior

Source: Setup.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\Setup.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: Setup.exe	Virustotal: Detection: 41%
Source: Setup.exe	ReversingLabs: Detection: 29%

Source: WebCompanion-Installer.exe	String found in binary or memory: WebCompanion-Installer.resources
Source: WebCompanion-Installer.exe	String found in binary or memory: WebCompanion-Installer.resources.dll
Source: Setup.exe	String found in binary or memory: RunProgram="WebCompanion-Installer.exe --savename=Setup.exe --partner=IN240402 --nonadmin --direct --tych --campaign=21794599196 --version=13.900.0.1080"

Source: C:\Users\user\Desktop\Setup.exe

File read: C:\Users\user\Desktop\Setup.exe

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\Setup.exe "C:\Users\user\Desktop\Setup.exe"
Source: C:\Users\user\Desktop\Setup.exe	Process created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe .\WebCompanion-Installer.exe --savename=Setup.exe --partner=IN240402 --nonadmin --direct --tych --campaign=21794599196 --version=13.900.0.1080
Source: C:\Users\user\Desktop\Setup.exe	Process created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe .\WebCompanion-Installer.exe --savename=Setup.exe --partner=IN240402 --nonadmin --direct --tych --campaign=21794599196 --version=13.900.0.1080	Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: acgenral.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: winmm.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: samcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: msacm32.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: mpr.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: winmmbase.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\Desktop\Setup.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: mscoree.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: vcruntime140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: ucrtbase_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: msvcp140_clr0400.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: httpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: rasapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: rasman.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: rtutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: secur32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: wbemcomn.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: amsi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: d3d9.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: winsta.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: msctfui.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: uiautomationcore.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Section loaded: d3dcompiler_47.dll	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

File opened: C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorrc.dll

Jump to behavior

Source: Setup.exe

Static PE information: certificate valid

Source:	Binary string: Application/WebCompanion-Installer.pdb source: WebCompanion.zip.1.dr
Source:	Binary string: &Application/WebCompanion-Installer.pdb source: WebCompanion.zip.1.dr
Source:	Binary string: c:\Temp\Release\Working\Newtonsoft.Json\Src\Newtonsoft.Json\obj\Release\Newtonsoft.Json.pdb source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, WebCompanion-Installer.exe, 00000001.00000002.3515345052.00000000066E2000.00000002.00000001.01000000.00000007.sdmp, Newtonsoft.Json.dll.0.dr
Source:	Binary string: eApplication/WebCompanion-Installer.pdbPK source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FDE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FDA000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FE6000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FE2000.00000004.00000800.00020000.00000000.sdmp, WebCompanion.zip.1.dr
Source:	Binary string: Application/WebCompanion-Installer.pdbPK source: WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FDE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FDA000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FE6000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FE2000.00000004.00000800.00020000.00000000.sdmp, WebCompanion.zip.1.dr
Source:	Binary string: c:\Windows\Temp\drone-ME4saUyIgSY9rSgY\drone\src\WebCompanion\Installer\WebCompanionInstaller\obj\Release\WebCompanion-Installer.pdb source: Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr

Source: C:\Users\user\Desktop\Setup.exe

Code function: 0_2_004180F0 LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_004180F0

Source: Setup.exe	Static PE information: real checksum: 0x89be3 should be: 0x93a47
Source: WebCompanion-Installer.resources.dll8.0.dr	Static PE information: real checksum: 0x0 should be: 0xa6a7
Source: WebCompanion-Installer.resources.dll5.0.dr	Static PE information: real checksum: 0x0 should be: 0xc6c2
Source: WebCompanion-Installer.resources.dll1.0.dr	Static PE information: real checksum: 0x0 should be: 0x3e3f
Source: WebCompanion-Installer.resources.dll7.0.dr	Static PE information: real checksum: 0x0 should be: 0xcb69
Source: WebCompanion-Installer.resources.dll2.0.dr	Static PE information: real checksum: 0x0 should be: 0x4885
Source: WebCompanion-Installer.resources.dll4.0.dr	Static PE information: real checksum: 0x0 should be: 0x5659
Source: WebCompanion-Installer.resources.dll6.0.dr	Static PE information: real checksum: 0x0 should be: 0xd8a3
Source: WebCompanion-Installer.resources.dll0.0.dr	Static PE information: real checksum: 0x0 should be: 0xe72f
Source: WebCompanion-Installer.resources.dll.0.dr	Static PE information: real checksum: 0x0 should be: 0x2ab0
Source: WebCompanion-Installer.resources.dll3.0.dr	Static PE information: real checksum: 0x0 should be: 0x842b

Source: Setup.exe

Static PE information: section name: .sxdata

Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00411130 push ecx; mov dword ptr [esp], ecx	0_2_00411131
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00413724 push eax; ret	0_2_00413742
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_00413A90 push eax; ret	0_2_00413ABE
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06332050 push ss; retf	1_2_06332073
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_058CCA68 pushfd ; iretd	1_2_058CCB69
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_058CB5E2 push esp; ret	1_2_058CB5E9
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_058CB642 pushfd ; ret	1_2_058CB649
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_058CDD0E push es; ret	1_2_058CDD10
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_058CDD20 push es; ret	1_2_058CDD30
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_058CDD4E push es; ret	1_2_058CDD50
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_058CDD60 push es; ret	1_2_058CDD70
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_058CDC80 push es; ret	1_2_058CDCD0
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_058CDCEE push es; ret	1_2_058CDCF0
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_058CDC60 push es; ret	1_2_058CDC70
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_058CCB37 pushfd ; iretd	1_2_058CCB69
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_060A1F70 push es; retf	1_2_060A1FCA
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_060A1FCB push es; retf	1_2_060A1FCA
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06AEA68A pushad ; iretd	1_2_06AEA691
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06AE4D09 push FFFFFF8Bh; ret	1_2_06AE4CD7
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06AE4A21 push es; ret	1_2_06AE4A30
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06AED051 push 4806ADF1h; ret	1_2_06AED05D
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06B9F66B push esp; retf	1_2_06B9F679
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06B9D718 push edi; retf	1_2_06B9D732
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06B9EA95 push cs; retf	1_2_06B9EA6A
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06B9EA65 push cs; retf	1_2_06B9EA6A
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06B9EB6F push 006ACAE0h; retf 006Ah	1_2_06B9EB7A
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06B9FB47 pushfd ; iretd	1_2_06B9FB51
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06B9F1A3 pushfd ; iretd	1_2_06B9F1D1
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Code function: 1_2_06B9F193 pushad ; iretd	1_2_06B9F1A1

Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\es-ES\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\Newtonsoft.Json.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\zh-CHS\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\en-US\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\de-DE\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ja-JP\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ru-RU\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\pt-BR\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\it-IT\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\fr-CA\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\tr-TR\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	File created: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ICSharpCode.SharpZipLib.dll	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

File created: C:\Users\user\AppData\Local\Temp\WcInstaller.log

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\AutoUpdate			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Registry key monitored for changes: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Memory allocated: 2AA0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Memory allocated: 2CE0000 memory reserve \| memory write watch	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Memory allocated: 2C30000 memory reserve \| memory write watch	Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Thread delayed: delay time: 600000			Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\es-ES\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\Newtonsoft.Json.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\zh-CHS\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\en-US\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ja-JP\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\de-DE\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ru-RU\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\pt-BR\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\it-IT\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\fr-CA\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\tr-TR\WebCompanion-Installer.resources.dll	Jump to dropped file
Source: C:\Users\user\Desktop\Setup.exe	Dropped PE file which has not been started: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ICSharpCode.SharpZipLib.dll	Jump to dropped file

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe TID: 5652	Thread sleep time: -922337203685477s >= -30000s			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe TID: 5652	Thread sleep time: -600000s >= -30000s			Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

WMI Queries: IWbemServices::ExecQuery - root\cimv2 : Select * from Win32_ComputerSystem

Source: C:\Users\user\Desktop\Setup.exe

Code function: 0_2_00405434 FindFirstFileA,FindFirstFileW,

0_2_00405434

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Thread delayed: delay time: 922337203685477			Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Thread delayed: delay time: 600000			Jump to behavior

Source: WebCompanion-Installer.exe.0.dr	Binary or memory string: vmware
Source: WebCompanion-Installer.exe, 00000001.00000002.3511258459.000000000106E000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW%SystemRoot%\system32\mswsock.dll

Source: C:\Users\user\Desktop\Setup.exe

API call chain: ExitProcess graph end node

graph_0-16392

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe

Code function: 0_2_004180F0 LoadLibraryA,GetProcAddress,GetProcAddress,GetProcAddress,GetProcAddress,

0_2_004180F0

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Process token adjusted: Debug

Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_0041561A SetUnhandledExceptionFilter,		0_2_0041561A
Source: C:\Users\user\Desktop\Setup.exe	Code function: 0_2_0041562C SetUnhandledExceptionFilter,		0_2_0041562C

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel\v4.0_4.0.0.0__b77a5c561934e089\System.ServiceModel.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Web\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Web.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\SMDiagnostics\v4.0_4.0.0.0__b77a5c561934e089\SMDiagnostics.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ServiceModel.Internals\v4.0_4.0.0.0__31bf3856ad364e35\System.ServiceModel.Internals.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Transactions\v4.0_4.0.0.0__b77a5c561934e089\System.Transactions.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.IdentityModel\v4.0_4.0.0.0__b77a5c561934e089\System.IdentityModel.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\Newtonsoft.Json.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.ComponentModel.DataAnnotations\v4.0_4.0.0.0__31bf3856ad364e35\System.ComponentModel.DataAnnotations.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_32\System.Data\v4.0_4.0.0.0__b77a5c561934e089\System.Data.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\en-US\WebCompanion-Installer.resources.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\System.Drawing\v4.0_4.0.0.0__b03f5f7f11d50a3a\System.Drawing.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXmlLinq\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXmlLinq.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\PresentationFramework-SystemXml\v4.0_4.0.0.0__b77a5c561934e089\PresentationFramework-SystemXml.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationTypes\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationTypes.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Microsoft.NET\assembly\GAC_MSIL\UIAutomationProvider\v4.0_4.0.0.0__31bf3856ad364e35\UIAutomationProvider.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ICSharpCode.SharpZipLib.dll VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior

Source: C:\Users\user\Desktop\Setup.exe

Code function: 0_2_004148D4 EntryPoint,GetVersion,GetCommandLineA,GetStartupInfoA,GetModuleHandleA,

0_2_004148D4

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography MachineGuid

Jump to behavior

Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

WMI Queries: IWbemServices::ExecQuery - root\SecurityCenter : SELECT * FROM AntivirusProduct

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	2 Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Query Registry	Remote Services	11 Archive Collected Data	11 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	2 Command and Scripting Interpreter	Boot or Logon Initialization Scripts	1 DLL Side-Loading	1 Disable or Modify Tools	LSASS Memory	121 Security Software Discovery	Remote Desktop Protocol	Data from Removable Media	1 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	1 Native API	Logon Script (Windows)	Logon Script (Windows)	41 Virtualization/Sandbox Evasion	Security Account Manager	1 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Process Injection	NTDS	41 Virtualization/Sandbox Evasion	Distributed Component Object Model	Input Capture	4 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	11 Deobfuscate/Decode Files or Information	LSA Secrets	1 File and Directory Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact
Domain Properties	Botnet	Replication Through Removable Media	Scheduled Task	RC Scripts	RC Scripts	2 Obfuscated Files or Information	Cached Domain Credentials	23 System Information Discovery	VNC	GUI Input Capture	Multiband Communication	Data Transfer Size Limits	Service Stop
DNS	Web Services	External Remote Services	Systemd Timers	Startup Items	Startup Items	1 DLL Side-Loading	DCSync	Remote System Discovery	Windows Remote Management	Web Portal Capture	Commonly Used Port	Exfiltration Over C2 Channel	Inhibit System Recovery

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
Setup.exe	42%	Virustotal		Browse
Setup.exe	29%	ReversingLabs	Win32.PUA.Generic

Dropped Files

Source	Detection	Scanner	Label
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ICSharpCode.SharpZipLib.dll	4%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\Newtonsoft.Json.dll	4%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe	21%	ReversingLabs	Win32.PUA.Generic
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\de-DE\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\en-US\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\es-ES\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\fr-CA\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\it-IT\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ja-JP\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\pt-BR\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ru-RU\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\tr-TR\WebCompanion-Installer.resources.dll	0%	ReversingLabs
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\zh-CHS\WebCompanion-Installer.resources.dll	0%	ReversingLabs

Source	Detection	Scanner	Label
http://defaultcontainer/WebCompanion-Installer;component/ui/customerrorview.xamld	0%	Avira URL Cloud	safe
http://foo/bar/ui/installerfooter.bamld	0%	Avira URL Cloud	safe
https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanion-13.0.0.1080-internal.zip	0%	Avira URL Cloud	safe
https://acs.lavasoft.comZhttps://acs.lavasoft.com/api/v2/url/blacklistlhttps://acs.lavasoft.com/api/	0%	Avira URL Cloud	safe
http://foo/bar/ui/resourcedictionary/icon-failed.pngd	0%	Avira URL Cloud	safe
http://foo/bar/ui/customerrorview.bamld	0%	Avira URL Cloud	safe
https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-internal.exe	0%	Avira URL Cloud	safe
http://defaultcontainer/WebCompanion-Installer;component/ui/installerheader.xamld	0%	Avira URL Cloud	safe
http://foo/UI/ResourceDictionary/icon-failed.png	0%	Avira URL Cloud	safe
http://www.lavasoft.com	0%	Avira URL Cloud	safe
https://sandbox-featureflags-api.lavasoft.net/api/Update/WC	0%	Avira URL Cloud	safe
http://foo/ui/customerrorview.xaml	0%	Avira URL Cloud	safe
https://www.adaware.com/privacy-policy	0%	Avira URL Cloud	safe
http://defaultcontainer/WebCompanion-Installer;component/ui/installerheaderextension.xamld	0%	Avira URL Cloud	safe
http://www.webcompanion.com	0%	Avira URL Cloud	safe
https://sandbox-featureflags-api.lavasoft.net/api/feature/WC	0%	Avira URL Cloud	safe
http://defaultcontainer/UI/ResourceDictionary/icon-failed.pngd	0%	Avira URL Cloud	safe
https://staging-webcompanion.lavasoft.net/dci/4.0.0.14/Webprotection.zip	0%	Avira URL Cloud	safe
https://wcdownloader-qa.lavasoft.com/13.0.0.1080/webinstaller-13.0.0.1080-internal.zip	0%	Avira URL Cloud	safe
http://foo/bar/ui/installerfooter.baml	0%	Avira URL Cloud	safe
http://defaultcontainer/WebCompanion-Installer;component/ui/installerfooter.xamld	0%	Avira URL Cloud	safe
http://foo/ui/installerfooter.xaml	0%	Avira URL Cloud	safe
https://www.adaware.com/terms-of-use	0%	Avira URL Cloud	safe
http://localhost:9008Fhttp://localhost:9008/webcompanion/4http://rt.webcompanion.com	0%	Avira URL Cloud	safe
http://staging-cloudflow.lavasoft.net/v1/event-stat-wc	0%	Avira URL Cloud	safe
https://acscdn.lavasoft.comhhttps://acscdn.lavasoft.com/urlnotificationlist.json0https://webcompanio	0%	Avira URL Cloud	safe
http://foo/bar/ui/customerrorview.baml	0%	Avira URL Cloud	safe
http://foo/bar/ui/resourcedictionary/icon-failed.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
geo.lavasoft.com	104.16.148.130	true	false	high
wcdownloadercdn.lavasoft.com	104.16.149.130	true	false	high
featureflags.lavasoft.com	104.16.148.130	true	false	high
flwadw.com	104.18.26.149	true	false	high

Contacted URLs

Name	Malicious	Reputation
https://flwadw.com/v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1	false	high
https://featureflags.lavasoft.com/api/Update/WC	false	high
https://flwadw.com/v1/event-stat-wc?Type=ErrorInstall&ProductID=wc&EventVersion=1	false	high
https://wcdownloadercdn.lavasoft.com/13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip	false	high
https://flwadw.com/v1/event-stat?Type=ErrorInstall&ProductID=wc&EventVersion=1	false	high
http://geo.lavasoft.com/	false	high
https://featureflags.lavasoft.com/api/feature/WC	false	high
https://flwadw.com/v1/event-stat?Type=Start&ProductID=wc&EventVersion=1	false	high
https://flwadw.com/v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1	false	high
https://flwadw.com/v1/event-stat-wc?Type=Start&ProductID=wc&EventVersion=1	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://tempuri.org/GetComponentsVersionInfoT	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://featureflags.lavasoft.com/api/Update/WCyhttps://sandbox-featureflags-api.lavasoft.net/api/fe	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://flwadw.com/v1/event-stat	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DC6000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://tempuri.org/	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanion-13.0.0.1080-internal.zip	Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false	Avira URL Cloud: safe	unknown
http://tempuri.org/:WebHttpBinding4	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/ILocalyHostedServiceInstaller/GetDropDownValues	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://rt.webcompanion.com/notifications/download/rt/typolist.txt.http://www.lavasoft.com6http://www	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://defaultcontainer/WebCompanion-Installer;component/ui/customerrorview.xamld	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://aia.entrust.net/evcs2-chain.p7c01	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
https://acscdn.lavasoft.com/urlnotificationlist.json	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D54000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.entrust.net/rpa0	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
http://foo/UI/ResourceDictionary/icon-failed.png	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://wcdownloadercdn.lavasoft.com/13.0.0.1080/webinstaller-13.0.0.1080-prod.zip	Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false		high
http://schemas.xmlsoap.org/soap/encoding/	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.entrust.net/rpa03	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
https://featureflags.lavasoft.com	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D7F000.00000004.00000800.00020000.00000000.sdmp	false		high
https://flow.lavasoft.com/v1/event-stat/v1/event-stat	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://foo/bar/ui/installerfooter.bamld	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-internal.exe	Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false	Avira URL Cloud: safe	unknown
https://webcompanion.com/uninstall.php?utm_source=wc&utm_medium=	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://flwadw.com	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DC6000.00000004.00000800.00020000.00000000.sdmp	false		high
https://acs.lavasoft.comZhttps://acs.lavasoft.com/api/v2/url/blacklistlhttps://acs.lavasoft.com/api/	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
https://wcdownloadercdn.lavasoft.com/13.0.0.1080/WCInstaller_NonAdmin.exe	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FF2000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr	false		high
https://rt.webcompanion.com/notifications/download/rt/dci/latest/Webprotection.zipHs	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp	false		high
http://foo/bar/ui/customerrorview.bamld	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://foo/bar/ui/resourcedictionary/icon-failed.pngd	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/GetComponentsInfoByProductT	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://geo.lavasoft.com	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D54000.00000004.00000800.00020000.00000000.sdmp	false		high
http://www.lavasoft.com	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://webcompanion.com/unsafe.php?utm_source=WCHhttps://webcompanion.com/en/help.php.https://www.a	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://defaultcontainer/WebCompanion-Installer;component/ui/installerheader.xamld	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://sandbox-featureflags-api.lavasoft.net/api/Update/WC	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
https://webcompanion.com/unsafe.php?utm_source=WCghttp://pp.webcompanion.com/unsafe.php?utm_source=W	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://wc-update-service.lavasoft.com/update.asmx	Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false		high
http://wc-update-service.lavasoft.com/components.asmx	Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false		high
http://tempuri.org/SignZipInstallerT	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://foo/ui/customerrorview.xaml	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/GetComponentsInfoT	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://crl.entrust.net/g2ca.crl0	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
https://wcdownloadercdn.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-prod.exe	Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false		high
https://flwadw.com/v1/event-stat-wc	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DC6000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://tempuri.org/ILocalyHostedServiceInstaller/GetDropDownValuesResponse	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://ocsp.entrust.net02	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
http://ocsp.entrust.net01	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
http://ocsp.entrust.net00	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
https://wcdownloadercdn.lavasoft.com	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp	false		high
https://acs.lavasoft.com/api/v2/url/permanentwhitelist	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DAD000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D54000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D51000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D4B000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr, WebCompanion-Installer.exe.0.dr	false		high
http://schemas.xmlsoap.org/soap/envelope/	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://www.adaware.com/privacy-policy	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
https://webcompanion.com/images/favicon.ico	WcInstaller.log.1.dr	false		high
http://www.webcompanion.com	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
https://rt.webcompanion.com/notifications/download/rt/dci/latest/Webprotection.zip	Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DAD000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D54000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D51000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D4B000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr, WcInstaller.log.1.dr	false		high
http://defaultcontainer/WebCompanion-Installer;component/ui/installerheaderextension.xamld	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://tempuri.org/ILocalyHostedServiceInstaller/ChangeScreenResponse	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://crl.entrust.net/csbr1.crl0	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high
http://schemas.xmlsoap.org/ws/2004/08/addressing/fault	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://sandbox-featureflags-api.lavasoft.net/api/feature/WC	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D7F000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://defaultcontainer/UI/ResourceDictionary/icon-failed.pngd	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://featureflags.lavasoft.com/api/feature/WC$https://flwadw.comFhttps://flwadw.com/v1/event-stat	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://staging-webcompanion.lavasoft.net/dci/4.0.0.14/Webprotection.zip	Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false	Avira URL Cloud: safe	unknown
http://rt.webcompanion.com/notifications/download/rt/typolist.txt5Creating	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://wcdownloader-qa.lavasoft.com/13.0.0.1080/webinstaller-13.0.0.1080-internal.zip	Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false	Avira URL Cloud: safe	unknown
http://tempuri.org/GetProductInfoT	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://foo/bar/ui/installerfooter.baml	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://flwadw.com/v1/event-stat-wc?Type=ErrorInstall&ProductID=wc&EventVerLR	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/$	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://webcompanion.com/en/install.php?partner=	WebCompanion-Installer.exe.0.dr	false		high
https://webcompanion.com/en/help.php	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
https://www.adaware.com/terms-of-use	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
http://schemas.xmlsoap.org/ws/2004/08/addressing/role/anonymous	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	false		high
http://tempuri.org/ILocalyHostedServiceInstaller/ChangeScreen	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp	false		high
https://flwadw.com/v1/event-statJhttp://staging-cloudflow.lavasoft.netlhttp://staging-cloudflow.lava	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://foo/ui/installerfooter.xaml	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://partner-tracking.lavasoft.com/api/Tracking/Decrypt	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://defaultcontainer/WebCompanion-Installer;component/ui/installerfooter.xamld	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://flwadw.com/v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1Hs	WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002E26000.00000004.00000800.00020000.00000000.sdmp	false		high
http://localhost:9008Fhttp://localhost:9008/webcompanion/4http://rt.webcompanion.com	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
http://staging-cloudflow.lavasoft.net/v1/event-stat-wc	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DC6000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
http://james.newtonking.com/projects/json	Newtonsoft.Json.dll.0.dr	false		high
http://foo/bar/ui/customerrorview.baml	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://acs.lavasoft.com/api/v2/url/blacklist	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002DAD000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D54000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D51000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002D4B000.00000004.00000800.00020000.00000000.sdmp, WcInstaller.log.1.dr, WebCompanion-Installer.exe.0.dr	false		high
https://acscdn.lavasoft.comhhttps://acscdn.lavasoft.com/urlnotificationlist.json0https://webcompanio	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false	Avira URL Cloud: safe	unknown
http://tempuri.org/T	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002CE1000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://tempuri.org/SignZipInstallerByProductT	Setup.exe, 00000000.00000003.1662804456.0000000002048000.00000004.00000020.00020000.00000000.sdmp, Setup.exe, 00000000.00000003.1663164696.0000000001E10000.00000004.00001000.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000000.1663319290.0000000000922000.00000002.00000001.01000000.00000004.sdmp, WebCompanion-Installer.exe.0.dr	false		high
http://foo/bar/ui/resourcedictionary/icon-failed.png	WebCompanion-Installer.exe, 00000001.00000002.3511577925.00000000031A6000.00000004.00000800.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://wcdownloadercdn.lavasoft.com/13.0.0.1080/WebCompanion-13.0.0.1080-prod.zip	Setup.exe, 00000000.00000003.1661674137.000000000201E000.00000004.00000020.00020000.00000000.sdmp, WebCompanion-Installer.exe, 00000001.00000002.3511577925.0000000002FFE000.00000004.00000800.00020000.00000000.sdmp, WebCompanion-Installer.exe.config.0.dr	false		high
http://crl.entrust.net/evcs2.crl0	Setup.exe, ICSharpCode.SharpZipLib.dll.0.dr, Newtonsoft.Json.dll.0.dr, WebCompanion-Installer.exe.0.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.16.149.130	wcdownloadercdn.lavasoft.com	United States	13335	CLOUDFLARENETUS	false
104.16.148.130	geo.lavasoft.com	United States	13335	CLOUDFLARENETUS	false
104.18.26.149	flwadw.com	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1584712
Start date and time:	2025-01-06 09:40:42 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 7m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Run name:	Run with higher sleep bypass
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Setup.exe
Detection:	MAL
Classification:	mal45.troj.winEXE@3/17@4/3
EGA Information:	Successful, ratio: 50%
HCA Information:	Successful, ratio: 100% Number of executed functions: 382 Number of non-executed functions: 34
Cookbook Comments:	Found application associated with file extension: .exe Sleeps bigger than 100000000ms are automatically reduced to 1000ms Sleep loops longer than 100000000ms are bypassed. Single calls with delay of 100000000ms and higher are ignored

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.56.254.164, 4.175.87.197, 13.107.246.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, ocsp.digicert.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, ocsp.entrust.net, fe3cr.delivery.mp.microsoft.com
Execution Graph export aborted for target WebCompanion-Installer.exe, PID 5040 because it is empty
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtAllocateVirtualMemory calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Report size getting too big, too many NtReadVirtualMemory calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.16.149.130	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	WebCompanionInstaller-12.901.5.1061-prod.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	FileZilla_3.67.1_win64_sponsored-setup.exe	Get hash	malicious	Unknown	Browse	flow.lavasoft.com/v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1
	FileZilla_3.67.1_win64_sponsored-setup.exe	Get hash	malicious	Unknown	Browse	flow.lavasoft.com/v1/event-stat-wc?Type=Activity&ProductID=wc&EventVersion=1
	SecuriteInfo.com.Program.Unwanted.2818.3154.4230.exe	Get hash	malicious	Petite Virus	Browse	flow.lavasoft.com/v1/event-stat?ProductID=IS&Type=StubBundleStart
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
104.16.148.130	http://wcdownloadercdn.lavasoft.com/8.9.0.1091/WcInstaller.exe	Get hash	malicious	Unknown	Browse	flow.lavasoft.com/v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	FileZilla_3.67.1_win64_sponsored-setup.exe	Get hash	malicious	Unknown	Browse	flow.lavasoft.com/v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1
	FileZilla_3.67.1_win64_sponsored-setup.exe	Get hash	malicious	Unknown	Browse	wcdownloadercdn.lavasoft.com/9.1.0.993/WebCompanion-9.1.0.993-prod.zip
	SecuriteInfo.com.Program.Unwanted.2818.3154.4230.exe	Get hash	malicious	Petite Virus	Browse	flow.lavasoft.com/v1/event-stat?ProductID=IS&Type=StubBundleStart
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/
	Setup.exe	Get hash	malicious	Unknown	Browse	geo.lavasoft.com/

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
wcdownloadercdn.lavasoft.com	Setup (3).exe.zip	Get hash	malicious	Unknown	Browse	104.16.149.130
	http://wcdownloadercdn.lavasoft.com/8.9.0.1091/WcInstaller.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
geo.lavasoft.com	Setup (3).exe.zip	Get hash	malicious	Unknown	Browse	104.16.149.130
	http://home45insurance.blogspot.com	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
featureflags.lavasoft.com	Setup (3).exe.zip	Get hash	malicious	Unknown	Browse	104.16.148.130
	http://home45insurance.blogspot.com	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.149.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130
	Setup.exe	Get hash	malicious	Unknown	Browse	104.16.148.130

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://www.boulderpeptide.org/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	104.17.25.14
	https://www.scribd.com/document/787929982/script-tlsfrance	Get hash	malicious	Unknown	Browse	104.18.66.57
	yxU3AgeVTi.exe	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	ITT # KRPBV2663 .doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	Ref#66001032.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	PI ITS15235.doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	un30brGAKP.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	P3A946MOFP.exe	Get hash	malicious	XWorm	Browse	162.159.135.234
	kP8EgMorTr.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
CLOUDFLARENETUS	https://www.boulderpeptide.org/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	104.17.25.14
	https://www.scribd.com/document/787929982/script-tlsfrance	Get hash	malicious	Unknown	Browse	104.18.66.57
	yxU3AgeVTi.exe	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	ITT # KRPBV2663 .doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	Ref#66001032.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	PI ITS15235.doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	un30brGAKP.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	P3A946MOFP.exe	Get hash	malicious	XWorm	Browse	162.159.135.234
	kP8EgMorTr.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
CLOUDFLARENETUS	https://www.boulderpeptide.org/	Get hash	malicious	CAPTCHA Scam ClickFix	Browse	104.17.25.14
	https://www.scribd.com/document/787929982/script-tlsfrance	Get hash	malicious	Unknown	Browse	104.18.66.57
	yxU3AgeVTi.exe	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	ITT # KRPBV2663 .doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3
	Ref#66001032.exe	Get hash	malicious	AgentTesla	Browse	104.26.12.205
	PI ITS15235.doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.96.3
	un30brGAKP.exe	Get hash	malicious	LummaC	Browse	188.114.97.3
	P3A946MOFP.exe	Get hash	malicious	XWorm	Browse	162.159.135.234
	kP8EgMorTr.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	188.114.97.3

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
3b5074b1b5d032e5620f69f9f700ff0e	yxU3AgeVTi.exe	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	104.16.149.130 104.16.148.130 104.18.26.149
	ITT # KRPBV2663 .doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	104.16.149.130 104.16.148.130 104.18.26.149
	Ref#66001032.exe	Get hash	malicious	AgentTesla	Browse	104.16.149.130 104.16.148.130 104.18.26.149
	PI ITS15235.doc	Get hash	malicious	DBatLoader, PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	104.16.149.130 104.16.148.130 104.18.26.149
	kP8EgMorTr.exe	Get hash	malicious	PureLog Stealer, Snake Keylogger, VIP Keylogger	Browse	104.16.149.130 104.16.148.130 104.18.26.149
	ny9LDJr6pA.exe	Get hash	malicious	Quasar	Browse	104.16.149.130 104.16.148.130 104.18.26.149
	jaTDEkWCbs.exe	Get hash	malicious	Quasar	Browse	104.16.149.130 104.16.148.130 104.18.26.149
	3LcZO15oTC.exe	Get hash	malicious	Unknown	Browse	104.16.149.130 104.16.148.130 104.18.26.149

Dropped Files

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ICSharpCode.SharpZipLib.dll	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse
	Setup.exe	Get hash	malicious	Unknown	Browse

Created / dropped Files

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ICSharpCode.SharpZipLib.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	213656
Entropy (8bit):	5.7590593524797615
Encrypted:	false
SSDEEP:	3072:LK1c/KCOAUXk31Vv91GOtJJKuE1iA5mGPB8qd9OTymIpn+64kRAclDwRNG95ZI4Q:Ge9OAQsFtJrGPBnmIRZUL
MD5:	0CFE19791546A96C6699657A94604596
SHA1:	5D1A1B74CCA9F74FFFEBCB583661C02E4CA626DD
SHA-256:	56FDFD148F0D60805B2873A5A49739909001D11789B75DAB2B0EA8E55BC60913
SHA-512:	586CC695A2C3C03008D0A1032C221CD3384B5F4363E83C9D903753FB1DAD65B340BC8CD0659F7F891A641F8BD7535C9B889219842045854AA98CD380F0FE4AA3
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 4%
Joe Sandbox View:	Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse Filename: Setup.exe, Detection: malicious, Browse
Reputation:	moderate, very likely benign file
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L......S...........!......... ........... ........@.. .......................@......sC....@.................................d...W........................2... ....................................................... ............... ..H............text........ ...................... ..`.rsrc...............................@..@.reloc....... ......................@..B........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\Newtonsoft.Json.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	438424
Entropy (8bit):	6.09887709092106
Encrypted:	false
SSDEEP:	6144:fHerwzLkqCG3uKWf4g6tUwoOkErUx5/Rsnaszr0tZDPEaN+YB5+GonYy:fHerIacuKUtOkESbKQrvB5+qy
MD5:	461C476F474A5F13D2EA9344AE6F70F6
SHA1:	8F74702B99F08277D4514C63956E2E69E8090073
SHA-256:	4F0EC6439B24652F16DF066F4A38B64518B5A874080EDA63DE45968545830F67
SHA-512:	E69080C205CD82EA2C056FA1328BBEC4C03CA3FDC3EE381C4FB44CB356247BE5FE4B8ADD53036DCB19CAC2C6D59B8E02F81932320EA534B5BA50DB80A0647017
Malicious:	false
Antivirus:	Antivirus: ReversingLabs, Detection: 4%
Reputation:	moderate, very likely benign file
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....L.R...........!.....t............... ........... ..............................%.....@.....................................K.......8............~...2..........x................................................ ............... ..H............text....s... ...t.................. ..`.rsrc...8............v..............@..@.reloc...............\|..............@..B........................H.......h...................X...P ......................................yK.N...f....i5.#I..xV. ..%BR..^.....t0"..z.%./.G'.j....{...2...k)w...'>.c..P..X.......n...h....E...ex..X/H].R.e.{..;&.-.'....{...."..}....V.(x.....(......}....2.{....oy...2.{....oz...B..(....&..(.......0...........oo........YE....}...............}...n...............n.......I...I...I...I...3...I...X...8D....t......{.....or...o{....ow.....+U..o\|.....{.....o....oo...o}.....o....o....t.....o....o..

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	438936
Entropy (8bit):	6.4311342686757245
Encrypted:	false
SSDEEP:	6144:p0CMChRMg/ZytotgM7/J/NMFkl619WTRIlY57pMF9v2aiSVRlY/8a:CGhGI1Wo/J1l619WQY57pMfi8a
MD5:	A27F9713DB1688D03D2082BFA1827803
SHA1:	B8DF4649659003609419D052757166499D2322E8
SHA-256:	2F86EB0D3902A11DA1F534D9734DABAE37D33E2C57B03F968198A1CFC2E652A9
SHA-512:	F952C6792F10CB60CA3ECC00B317C33AADB65C8471D106171660EC0FCB0603C8D18B8AD2A90AACDA6581D342647290099AF0ED0FDD897EDB390D5BF9209EA905
Malicious:	true
Yara Hits:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe, Author: Joe Security
Antivirus:	Antivirus: ReversingLabs, Detection: 21%
Reputation:	moderate, very likely benign file
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf.....................t.......(... ...@....@.. ....................................@..................................(..K....@...q...............2..........X'............................................... ............... ..H............text........ ...................... ..`.rsrc....q...@...r..................@..@.reloc...............~..............@..B.................(......H..................{....i...9............................................~....}.....(......su...}......(....}.....r...pz.(....r'..p.{....(......(........0..j..........{....r...pov...,.(.....+.(......r...p(......(......r...p.{....o....o.......(........sG........o......z..........UU......N.(....r...p..(.....r...p.......{...."..}.....rA..p.rS..p.(....oV...f.~....}.....(......(.....ro..pN.(....r...p..(.....0..i.......~......(....(!...,.r...p.+..(.......(j.....(...+

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe.config

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	XML 1.0 document, ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	2273
Entropy (8bit):	5.064418012146103
Encrypted:	false
SSDEEP:	48:c5+qM3DzYnwAGvSy6ZYEcCUkmPlrAn6EVr6R841docr7S3tB:jV3f84CRvur+rAN3r7sz
MD5:	E3D3AA100B93504676414B9268DFBAD4
SHA1:	A7D1E59C9D8C48DFE259D2973C13B0E2965E67AA
SHA-256:	EA7747D876307B0022F055C311C4F8F8112FDDE380E0848FD35508C00EDF8E7A
SHA-512:	9470E0B4784CE3AA94248DDBD9C17BCA988B6A680754511CBE1F1C368270F6D18C75AD1EA0F3A438CA5BB1A12E55E8745F68F2EBC9F78C68B373A6541AC9EFBE
Malicious:	false
Preview:	<?xml version="1.0" encoding="utf-8"?>..<configuration>.. <configSections>.. <section name="ProdSettings" type="System.Configuration.NameValueSectionHandler"/>.. <section name="StagingSettings" type="System.Configuration.NameValueSectionHandler"/>.. </configSections>.. <ProdSettings>.. <add key="Installer" value="https://wcdownloadercdn.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-prod.exe"/>.. <add key="WebProtectionZip" value="https://rt.webcompanion.com/notifications/download/rt/dci/latest/Webprotection.zip"/>.. <add key="InstallerZip" value="http://wcdownloadercdn.lavasoft.com/13.0.0.1080/WebCompanion-13.0.0.1080-prod.zip"/>.. <add key="WebInstallerZip" value="http://wcdownloadercdn.lavasoft.com/13.0.0.1080/webinstaller-13.0.0.1080-prod.zip"/>.. </ProdSettings>.. <StagingSettings>.. <add key="Installer" value="https://wcdownloader-qa.lavasoft.com/13.0.0.1080/WebCompanionInstaller-13.0.0.1080-internal.exe"/>.. <add key="WebProtectionZip" va

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\de-DE\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	6656
Entropy (8bit):	4.423116664692943
Encrypted:	false
SSDEEP:	96:5GfMjBmbsmYpthmv13DA+7ZaOrO2I72LYlty5dPolY:5GEjBmb/Ypthmd3k+7LBTUa5NolY
MD5:	A564D6AE745D289B599A010E570E609E
SHA1:	7A698D14CDAB971982B02AF5A9C49D8AEDA56A19
SHA-256:	E20A9695E1322491C57C8A0E61839E5AEEBA40F43AAB400C29F19531D18FA037
SHA-512:	2894F6832F6D20E97E18FF09780D34E7CC25074F0382742838C9A060AF7ADE3FFD3DA9F844E0475697E3854A97379F0961A7F65A1EB5F2ACBA2AF17E49D75B39
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................1... ...@....... ....................................@..................................0..O....@.......................`....................................................... ............... ..H............text...$.... ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................1......H.......h-..d...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet....".......PADPADP......n.....V ...].......}.E(/....xv.\|.-..X:..o.....V..................v...1.D\|-......."..&...'c$Q:#Uv=.9.W*..Y`..[.F.^:1;jg.Jq............g...i...............!.......z...............5...v.......K....... .......3...<...

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\en-US\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	6144
Entropy (8bit):	4.337584317889265
Encrypted:	false
SSDEEP:	96:tDXGBpbsiopCUoHve6v7ptEAT0VOGSxQ7F0ltEj8dPolY:trGBpbLopDoHm1MeGU8NolY
MD5:	88498F281D2BC857F09C3A0EFFE97A35
SHA1:	5560555DED4D2336EBAAC6AECBD80C2FC6F0AAE7
SHA-256:	2FBD9C10CEC246D5E6EE2F41635F283C3064773724253BAE598BFAEA735B702D
SHA-512:	2550C9C2E42E77A44520EC53418636721C3A56BE7B647C839B7A3063A9BDE4FFD304A6812F51A95DF19B1F04E05285FA9C23AF946472F07DE10F514DDB0DF9C0
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!................N/... ...@....... ....................................@................................../..K....@.......................`....................................................... ............... ..H............text...T.... ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B................0/......H........+..d...........P ..I...........................................E..............lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet.... .......PADPADP......n.....V ...].......}.E(/....xv.\|.-..X:..o.....V..............v.D\|-......."..&...'c$Q:#Uv=.9.W..Y`..[.F.^:1;jg.Jq........\.......i.......t...............z...O...L...<...5..........................E...........L...

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\es-ES\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	6656
Entropy (8bit):	4.320496600456879
Encrypted:	false
SSDEEP:	96:wfMjBDbsPnpEaLv3lhC3E1Wb/xg/x9lt2EZdPolY:wEjBDbWnpEaLPlhC3fa9ZNolY
MD5:	A22C9231A5562DCA9F0BC186BDA3348D
SHA1:	D4D281A596E272A482C6917DC3CA67C150E72FCB
SHA-256:	AF899C47BDE2A325F3F9F22772F4E305F6B50EAF040670DE508226FEFBED649B
SHA-512:	C140934BF63AADB01F7C0A1A4A7E89FB7CC6DEAA5219BBCB64EB6FB9D29F8139DC4A17C990373BB008A891436BD60E8B21CF748DAB0FA263853663AD17BA9FB4
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................0... ...@....... ....................................@.................................<0..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B................p0......H........,..d...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet....".......PADPADP......n.....V ...].......}.E(/....xv.\|.-..X:..o.....V..................v...1.D\|-......."..&...'c$Q:#Uv=.9.W*..Y`..[.F.^:1;jg.Jq............g...i...............!.......z...............5...v.......K....... .......3...<...

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\fr-CA\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	6656
Entropy (8bit):	4.4162624308031155
Encrypted:	false
SSDEEP:	96:vfMjBwbssSpcuov88johXbk3LFXRq7hltE5dPolY:vEjBwbJSpcuo0aX07hM5NolY
MD5:	07759138B75C31E8E62E2DCB9E5B4121
SHA1:	C78CAC2D69DD3770256EA1D22FE62F8991AE1735
SHA-256:	460E0EA0F891B4A7D8FCF4D7C1DAF4034B1A8C01F35C55B87C4DE4D34F7E1119
SHA-512:	7089069EFBE9109ED034C9538B16F482573757A6DAED2D870CF1711F15B1F39FFFC6E5F9FF5E3380514EAFCEE49797F63DD0C9E472D37647EE3FCF34E086B189
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................0... ...@....... ....................................@..................................0..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................0......H.......8-..d...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet....".......PADPADP......n.....V ...].......}.E(/....xv.\|.-..X:..o.....V..................v...1.D\|-......."..&...'c$Q:#Uv=.9.W*..Y`..[.F.^:1;jg.Jq............g...i...............!.......z...............5...v.......K....... .......3...<...

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\it-IT\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	5632
Entropy (8bit):	4.05939038461759
Encrypted:	false
SSDEEP:	48:64WHsDO4eUqFAjpI1UhCvEWRCYVl6TxNLu6hxPFraKuhuXahZ439M/oKx8Welt4u:UFfAjpI1fvC6StPPtM+7tlth8tdPolY
MD5:	320A49D5E8C225BF7D8C8FC8F0FBA1FE
SHA1:	6986D89BABDB474B16E3074865EEDFFCCECC9337
SHA-256:	53F48BF5DEB5FB756EB61D5EE78BB72EF4509ADB396EB40BEF9671ECAA8D9819
SHA-512:	6EC2883F6542F8EA3966F367E11359B3702B8E8E01FAFA3D3828E16D216CC77CC71B92BB1BFBC0C7F146C79FB4DBEE5FAD84288DFE1C5979F0C59841B92F03D6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!................n,... ...@....... ....................................@..................................,..W....@.......................`....................................................... ............... ..H............text...t.... ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B................P,......H........(..d...........P ..`...........................................\..............lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet............PADPADP........V ...].......}....xv.\|.-..X:.....V..................v...1.D\|-...."..&#Uv=.9.W.F.^:1;j........a.......J...'...........(...............p.......E...........{...........b.......B...O............B.T.N._.C.L.O.S.E......

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ja-JP\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	5632
Entropy (8bit):	4.697358912630535
Encrypted:	false
SSDEEP:	96:KsC3ASpa3kvBYTnRDzIWI2dPRp0QltdHmdPolY:KsOASpa3kpXoR+Q1GNolY
MD5:	442654050F5E5EBFB286C75A6AD10485
SHA1:	7F9AB13C925DDDE3ADE1EBA334DD17F6BF341F7A
SHA-256:	B85CC7BA82B58AFD8FA00DFCCD820B5B34BC14A942EBDAB5380FCE8F7257C0AE
SHA-512:	E7F9F728603091728451127C02B1F8412C741C57C5ADFED91FECA37989C07570886ACA262ECBDB17A968474E05936C3485602115CBC26EDCEE65DD7764B76795
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................-... ...@....... ....................................@..................................-..W....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................-......H....... *..d...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet............PADPADP........V ...].......}....xv.\|.-..X:.....V..................v...1.D\|-...."..&.9.W.F.^:1;j........a.......)...............(...............O.......$...........{.......j...b...B...O............B.T.N._.C.L.O.S.E......B.T.N._.

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\pt-BR\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	6656
Entropy (8bit):	4.272201212454418
Encrypted:	false
SSDEEP:	96:afMjBsbswapvL6vu1667y4UNGaB3q4kUO6ltMNdPolY:aEjBsb9apvL6ms67yJ3hUNNolY
MD5:	01CCD85F0676258B5E4A223832E3258C
SHA1:	630CD9F369A81A7823905FD842FDDEEFAF23D3A1
SHA-256:	C482D074CFDA0B6921A6750F0CCC1279BA6FCFB9D2037CA6EAAF704D8DAF811F
SHA-512:	1BB2DB0ABF3E0BCA3B131D2DF5329006A56E3FAA4E540621E54AA98DBB0BF4E27093314B477AA66E4F10FE0AF5DF1887FF23CAD938C5B0F98E455433E14FAD01
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................0... ...@....... ....................................@................................../..K....@.......................`....................................................... ............... ..H............text...4.... ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................0......H.......\|,..d...........P ..,...........................................(..............lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet....".......PADPADP......n.....V ...].......}.E(/....xv.\|.-..X:..o.....V..................v...1.D\|-......."..&...'c$Q:#Uv=.9.W*..Y`..[.F.^:1;jg.Jq............g...i...............!.......z...............5...v.......K....... .......3...<...

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ru-RU\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	7680
Entropy (8bit):	4.608207837862824
Encrypted:	false
SSDEEP:	96:41fMjBGbsSopXm7vGQdkxbdV2UCwbT+T/UA7+1styo36glt55odPolY:eEjBGbbopXm7eXxbWqExi1splHoNolY
MD5:	F2876EC061D1CC88E44104ED97FC36F8
SHA1:	68BFE2A32CA14B0C379EF725E426AB2FED09E075
SHA-256:	6071DAA27880FE3F6B9FB704890250CA655CAFE832A1B9A4E59F0CFFFB042E04
SHA-512:	E3DD2BAAB3C5AFB124DC9CC0BB2D9318D33707732B4F23C211C2E3BC5A8A8889FAF42003857DA98D43DD7F7368CAFB3A02591BE04DCA4E1343A00283CA071DB6
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................3... ...@....... ....................................@..................................3..K....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................3......H.......L0..d...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet....".......PADPADP......n.....V ...].......}.E(/....xv.\|.-..X:..o.....V..................v...1.D\|-......."..&...'c$Q:#Uv=.9.W*..Y`..[.F.^:1;jg.Jq............g...i...............!.......z...............5...v.......K....... .......3...<...

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\tr-TR\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	5632
Entropy (8bit):	4.204809000235561
Encrypted:	false
SSDEEP:	48:6teH9O4G6ULy3ABApQe1eBpQvu18JvLh4jK0YuPx4S8zqeelt4833PPbknI5Klfy:TsC3AWpt1eYvJgjKZSJltkFdPolY
MD5:	D0009577C38F3338B2A3DCCEE9DF5169
SHA1:	D567D95A61B57885B55D7D70B93BC839EF162436
SHA-256:	598BAD964E2BED4A4EDAFAC5E8838C7B922C6EBBFBA70EDA0D400E543B91E54B
SHA-512:	95F766F541CA5EFC74C3DCC9D5C299798B581F1B302A4EFFDCA9B7ED4177DAF4E8547B7729DB724EB0A8A28C9770FC470BF9BDF2C616F70782DC96056CF8410E
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................,... ...@....... ....................................@.................................<,..O....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B................p,......H........(..d...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet............PADPADP........V ...].......}....xv.\|.-..X:.....V..................v...1.D\|-...."..&.9.W.F.^:1;j........a.......)...............(...............O.......$...........{.......j...b...B...O............B.T.N._.C.L.O.S.E......B.T.N._.

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\zh-CHS\WebCompanion-Installer.resources.dll

Download File

Process:	C:\Users\user\Desktop\Setup.exe
File Type:	PE32 executable (DLL) (console) Intel 80386 Mono/.Net assembly, for MS Windows
Category:	dropped
Size (bytes):	5120
Entropy (8bit):	4.582926268925439
Encrypted:	false
SSDEEP:	96:vsC3AjpTfYGvqLH+/WZGrlqlt9kdPolY:vsOAjpTfxyb+/gGJq1kNolY
MD5:	322549094C487E49ACEB9899419D8EC6
SHA1:	DD0E5FF6BC3E4590203829DA1BB8BD7B00CBD07E
SHA-256:	7824381C18E86E72C0D4A8BB0ED377DFDB6E3B5374984ED67AF119B14268E70D
SHA-512:	80747F72196406993110D0DB5B736BCA21975C26615D34F771042E69CA0D519ED80C0E9267A90517A5B9862AB44CF9F9D96C354E952CB9CB0C32EB4887F80A1C
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 0%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......PE..L....$Cf...........!.................+... ...@....... ....................................@.................................t+..W....@.......................`....................................................... ............... ..H............text........ ...................... ..`.rsrc........@......................@..@.reloc.......`......................@..B.................+......H........(..h...........P .............................................................lSystem.Resources.ResourceReader, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089#System.Resources.RuntimeResourceSet............PADPADP........V ...].......}....xv.\|.-..X:.....V..................v...1.D\|-...."..&.9.W.F.^:1;j........a.......)...............(...............O.......$...........{.......j...b...B...O............B.T.N._.C.L.O.S.E......B.T.N._.

C:\Users\user\AppData\Local\Temp\WcInstaller.log

Download File

Process:	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe
File Type:	ASCII text, with very long lines (912), with CRLF line terminators
Category:	modified
Size (bytes):	3301
Entropy (8bit):	5.338741479314752
Encrypted:	false
SSDEEP:	96:DK1rtAPy4COl++5/P6rDEoQwPoK1rtAnSnWA/H:DK1BAKis+ByrRQwQK1BAtA/H
MD5:	00C1A48B1C4FC30ACB7AB5E766CFC587
SHA1:	7D05EEE71C4D7EE61B3965E1222B9FA4AAEC69A5
SHA-256:	1839F8F60C83E17CE604A36EC38C20131B21B9345167118B5240CB2428931D2E
SHA-512:	4880334E82FB6F8B8C64298C6830FFDC67B1C516443A61D732374F66913A6F4563684963D6DFADC9D6A5C2B82234053AF5EF316CA8A911214ADE52BF403E6FC1
Malicious:	false
Preview:	Detecting windows culture..Preparing request for featureflag: {"Geo":"US","Partner":"IN240402","Campaign":"21794599196","InstallDate":"20250106","TriggerType":"install","TriggerEvent":"installer","Version":"13.900.0.1080","featurewp":true,"featureal":true}..Getting response from featureflag: [{"sectionCode":"WAC","code":"WAC","configuration":"{\"Icon\": \"https://webcompanion.com/images/favicon.ico\", \"AppName\": \"Web Companion\", \"Settings\": [\"WCAutoUpdate\", \"EnableGranularity\", \"PostRunV2Action\", \"PostRunTimerAction\", \"EnableTelemetryScan\", \"EnableWebProtection\", \"EnableDynamicNotification\"], \"CompanyName\": \"Lavasoft\", \"ConfigVersion\": \"v1\", \"CurrentVersion\": \"9.3.0\", \"IsNewUpdaterService\": true}","targetId":301},{"sectionCode":"WFAI","code":"WCP","configuration":"{\"Version\": \"3.0.2.12\", \"FilePath\": \"https://rt.webcompanion.com/notifications/download/rt/dci/latest/Webprotection.zip\", \"BlackList\": \"https://acs.lavasoft.com/api/v2/url/blacklis

C:\Users\user\AppData\Local\Temp\WebCompanion.zip

Download File

Process:	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe
File Type:	Zip archive data, at least v2.0 to extract, compression method=deflate
Category:	dropped
Size (bytes):	10494317
Entropy (8bit):	7.994463819622281
Encrypted:	true
SSDEEP:	196608:pKZsrAth9Vrdx45WtQbJtXWYxEwsOOXd/XUCv1uGJONYTr9udX6:U+rWVBx3WX7EJONION6f
MD5:	C0A2AAF917E6BC1D951EC481213D4138
SHA1:	56308BC1CF014F507E161B518736CD3D3666387D
SHA-256:	2F87DCD36A114502A3C80ECF8A8C5F5EF60475951F9C142A1A68BDEC6CAA3E23
SHA-512:	43EF07470F33BA0FF6A18E343C55ADAF0CDB2B88C3B37FA53F32608F1F78B6266BFACD2BB3BD92BF56EB0E28C4C20278212E06C1873DEA9098ECE5CDB117B9BC
Malicious:	false
Preview:	PK.........%.X....FF...$......Application/7za.exe.yxTE.8\|{I.YH'@CX.V[..%CP.4h_.MnCG@DQ..h..... .`'..\[...u..yg....QGY\........{..d.....S.......~.}y...N.:u..S.NU...`.......k....~.......e..o.`.......[`._..]U..g.s...?..~..J..:.~.s.t.}..q.>}2l.....u.....#.Y..Mt}.......6z......{.:.:.y^KW.]....ys."..Nu.........C.EB..$..P.k......s.(..zN..K.........iH..Z.....[..x.P.7.iB.6..Ta.,..I...#....g.r...<.wg.....zb......QUw..M.:...L...nHN..r...]#..TA.r...vO..5.'.:B]..p}<.lxU... ...6...........?i...o...g..7H...%E_..B...d.... .f.].&I..Q..G.S..x.o.K......../.~...g.Q_..^(..h^...Dq.J\Y2.....&...........Fo`...........}....98E'..Kne+c........._./..o.o.+g.z..M.6.....D.D.^I9..!..0HJ..?h.7..2"U.;...RY..=b..k.^y....0.l...m...h..9.........f....J-N..KU....HH."......Y...I)8..=s>.)MPH!.L....e...J..`bc(.:.-M=}...v...=..9.:..u.7.X.O...T..%e.)V...rS..s....o...[1.C... ...x7g)P..:............8. .u...lv-a..MB.TyW..D..p$..0.x>..'..K..l./g..U......b{.!_...,....<.....$#zh.e....+.

C:\Users\user\AppData\Roaming\Lavasoft\Web Companion\Options\Statistics.txt

Download File

Process:	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	56
Entropy (8bit):	4.590587681210862
Encrypted:	false
SSDEEP:	3:asLGYzGIDGB9RRdZPD7p9:aqGYqIDC3dZPDl9
MD5:	6365B699C96DEC4E0340326037A64F4C
SHA1:	9B946B83063B177436681442340FA6BE76761838
SHA-256:	91229616BFE9BB65BC5602A79EAB720584C511D744C8190EFA73A71634F1C51A
SHA-512:	253A3B6B2FEB333B6AA138E7A4FCA59F211E62686DFC1781547D1F0F02F6BEEF6E040058DD48EFB2DD6FBC02FADB2A4D32DD26FDD0A59F8369A88AF946267407
Malicious:	false
Preview:	{ "install_id" : "6cf17893-cdb5-4488-afe0-2ac226fa3ae3"}

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	7.6536233653890235
TrID:	Win32 Executable (generic) a (10002005/4) 99.40% InstallShield setup (43055/19) 0.43% Windows Screen Saver (13104/52) 0.13% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02%
File name:	Setup.exe
File size:	545'344 bytes
MD5:	2902e39c85dd5de70d317957a8dd1683
SHA1:	54b92618d4e08f3a06e1b510d14cd764a003acf1
SHA256:	536d9c6365af64660702c6cd49bf2939de2ae3d6798b8167f3b21b8d120f75bd
SHA512:	dba5e51815b6ce83f195a1810163095947db66dc594e9df9c3d2d7af55eacfed975d49193a701b9323bd56125e6c0a7c95c9a9da22c6f274c64647f3418f04e9
SSDEEP:	12288:WG5knZfFKeTzOydwORmV42Y5RBHtf8WS8sejGxUeRx7/ae:WG50ZfFKMzRCa0gDS8geeme
TLSH:	48C4F1127DE089B6D5810431CC745FA2A2B6FE560A21887773997E3E7F7F642C232A1D
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$..........W..s...s...s..c}...s..Yy...s..w,...s...r./.s..w....s..Yx...s.......s.......s.Zyu...s.Rich..s.................PE..L......M...

File Icon


Icon Hash:	8011090b07071616

Static PE Info

General

Entrypoint:	0x4148d4
Entrypoint Section:	.text
Digitally signed:	true
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	RELOCS_STRIPPED, EXECUTABLE_IMAGE, LINE_NUMS_STRIPPED, LOCAL_SYMS_STRIPPED, LARGE_ADDRESS_AWARE, 32BIT_MACHINE
DLL Characteristics:
Time Stamp:	0x4DAC88CE [Mon Apr 18 18:54:06 2011 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	4
OS Version Minor:	0
File Version Major:	4
File Version Minor:	0
Subsystem Version Major:	4
Subsystem Version Minor:	0
Import Hash:	e00de6e48b9b06aceb12a81e7bf494c9

Authenticode Signature

Signature Valid:	true
Signature Issuer:	CN=Entrust Extended Validation Code Signing CA - EVCS2, O="Entrust, Inc.", C=US
Signature Validation Error:	The operation completed successfully
Error Number:	0
Not Before, Not After	01/05/2024 15:39:26 01/05/2025 15:39:25
Subject Chain	CN=7270356 Canada Inc., SERIALNUMBER=1417258-2, OID.2.5.4.15=Private Organization, O=7270356 Canada Inc., OID.1.3.6.1.4.1.311.60.2.1.3=CA, L=Saint-Laurent, S=Quebec, C=CA
Version:	3
Thumbprint MD5:	0E3940FCE9D8B244F0D82DDEEBE28F5E
Thumbprint SHA-1:	EA06433E6F12D2AADA040F4A6EF7C927404A4CBA
Thumbprint SHA-256:	EB0A666D9DFD790059DF788FBA544ABC93E1690F1425147BA0A6E784AFC6F5B5
Serial:	25D0CB9D7B0D6C700CDAE43D243AB1C6

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
push FFFFFFFFh
push 0041B9E8h
push 004147FCh
mov eax, dword ptr fs:[00000000h]
push eax
mov dword ptr fs:[00000000h], esp
sub esp, 58h
push ebx
push esi
push edi
mov dword ptr [ebp-18h], esp
call dword ptr [0041B078h]
xor edx, edx
mov dl, ah
mov dword ptr [004233F0h], edx
mov ecx, eax
and ecx, 000000FFh
mov dword ptr [004233ECh], ecx
shl ecx, 08h
add ecx, edx
mov dword ptr [004233E8h], ecx
shr eax, 10h
mov dword ptr [004233E4h], eax
push 00000001h
call 00007F0FBC8F062Bh
pop ecx
test eax, eax
jne 00007F0FBC8EF79Ah
push 0000001Ch
call 00007F0FBC8EF858h
pop ecx
call 00007F0FBC8F00DDh
test eax, eax
jne 00007F0FBC8EF79Ah
push 00000010h
call 00007F0FBC8EF847h
pop ecx
xor esi, esi
mov dword ptr [ebp-04h], esi
call 00007F0FBC8F224Ch
call dword ptr [0041B07Ch]
mov dword ptr [00425A5Ch], eax
call 00007F0FBC8F210Ah
mov dword ptr [00423360h], eax
call 00007F0FBC8F1EB3h
call 00007F0FBC8F1DF5h
call 00007F0FBC8F1850h
mov dword ptr [ebp-30h], esi
lea eax, dword ptr [ebp-5Ch]
push eax
call dword ptr [0041B080h]
call 00007F0FBC8F1D86h
mov dword ptr [ebp-64h], eax
test byte ptr [ebp-30h], 00000001h
je 00007F0FBC8EF798h
movzx eax, word ptr [ebp+00h]

Rich Headers

Programming Language:

[ C ] VS98 (6.0) SP6 build 8804
[C++] VS98 (6.0) SP6 build 8804
[ C ] VS2010 build 30319
[ASM] VS2010 build 30319
[EXP] VC++ 6.0 SP5 build 8804

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x1e9ac	0x64	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x27000	0x71d4	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x81fb0	0x3290
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x0	0x0
IMAGE_DIRECTORY_ENTRY_DEBUG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x1b000	0x200	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x197c0	0x19800	206b62d600beb166f8bf863ad5301f8c	False	0.5831609987745098	DOS executable (COM)	6.60822715389085	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x1b000	0x4490	0x4600	b0314f39355cab7d4674a0928d3b15f2	False	0.312109375	data	4.383775518811042	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x20000	0x5a68	0x3200	8d44c03d32e0c923339cda9fae15827a	False	0.123828125	data	1.3793356235333818	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.sxdata	0x26000	0x4	0x200	35925cfdc1176bd9ffc634a58b40ec17	False	0.02734375	data	0.020393135236084953	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_LNK_INFO, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x27000	0x71d4	0x7200	cd606fe2fe8a9aaa6244d6a44a46010a	False	0.3919613486842105	data	4.655199945289653	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country	ZLIB Complexity
RT_ICON	0x27354	0x2e8	Device independent bitmap graphic, 32 x 64 x 4, image size 640	English	United States	0.37231182795698925
RT_ICON	0x2763c	0x128	Device independent bitmap graphic, 16 x 32 x 4, image size 192	English	United States	0.5472972972972973
RT_ICON	0x27764	0x468	Device independent bitmap graphic, 16 x 32 x 32, image size 1024, resolution 2833 x 2833 px/m			0.3200354609929078
RT_ICON	0x27bcc	0x988	Device independent bitmap graphic, 24 x 48 x 32, image size 2304, resolution 2833 x 2833 px/m			0.23688524590163934
RT_ICON	0x28554	0x10a8	Device independent bitmap graphic, 32 x 64 x 32, image size 4096, resolution 2833 x 2833 px/m			0.1721388367729831
RT_ICON	0x295fc	0x25a8	Device independent bitmap graphic, 48 x 96 x 32, image size 9216, resolution 2833 x 2833 px/m			0.1241701244813278
RT_ICON	0x2bba4	0x1a7b	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced			0.9648915769287506
RT_DIALOG	0x2d620	0xb8	data	English	United States	0.6684782608695652
RT_STRING	0x2d6d8	0x94	data	English	United States	0.668918918918919
RT_STRING	0x2d76c	0x34	data	English	United States	0.6538461538461539
RT_GROUP_ICON	0x2d7a0	0x4c	data			0.8289473684210527
RT_GROUP_ICON	0x2d7ec	0x22	data	English	United States	1.0
RT_VERSION	0x2d810	0x344	data	English	United States	0.4318181818181818
RT_MANIFEST	0x2db54	0x67f	exported SGML document, ASCII text, with CRLF line terminators	English	United States	0.3692122669873722

Imports

DLL	Import
OLEAUT32.dll	VariantClear, SysAllocString
USER32.dll	SendMessageA, SetTimer, DialogBoxParamW, DialogBoxParamA, SetWindowLongA, GetWindowLongA, SetWindowTextW, LoadIconA, LoadStringW, LoadStringA, CharUpperW, CharUpperA, DestroyWindow, EndDialog, PostMessageA, ShowWindow, MessageBoxW, GetDlgItem, KillTimer, SetWindowTextA
SHELL32.dll	ShellExecuteExA
KERNEL32.dll	GetCurrentDirectoryA, GetStringTypeW, GetStringTypeA, LCMapStringW, LCMapStringA, InterlockedIncrement, InterlockedDecrement, GetProcAddress, GetOEMCP, GetACP, GetCPInfo, IsBadCodePtr, IsBadReadPtr, GetFileType, SetHandleCount, GetEnvironmentStringsW, GetEnvironmentStrings, FreeEnvironmentStringsW, FreeEnvironmentStringsA, UnhandledExceptionFilter, HeapSize, GetCurrentProcess, TerminateProcess, IsBadWritePtr, HeapCreate, HeapDestroy, GetEnvironmentVariableA, SetUnhandledExceptionFilter, TlsAlloc, ExitProcess, GetVersion, GetCommandLineA, GetStartupInfoA, GetModuleHandleA, WaitForSingleObject, CloseHandle, CreateProcessA, GetCommandLineW, GetVersionExA, LeaveCriticalSection, EnterCriticalSection, DeleteCriticalSection, MultiByteToWideChar, WideCharToMultiByte, GetLastError, LoadLibraryA, GetModuleFileNameW, GetModuleFileNameA, LocalFree, FormatMessageW, FormatMessageA, SetFileTime, CreateFileW, SetLastError, SetFileAttributesW, SetFileAttributesA, RemoveDirectoryW, RemoveDirectoryA, CreateDirectoryW, CreateDirectoryA, DeleteFileW, DeleteFileA, GetFullPathNameW, GetFullPathNameA, SetCurrentDirectoryW, SetCurrentDirectoryA, GetCurrentDirectoryW, GetTempPathW, GetTempPathA, GetCurrentProcessId, GetTickCount, GetCurrentThreadId, FindClose, FindFirstFileW, FindFirstFileA, FindNextFileW, FindNextFileA, CreateFileA, GetFileSize, SetFilePointer, ReadFile, WriteFile, SetEndOfFile, GetStdHandle, WaitForMultipleObjects, Sleep, VirtualAlloc, VirtualFree, CreateEventA, SetEvent, ResetEvent, InitializeCriticalSection, RtlUnwind, RaiseException, HeapAlloc, HeapFree, HeapReAlloc, CreateThread, TlsSetValue, TlsGetValue, ExitThread

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-01-06T09:41:50.941294+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49732	104.16.148.130	80	TCP
2025-01-06T09:42:01.908996+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49768	104.16.149.130	443	TCP
2025-01-06T09:42:10.216009+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49769	104.16.149.130	443	TCP
2025-01-06T09:42:18.195213+0100	2803305	ETPRO MALWARE Common Downloader Header Pattern H	3	192.168.2.4	49770	104.16.149.130	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 6, 2025 09:41:34.735735893 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:34.740566015 CET	80	49732	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:34.740684032 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:34.741514921 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:34.746268988 CET	80	49732	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:35.218230963 CET	80	49732	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:35.269412041 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:36.075452089 CET	49733	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:36.075470924 CET	443	49733	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:36.075540066 CET	49733	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:36.092823029 CET	49733	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:36.092834949 CET	443	49733	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:36.679951906 CET	443	49733	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:36.680052042 CET	49733	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:36.685225964 CET	49733	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:36.685231924 CET	443	49733	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:36.685528040 CET	443	49733	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:36.738142967 CET	49733	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:36.753367901 CET	49733	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:36.799335003 CET	443	49733	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:36.799391031 CET	49733	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:36.799396992 CET	443	49733	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:36.952130079 CET	443	49733	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:36.952199936 CET	443	49733	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:36.952253103 CET	49733	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:36.954865932 CET	49733	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:37.045779943 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:37.045813084 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:37.045906067 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:37.046190023 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:37.046201944 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:37.603863001 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:37.604006052 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:37.613055944 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:37.613075018 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:37.613347054 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:37.614775896 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:37.659332037 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:37.659490108 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:37.659502983 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:37.853534937 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:37.853615046 CET	443	49734	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:37.853668928 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:37.853946924 CET	49734	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:37.861979008 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:37.862019062 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:37.862086058 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:37.862287998 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:37.862304926 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:38.325314999 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:38.365894079 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:38.365921021 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:38.365991116 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:38.366002083 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:38.515747070 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:38.515830040 CET	443	49735	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:38.515877008 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:38.521845102 CET	49735	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:38.599208117 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:38.599246025 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:38.599329948 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:38.599540949 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:38.599551916 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:39.073368073 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:39.075133085 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:39.075160980 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:39.075218916 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:39.075222969 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:39.457650900 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:39.457731009 CET	443	49736	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:39.457792044 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:39.458142996 CET	49736	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:39.464715004 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:39.464747906 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:39.464814901 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:39.464993000 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:39.465008020 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:39.919734955 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:39.921253920 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:39.921281099 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:39.921334028 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:39.921343088 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:40.100215912 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:40.100301027 CET	443	49737	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:40.100358009 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:40.100830078 CET	49737	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:40.761431932 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:40.761477947 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:40.761553049 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:40.761812925 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:40.761825085 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:41.215656042 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:41.269390106 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:41.271316051 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:41.271325111 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:41.274372101 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:41.274378061 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:41.424592972 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:41.424693108 CET	443	49738	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:41.424746037 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:41.480324984 CET	49738	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:41.705959082 CET	49739	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:41.706006050 CET	443	49739	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:41.706068039 CET	49739	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:41.706459045 CET	49739	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:41.706474066 CET	443	49739	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:42.191972971 CET	443	49739	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:42.194341898 CET	49739	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:42.194370031 CET	443	49739	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:42.194500923 CET	49739	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:42.194505930 CET	443	49739	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:42.368009090 CET	443	49739	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:42.368079901 CET	443	49739	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:42.368216991 CET	49739	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:42.368762016 CET	49739	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:42.386260033 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:42.386291981 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:42.386369944 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:42.386687040 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:42.386703014 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:42.842638969 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:42.844876051 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:42.844899893 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:42.844964981 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:42.844974041 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:43.021775007 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:43.021862030 CET	443	49742	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:43.021943092 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:43.022614002 CET	49742	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:43.029966116 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:43.029998064 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:43.030093908 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:43.030343056 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:43.030355930 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:43.508460999 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:43.516455889 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:43.516469955 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:43.516521931 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:43.516530037 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:43.703161001 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:43.703272104 CET	443	49743	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:43.703325033 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:43.703807116 CET	49743	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:43.731442928 CET	49744	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:43.731478930 CET	443	49744	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:43.731645107 CET	49744	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:43.731797934 CET	49744	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:43.731817961 CET	443	49744	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:44.185354948 CET	443	49744	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:44.193495035 CET	49744	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:44.193522930 CET	443	49744	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:44.193589926 CET	49744	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:44.193599939 CET	443	49744	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:44.367364883 CET	443	49744	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:44.367465973 CET	443	49744	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:44.367521048 CET	49744	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:44.374059916 CET	49744	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:44.419784069 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:44.419811010 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:44.419874907 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:44.420078993 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:44.420090914 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:44.903110981 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:44.904588938 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:44.904609919 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:44.904678106 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:44.904684067 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:45.117235899 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:45.117315054 CET	443	49746	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:45.117367983 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:45.117791891 CET	49746	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:45.133887053 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:45.133923054 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:45.133995056 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:45.134249926 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:45.134263039 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:45.617067099 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:45.621655941 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:45.621680975 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:45.621733904 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:45.621740103 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:45.813374043 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:45.813447952 CET	443	49747	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:45.813548088 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:45.813884974 CET	49747	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:45.821841955 CET	49748	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:45.821878910 CET	443	49748	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:45.822045088 CET	49748	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:45.822232008 CET	49748	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:45.822244883 CET	443	49748	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:46.292745113 CET	443	49748	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:46.294661045 CET	49748	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:46.294689894 CET	443	49748	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:46.294759989 CET	49748	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:46.294764996 CET	443	49748	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:46.474039078 CET	443	49748	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:46.474122047 CET	443	49748	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:46.474164009 CET	49748	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:46.474510908 CET	49748	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:46.494179010 CET	49750	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:46.494241953 CET	443	49750	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:46.494311094 CET	49750	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:46.494486094 CET	49750	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:46.494497061 CET	443	49750	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:46.959219933 CET	443	49750	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:46.971519947 CET	49750	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:46.971555948 CET	443	49750	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:46.971616983 CET	49750	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:46.971625090 CET	443	49750	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:47.145721912 CET	443	49750	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:47.145833969 CET	443	49750	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:47.145884037 CET	49750	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:47.148267984 CET	49750	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:47.190721035 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:47.190761089 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:47.190821886 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:47.191041946 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:47.191057920 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:47.645510912 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:47.647250891 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:47.647284985 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:47.647337914 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:47.647342920 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:47.875380039 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:47.875458002 CET	443	49752	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:47.875509977 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:47.875869989 CET	49752	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:47.884305000 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:47.884334087 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:47.884404898 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:47.884578943 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:47.884591103 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:48.336724043 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:48.338347912 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:48.338361025 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:48.338481903 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:48.338485956 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:48.501576900 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:48.501668930 CET	443	49753	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:48.501828909 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:48.502105951 CET	49753	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:48.507168055 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:48.507214069 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:48.507293940 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:48.507513046 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:48.507533073 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:48.977684975 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:48.979171038 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:48.979201078 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:48.979266882 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:48.979273081 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:49.145555019 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:49.145637989 CET	443	49754	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:49.145962954 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:49.146357059 CET	49754	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:49.157408953 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:49.157437086 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:49.157504082 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:49.157725096 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:49.157737017 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:49.622036934 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:49.623950005 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:49.623970032 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:49.624116898 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:49.624123096 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:49.798605919 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:49.798693895 CET	443	49755	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:49.798790932 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:49.886153936 CET	49755	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:50.143208981 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:50.143243074 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:50.143307924 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:50.143552065 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:50.143563032 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:50.606132030 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:50.609791994 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:50.609803915 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:50.609982967 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:50.609988928 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:50.766237020 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:50.766311884 CET	443	49756	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:50.766396046 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:50.766902924 CET	49756	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:50.772353888 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:50.777246952 CET	80	49732	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:50.893533945 CET	80	49732	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:50.894627094 CET	49758	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:50.894650936 CET	443	49758	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:50.894725084 CET	49758	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:50.895091057 CET	49758	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:50.895102978 CET	443	49758	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:50.941293955 CET	49732	80	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:51.478213072 CET	443	49758	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:51.480214119 CET	49758	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:51.480232000 CET	443	49758	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:51.480328083 CET	49758	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:51.480334044 CET	443	49758	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:51.662097931 CET	443	49758	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:51.662189960 CET	443	49758	104.16.148.130	192.168.2.4
Jan 6, 2025 09:41:51.662408113 CET	49758	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:51.662874937 CET	49758	443	192.168.2.4	104.16.148.130
Jan 6, 2025 09:41:51.689546108 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:51.689590931 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:51.689692020 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:51.690633059 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:51.690649033 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:52.166222095 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:52.167937994 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:52.167973042 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:52.168318033 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:52.168323040 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:52.371062040 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:52.371156931 CET	443	49760	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:52.371207952 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:52.371766090 CET	49760	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:52.377729893 CET	49763	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:52.377765894 CET	443	49763	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:52.377899885 CET	49763	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:52.378149986 CET	49763	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:52.378163099 CET	443	49763	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:52.849927902 CET	443	49763	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:52.905627966 CET	49763	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:52.975075006 CET	49763	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:52.975094080 CET	443	49763	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:52.975177050 CET	49763	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:52.975183964 CET	443	49763	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:53.157720089 CET	443	49763	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:53.157787085 CET	443	49763	104.18.26.149	192.168.2.4
Jan 6, 2025 09:41:53.157852888 CET	49763	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:53.195121050 CET	49763	443	192.168.2.4	104.18.26.149
Jan 6, 2025 09:41:53.314189911 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:53.314229012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.314294100 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:53.314641953 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:53.314657927 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.862294912 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.862400055 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:53.863941908 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:53.863950968 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.864198923 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.865360022 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:53.907327890 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.968297005 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.968533039 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.968566895 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.968600035 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.968601942 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:53.968611956 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.968676090 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:53.968686104 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.968733072 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:53.969046116 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.969350100 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.969388962 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.969408035 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:53.969414949 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.969446898 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.969450951 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:53.969458103 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:53.969515085 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:53.973058939 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.019460917 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.055310011 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.055378914 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.055407047 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.055438042 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.055443048 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.055454016 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.055489063 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.055823088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.055860996 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.055880070 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.055886984 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.055927992 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.055933952 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.055943012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.056070089 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.056077957 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.056724072 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.056756973 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.056773901 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.056781054 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.056816101 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.056818008 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.056827068 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.056873083 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.056880951 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.057539940 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.057565928 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.057596922 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.057601929 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.057612896 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.057642937 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.057651043 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.057673931 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.057689905 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.057696104 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.057735920 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.142004013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.142076969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.142117023 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.142118931 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.142127991 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.142170906 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.142178059 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.142405987 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.142448902 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.142457962 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.142472029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.142496109 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.143100023 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.143132925 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.143146992 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.143155098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.143188953 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.143203974 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.143810987 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.143863916 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.143884897 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.143891096 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.143902063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.143918037 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.143930912 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.143937111 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.143971920 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.144762039 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.144789934 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.144820929 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.144828081 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.144841909 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.144844055 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.144896030 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.144901991 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.144942999 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.145705938 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.145739079 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.145754099 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.145761013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.145790100 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.145808935 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.145824909 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.145868063 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.228888988 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.228949070 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.228980064 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.228980064 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.228995085 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.229034901 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.229043007 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.229052067 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.229084015 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.229110956 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.229172945 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.229224920 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.229310989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.229367018 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.229393959 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.229445934 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.229470015 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.229518890 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.229635954 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.229688883 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.229707003 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.229763031 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.229827881 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.229880095 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.229926109 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.229976892 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.230115891 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.230169058 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.230197906 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.230256081 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.230288029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.230339050 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.230492115 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.230521917 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.230555058 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.230561972 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.230573893 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.231255054 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.233953953 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.234014988 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.234050989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.234081984 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.234097004 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.234102964 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.234136105 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.234144926 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.234246969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.234292984 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.234312057 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.234353065 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.234913111 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.234956980 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.234968901 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.234973907 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.235001087 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.235011101 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.235054970 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.235101938 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.235205889 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.235270023 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.315840960 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.315886021 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.315928936 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.315938950 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.315965891 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.316521883 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.316536903 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.316587925 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.316596985 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.316937923 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.316956043 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.316997051 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.317008018 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.317025900 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.317189932 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.317209005 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.317250967 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.317259073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.317281961 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.317526102 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.317539930 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.317580938 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.317589998 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.317619085 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.317799091 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.317811966 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.317866087 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.317878962 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.318120003 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.318133116 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.318182945 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.318190098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.318401098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.318414927 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.318468094 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.318475962 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.363161087 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.402762890 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.402780056 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.402844906 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.402861118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.402873039 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.402904034 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.403408051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.403423071 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.403506994 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.403518915 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.403729916 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.403749943 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.403817892 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.403826952 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.403995991 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.404006958 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.404051065 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.404061079 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.404084921 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.404115915 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.404510021 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.404526949 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.404577017 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.404584885 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.404607058 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.404634953 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.404663086 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.404678106 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.404717922 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.404725075 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.404750109 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.404761076 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.404917002 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.404931068 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.404985905 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.405008078 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.405334949 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.405354023 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.405407906 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.405416012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.408324003 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.489382029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.489397049 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.489470959 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.489484072 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.489514112 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.489523888 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.489613056 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.489628077 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.489671946 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.489679098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.489705086 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.489721060 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.490109921 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.490124941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.490175009 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.490181923 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.490205050 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.490223885 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.490597963 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.490612030 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.490664959 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.490673065 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.490843058 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.490861893 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.490906000 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.490915060 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.491230965 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.491250038 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.491298914 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.491307974 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.491597891 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.491621017 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.491658926 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.491666079 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.491678953 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.491714001 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.491889954 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.491905928 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.491957903 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.491965055 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.492321968 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.576328039 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.576344967 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.576411963 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.576426029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.576544046 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.576561928 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.576584101 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.576591969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.576622963 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.576651096 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.577277899 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.577294111 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.577362061 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.577368975 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.577393055 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.577409029 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.577636957 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.577653885 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.577699900 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.577707052 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.577735901 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.577755928 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.577933073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.577951908 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.577996016 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.578002930 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.578093052 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.578248024 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.578263044 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.578340054 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.578346968 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.578433990 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.578583002 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.578598022 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.578651905 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.578665018 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.578742027 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.578866959 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.578883886 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.578934908 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.578943014 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.579050064 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.663206100 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.663228989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.663299084 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.663310051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.663332939 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.663350105 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.663594007 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.663609982 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.663669109 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.663687944 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.663820028 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.664196014 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.664211035 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.664273024 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.664279938 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.664297104 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.664321899 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.664612055 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.664628029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.664681911 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.664688110 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.664710999 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.664719105 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.665072918 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.665088892 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.665137053 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.665143013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.665163040 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.665180922 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.665718079 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.665734053 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.665781975 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.665788889 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.665816069 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.665832043 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.666055918 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.666069984 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.666124105 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.666130066 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.666150093 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.666172028 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.666295052 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.666310072 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.666363955 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.666371107 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.666821003 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.749984026 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.750005007 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.750083923 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.750116110 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.750132084 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.750159979 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.750277042 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.750303030 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.750339985 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.750346899 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.750379086 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.750391960 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.750503063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.750524044 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.750562906 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.750570059 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.750597954 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.750622988 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.750860929 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.750875950 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.750916958 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.750922918 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.750936031 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.750967026 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.751177073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.751190901 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.751265049 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.751272917 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.751422882 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.751641035 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.751656055 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.751698017 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.751704931 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.751718044 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.751744986 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.751799107 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.751812935 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.751848936 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.751854897 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.751872063 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.751893997 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.752068996 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.752084970 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.752137899 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.752146006 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.753937006 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.836570024 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.836586952 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.836638927 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.836649895 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.836661100 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.836688042 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.836927891 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.836947918 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.836992979 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.837004900 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.837025881 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.837042093 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.837184906 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.837201118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.837238073 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.837244987 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.837265015 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.837289095 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.837539911 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.837557077 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.837595940 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.837604046 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.837616920 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.837645054 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.837872028 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.837887049 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.837929010 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.837935925 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.837959051 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.837979078 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.838255882 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.838269949 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.838325977 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.838332891 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.838346958 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.838367939 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.838485956 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.838501930 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.838552952 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.838560104 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.838601112 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.838783979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.838799953 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.838835955 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.838844061 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.838867903 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.838886976 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.923449993 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.923470974 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.923537016 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.923547983 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.923715115 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.923743010 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.923779964 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.923787117 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.923799038 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.923826933 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.924073935 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.924087048 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.924137115 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.924143076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.924154043 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.924180031 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.924649000 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.924664021 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.924715042 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.924722910 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.924741030 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.924761057 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.924943924 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.924963951 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.925003052 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.925010920 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.925028086 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.925055027 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.925378084 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.925401926 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.925443888 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.925448895 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.925463915 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.925466061 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.925491095 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.925492048 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.925506115 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.925535917 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.925546885 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.925930977 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.925945044 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.925988913 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.925997019 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:54.926008940 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:54.926035881 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.010745049 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.010763884 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.010850906 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.010862112 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.010906935 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.011128902 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.011142969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.011204958 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.011212111 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.011308908 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.011428118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.011441946 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.011487961 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.011495113 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.011527061 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.011535883 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.011714935 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.011729956 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.011780977 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.011789083 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.011919022 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.011990070 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.012005091 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.012058973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.012065887 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.012172937 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.012278080 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.012293100 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.012342930 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.012348890 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.012434959 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.012670040 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.012686014 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.012743950 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.012756109 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.012844086 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.012958050 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.012973070 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.013044119 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.013051987 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.013148069 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.097182989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.097202063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.097287893 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.097299099 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.097317934 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.097361088 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.097513914 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.097528934 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.097573042 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.097580910 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.097594023 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.097620964 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.097779036 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.097795010 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.097853899 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.097860098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.098067999 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.098099947 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.098114014 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.098181009 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.098186970 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.098324060 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.098459959 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.098474979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.098525047 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.098531961 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.098553896 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.098567009 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.098752975 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.098767996 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.098810911 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.098818064 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.098851919 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.098866940 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.099164009 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.099178076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.099235058 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.099241018 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.099251986 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.099280119 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.140978098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.141000986 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.141056061 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.141066074 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.141108036 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.141127110 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.185385942 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.185400963 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.185456038 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.185463905 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.185492039 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.185503006 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.185725927 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.185740948 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.185766935 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.185806990 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.185812950 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.185863972 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.186258078 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.186271906 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.186316013 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.186322927 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.186336040 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.186361074 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.186836958 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.186852932 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.186907053 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.186914921 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.186969995 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.187211990 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.187226057 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.187278986 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.187287092 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.187369108 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.187752008 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.187767029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.187812090 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.187819004 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.187841892 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.187849045 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.188143969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.188158989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.188205004 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.188213110 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.188262939 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.227794886 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.227816105 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.227871895 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.227888107 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.227931976 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.272305012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.272322893 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.272490978 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.272500038 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.272547960 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.272831917 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.272846937 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.272905111 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.272912025 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.273017883 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.273341894 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.273356915 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.273408890 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.273416042 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.273511887 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.273741961 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.273757935 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.273806095 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.273813009 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.273847103 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.274013042 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.274240971 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.274255991 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.274318933 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.274327040 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.274386883 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.274625063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.274638891 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.274698973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.274705887 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.274789095 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.275027990 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.275052071 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.275104046 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.275113106 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.278388977 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.314374924 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.314388990 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.314564943 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.314574003 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.314621925 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.358962059 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.358977079 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.359039068 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.359047890 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.359088898 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.359524012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.359539032 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.359591007 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.359596968 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.359637022 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.359997034 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.360011101 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.360068083 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.360075951 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.360121012 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.360392094 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.360408068 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.360466957 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.360474110 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.360512972 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.360955954 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.360971928 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.361020088 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.361027002 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.361048937 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.361062050 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.361295938 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.361311913 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.361361027 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.361367941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.361394882 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.361404896 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.361655951 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.361671925 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.361725092 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.361731052 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.361757040 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.361776114 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.401397943 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.401412964 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.401585102 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.401597977 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.401648045 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.444189072 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.444205999 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.444258928 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.444266081 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.444298029 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.444318056 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.444488049 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.444503069 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.444560051 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.444566011 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.444607973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.444607973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.444806099 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.444822073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.444870949 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.444878101 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.444905043 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.444922924 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.445121050 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.445137978 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.445225954 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.445233107 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.445272923 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.445508003 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.445528030 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.445564985 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.445570946 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.445602894 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.445612907 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.445797920 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.445812941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.445859909 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.445867062 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.445894003 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.445911884 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.446125984 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.446141958 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.446197987 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.446204901 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.446248055 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.486588955 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.486604929 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.486666918 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.486675978 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.486709118 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.486726999 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.530961037 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.530976057 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.531045914 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.531054020 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.531096935 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.531238079 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.531251907 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.531303883 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.531316996 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.531357050 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.531552076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.531565905 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.531620979 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.531626940 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.531666994 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.531918049 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.531932116 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.531980038 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.531986952 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.532027960 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.532227993 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.532243013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.532284975 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.532294035 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.532332897 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.532619953 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.532635927 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.532689095 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.532696009 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.532735109 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.532830954 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.532845020 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.532888889 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.532895088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.532912970 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.532932043 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.573323011 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.573343992 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.573445082 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.573477030 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.573523998 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.617796898 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.617818117 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.617949009 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.617969990 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.618017912 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.618156910 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.618174076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.618228912 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.618236065 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.618278027 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.618413925 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.618428946 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.618484974 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.618493080 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.618535042 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.618824005 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.618839025 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.618890047 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.618899107 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.618930101 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.618949890 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.619106054 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.619122028 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.619168997 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.619175911 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.619204044 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.619225025 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.619368076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.619384050 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.619429111 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.619436979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.619476080 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.619657993 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.619673014 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.619716883 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.619724035 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.619746923 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.619769096 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.631099939 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.660083055 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.660099983 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.660203934 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.660218000 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.660263062 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.704543114 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.704560995 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.704691887 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.704708099 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.704756975 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.704912901 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.704929113 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.704988956 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.704997063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.705069065 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.705336094 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.705353022 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.705413103 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.705420017 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.705463886 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.705477953 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.705495119 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.705530882 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.705537081 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.705563068 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.705588102 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.705825090 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.705840111 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.705899954 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.705909967 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.705950022 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.706130028 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.706142902 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.706197977 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.706204891 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.706248999 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.706446886 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.706465960 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.706507921 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.706515074 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.706547022 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.706562996 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.731311083 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.746829033 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.746845007 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.746978045 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.746998072 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.747047901 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.791665077 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.791680098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.791806936 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.791817904 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.791874886 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.792156935 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.792172909 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.792224884 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.792232037 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.792270899 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.792681932 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.792695999 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.792748928 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.792757034 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.792798042 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.793250084 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.793262959 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.793304920 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.793311119 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.793342113 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.793360949 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.793663979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.793677092 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.793721914 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.793730021 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.793772936 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.794058084 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.794071913 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.794121981 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.794131041 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.794173002 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.794392109 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.794405937 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.794450045 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.794460058 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.794485092 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.794509888 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.795327902 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.836683035 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.836699009 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.836780071 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.836796045 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.836841106 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.878177881 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.878196955 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.878320932 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.878336906 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.878385067 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.878520012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.878535032 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.878590107 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.878597021 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.878640890 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.878860950 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.878875017 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.878937006 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.878947020 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.878993034 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.879168987 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.879183054 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.879230022 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.879236937 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.879265070 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.879282951 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.879532099 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.879544973 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.879592896 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.879600048 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.879616022 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.879640102 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.879906893 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.879924059 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.879976988 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.879985094 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.880028009 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.880074978 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.880089045 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.880192041 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.880198956 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.880243063 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.882683039 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.920496941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.920511007 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.920628071 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.920638084 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.920684099 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.965002060 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.965015888 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.965095043 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.965120077 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.965167046 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.965389013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.965401888 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.965459108 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.965466976 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.965512037 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.965677977 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.965692997 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.965739012 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.965745926 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.965790033 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.965958118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.965970039 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.966021061 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.966027975 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.966072083 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.966278076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.966293097 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.966337919 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.966344118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.966370106 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.966387033 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.966578960 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.966592073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.966681957 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.966690063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.966734886 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.966936111 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.966973066 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.967006922 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.967014074 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:55.967036009 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:55.974154949 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.007334948 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.007350922 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.007456064 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.007466078 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.050657988 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.051865101 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.051878929 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.051945925 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.051954985 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.051999092 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.052203894 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.052217960 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.052268982 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.052275896 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.052323103 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.052536011 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.052551031 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.052603006 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.052611113 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.052650928 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.052876949 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.052891970 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.052947998 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.052956104 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.052982092 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.052995920 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.053040981 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.053060055 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.053112984 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.053118944 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.053160906 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.053410053 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.053425074 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.053473949 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.053481102 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.053524017 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.053894997 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.053909063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.053971052 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.053977013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.054003000 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.054023027 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.062467098 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.094119072 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.094134092 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.094213009 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.094223022 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.094274998 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.138590097 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.138603926 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.138703108 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.138712883 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.138757944 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.138982058 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.138998032 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.139053106 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.139060974 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.139101028 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.139257908 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.139272928 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.139328003 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.139333963 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.139375925 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.139642000 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.139655113 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.139694929 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.139700890 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.139724970 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.139740944 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.139813900 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.139828920 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.139878988 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.139884949 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.139913082 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.139921904 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.140166998 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.140182018 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.140242100 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.140249014 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.140261889 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.140309095 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.140522003 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.140537977 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.140583992 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.140592098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.140618086 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.140636921 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.141346931 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.181061983 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.181082010 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.181145906 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.181158066 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.181171894 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.182385921 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.225313902 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.225333929 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.225397110 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.225409031 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.225447893 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.225678921 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.225697994 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.225761890 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.225769043 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.225819111 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.225929976 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.225944042 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.225992918 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.226000071 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.226097107 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.226222992 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.226239920 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.226284027 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.226290941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.226315975 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.226346016 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.226564884 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.226578951 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.226612091 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.226618052 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.226646900 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.226661921 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.226929903 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.226946115 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.226994038 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.227000952 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.227044106 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.227260113 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.227276087 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.227315903 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.227323055 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.227336884 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.227380991 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.267682076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.267699957 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.267743111 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.267755032 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.267781973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.267805099 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.312097073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.312113047 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.312176943 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.312186003 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.312218904 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.312244892 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.312412024 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.312427044 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.312464952 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.312470913 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.312500000 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.312519073 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.312865019 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.312879086 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.312922001 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.312930107 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.312958002 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.312968016 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.313114882 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.313127995 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.313180923 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.313189030 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.313235998 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.313580036 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.313596964 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.313637972 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.313647032 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.313666105 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.313694000 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.318589926 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.318605900 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.318655968 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.318664074 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.318696976 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.318720102 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.318892002 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.318905115 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.318954945 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.318962097 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.318986893 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.319010973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.354610920 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.354626894 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.354671001 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.354680061 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.354720116 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.398961067 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.398982048 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.399023056 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.399032116 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.399064064 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.399082899 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.399249077 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.399265051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.399317980 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.399327040 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.399373055 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.399621964 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.399643898 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.399688005 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.399694920 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.399741888 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.399965048 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.399980068 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.400026083 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.400033951 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.400090933 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.400218010 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.400233030 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.400268078 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.400274992 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.400300026 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.400322914 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.400562048 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.400577068 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.400624990 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.400636911 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.400677919 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.400881052 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.400895119 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.400945902 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.400953054 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.400985003 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.400994062 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.441477060 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.441493988 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.441557884 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.441570044 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.441613913 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.485730886 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.485747099 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.485805035 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.485814095 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.485856056 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.486020088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.486033916 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.486080885 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.486088991 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.486114979 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.486129045 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.486267090 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.486284018 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.486331940 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.486339092 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.486367941 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.486387968 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.486654043 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.486666918 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.486722946 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.486731052 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.486774921 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.486960888 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.486974001 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.487045050 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.487056971 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.487071037 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.487096071 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.487322092 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.487335920 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.487387896 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.487396002 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.487423897 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.487443924 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.487626076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.487639904 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.487687111 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.487694025 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.487720013 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.487746954 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.528171062 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.528197050 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.528285027 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.528292894 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.528331041 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.572567940 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.572582006 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.572643042 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.572680950 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.572698116 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.572741985 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.572853088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.572870970 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.572906017 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.572912931 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.572956085 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.572967052 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.572971106 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.572982073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.573007107 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.573021889 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.573030949 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.573056936 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.573076010 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.573323011 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.573337078 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.573375940 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.573383093 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.573406935 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.573417902 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.573615074 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.573628902 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.573683977 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.573690891 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.573734045 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.573993921 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.574007988 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.574054003 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.574060917 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.574100971 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.574296951 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.574310064 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.574354887 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.574362040 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.574385881 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.574404955 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.614808083 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.614824057 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.614887953 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.614917040 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.614933968 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.618436098 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.661425114 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.661438942 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.661551952 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.661581993 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.661631107 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.661791086 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.661804914 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.661860943 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.661868095 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.661909103 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.662430048 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.662442923 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.662498951 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.662507057 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.662549019 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.662746906 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.662760973 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.662820101 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.662827969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.662868977 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.663155079 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.663168907 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.663223028 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.663228989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.663271904 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.663619041 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.663634062 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.663691044 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.663698912 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.663739920 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.663830042 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.663844109 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.663897038 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.663903952 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.663945913 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.702497959 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.702512980 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.702603102 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.702611923 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.702678919 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.748177052 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.748198986 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.748282909 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.748294115 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.748357058 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.748502016 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.748517990 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.748573065 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.748580933 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.748625994 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.748986006 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749001980 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749049902 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.749058008 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749100924 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.749329090 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749347925 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749403954 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.749411106 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749423981 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.749454975 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.749526978 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749542952 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749588966 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.749597073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749634981 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.749739885 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749754906 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749799013 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.749804974 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749849081 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.749854088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749865055 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749893904 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749905109 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.749912024 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.749941111 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.749949932 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.789330959 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.789346933 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.789458036 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.789467096 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.789513111 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.834750891 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.834765911 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.834830046 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.834840059 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.834903955 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.835227013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.835241079 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.835288048 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.835294962 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.835335016 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.835335016 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.835578918 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.835592031 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.835649967 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.835658073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.835681915 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.835706949 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.836117029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.836131096 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.836189032 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.836196899 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.836236000 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.836610079 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.836622953 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.836685896 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.836693048 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.836733103 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.837003946 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.837017059 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.837063074 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.837069988 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.837097883 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.837107897 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.837491035 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.837505102 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.837555885 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.837562084 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.837575912 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.837595940 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.875324965 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.875344038 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.875416040 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.875416040 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.875433922 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.875479937 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.920645952 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.920660973 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.920728922 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.920737028 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.920763016 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.920779943 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.920974016 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.920989037 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.921032906 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.921039104 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.921066046 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.921097994 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.921216011 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.921228886 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.921283007 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.921289921 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.921330929 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.921555042 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.921569109 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.921611071 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.921616077 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.921642065 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.921664000 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.921896935 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.921910048 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.921968937 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.921976089 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.922015905 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.922230959 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.922245026 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.922293901 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.922300100 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.922323942 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.922341108 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.922477961 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.922492981 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.922532082 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.922538042 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.922563076 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.922574997 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.962037086 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.962052107 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.962146044 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:56.962162018 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:56.962212086 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.007705927 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.007719994 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.007797003 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.007807016 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.007872105 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.008085966 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.008100986 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.008145094 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.008152008 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.008176088 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.008189917 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.008436918 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.008450031 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.008495092 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.008502007 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.008528948 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.008542061 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.008642912 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.008656979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.008716106 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.008722067 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.008764029 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.009011984 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.009023905 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.009082079 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.009088993 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.009100914 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.009119034 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.009126902 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.009135962 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.009160995 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.009195089 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.009666920 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.009687901 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.009744883 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.009751081 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.009793043 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.048823118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.048836946 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.048909903 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.048923969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.048985004 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.094119072 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.094135046 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.094243050 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.094253063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.094316006 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.094485998 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.094501019 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.094568968 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.094574928 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.094618082 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.094876051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.094888926 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.094938040 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.094944954 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.094968081 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.094995022 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.095115900 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.095129967 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.095186949 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.095194101 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.095238924 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.095551014 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.095563889 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.095618963 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.095624924 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.095665932 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.095860004 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.095874071 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.095921040 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.095927000 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.095952034 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.095973015 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.096167088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.096180916 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.096234083 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.096241951 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.096281052 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.135725021 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.135739088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.135848045 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.135854959 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.135895967 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.181025982 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.181042910 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.181113958 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.181126118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.181159973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.181269884 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.181298018 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.181345940 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.181355000 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.181396008 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.181626081 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.181641102 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.181689978 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.181696892 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.181739092 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.181953907 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.181967974 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.182024956 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.182033062 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.182075977 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.182287931 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.182301998 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.182359934 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.182368040 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.182408094 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.182614088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.182634115 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.182681084 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.182692051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.182714939 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.182739973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.182893038 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.182909012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.182960987 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.182966948 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.183006048 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.222580910 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.222595930 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.222692013 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.222700119 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.222743034 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.267802000 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.267818928 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.267935038 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.267952919 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.267988920 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.267997026 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.268003941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.268018007 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.268048048 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.268054962 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.268083096 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.268101931 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.268376112 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.268389940 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.268560886 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.268567085 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.268613100 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.268619061 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.268630981 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.268661022 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.268676043 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.268682003 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.268712997 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.268733025 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.268980980 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.268996000 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.269058943 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.269066095 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.269108057 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.269340038 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.269356012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.269448996 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.269455910 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.269498110 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.269639969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.269654989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.269695044 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.269701958 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.269728899 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.269742966 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.309350014 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.309366941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.309453011 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.309463978 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.309506893 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.354577065 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.354593992 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.354688883 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.354700089 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.354743004 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.354974985 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.354993105 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.355031013 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.355037928 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.355065107 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.355073929 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.355334044 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.355349064 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.355420113 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.355427027 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.355460882 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.355545044 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.355556965 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.355613947 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.355622053 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.355659962 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.355817080 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.355839968 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.355901003 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.355909109 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.355950117 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.356129885 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.356143951 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.356198072 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.356204033 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.356241941 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.356467009 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.356482029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.356529951 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.356535912 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.356574059 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.396264076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.396277905 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.396351099 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.396364927 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.396389961 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.396490097 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.441582918 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.441600084 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.441667080 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.441695929 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.441736937 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.442024946 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.442038059 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.442089081 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.442095995 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.442135096 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.442383051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.442397118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.442442894 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.442451000 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.442492008 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.442636967 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.442650080 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.442696095 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.442703009 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.442755938 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.442953110 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.442971945 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.443012953 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.443018913 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.443053961 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.443233013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.443247080 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.443286896 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.443293095 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.443303108 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.443337917 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.443523884 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.443537951 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.443579912 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.443586111 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.443624973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.483222961 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.483244896 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.483298063 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.483316898 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.483355999 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.528310061 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.528330088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.528424025 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.528436899 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.528481960 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.528610945 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.528625965 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.528687000 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.528693914 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.528742075 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.528934002 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.528947115 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.528996944 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.529004097 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.529047012 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.529299974 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.529318094 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.529355049 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.529361963 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.529390097 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.529407024 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.529531002 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.529545069 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.529594898 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.529602051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.529623985 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.529635906 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.529983044 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.529997110 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.530040979 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.530046940 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.530071974 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.530085087 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.530319929 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.530333042 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.530380011 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.530386925 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.530409098 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.530417919 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.569849968 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.569868088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.569916964 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.569926023 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.569936037 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.570430994 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.615060091 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.615075111 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.615127087 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.615134954 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.615149021 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.615433931 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.615456104 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.615483046 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.615492105 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.615506887 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.615531921 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.615715027 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.615730047 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.615803003 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.615808964 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.615820885 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.616122007 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.616142035 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.616174936 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.616183043 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.616192102 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.616219044 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.616391897 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.616405010 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.616451979 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.616458893 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.616498947 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.616578102 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.616781950 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.616795063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.616831064 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.616837978 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.616873980 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.616991997 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.617006063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.617043018 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.617048979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.617058039 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.617083073 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.656698942 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.656718016 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.656779051 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.656793118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.656805992 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.656874895 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.702052116 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.702069044 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.702157974 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.702167988 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.702207088 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.702270031 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.702284098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.702334881 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.702342033 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.702596903 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.702620029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.702672005 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.702681065 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.702706099 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.702733994 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.702956915 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.702970982 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.703025103 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.703032017 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.703072071 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.703326941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.703341007 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.703394890 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.703402996 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.703448057 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.703485012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.703500986 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.703540087 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.703546047 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.703576088 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.703593016 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.703898907 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.703912973 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.703969002 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.703975916 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.704014063 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.743601084 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.743618965 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.743736029 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.743743896 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.743788958 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.788718939 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.788736105 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.788872957 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.788882017 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.788928986 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.788981915 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.788995981 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.789051056 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.789057016 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.789099932 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.789371014 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.789383888 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.789442062 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.789449930 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.789489985 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.789695978 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.789710045 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.789771080 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.789777040 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.789832115 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.790002108 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.790015936 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.790072918 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.790080070 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.790127993 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.790338993 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.790353060 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.790407896 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.790414095 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.790457964 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.790607929 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.790626049 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.790694952 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.790703058 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.790744066 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.831124067 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.831140041 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.831468105 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.831476927 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.831540108 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.880198956 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.880219936 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.880328894 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.880340099 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.880392075 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.880402088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.880420923 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.880471945 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.880480051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.880523920 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.880719900 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.880733967 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.880799055 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.880805016 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.880847931 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.881006956 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.881021976 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.881078959 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.881084919 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.881124973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.881510973 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.881530046 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.881582975 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.881591082 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.881633997 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.881829023 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.881841898 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.881896019 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.881903887 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.881943941 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.882204056 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.882217884 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.882267952 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.882276058 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.882319927 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.917275906 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.917294025 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.917393923 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.917406082 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.917452097 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.963604927 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.963622093 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.963728905 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.963737011 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.963784933 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.964272976 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.964287996 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.964363098 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.964370012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.964411020 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.964478016 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.964493036 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.964548111 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.964553118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.964597940 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.965260029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.965272903 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.965337038 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.965343952 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.965384007 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.965451956 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.965466022 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.965522051 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.965529919 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.965576887 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.966188908 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.966202021 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.966259956 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.966268063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.966305017 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.966861963 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.966876030 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.966937065 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:57.966943979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:57.966988087 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.005595922 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.005610943 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.005749941 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.005759954 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.005810976 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.049113989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.049133062 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.049195051 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.049205065 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.049233913 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.049242020 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.049523115 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.049536943 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.049601078 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.049608946 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.049649954 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.049762011 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.049776077 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.049854040 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.049860001 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.049912930 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.050640106 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.050653934 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.050715923 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.050721884 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.050734043 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.050754070 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.050760031 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.050766945 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.050802946 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.050834894 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.051338911 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.051353931 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.051410913 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.051418066 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.051456928 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.051460981 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.051472902 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.051491022 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.051525116 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.051532984 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.051543951 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.051573992 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.090967894 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.090986013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.091048956 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.091064930 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.094420910 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.135921001 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.135936022 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.136001110 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.136009932 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.136051893 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.136262894 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.136276960 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.136333942 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.136343002 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.136396885 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.136651039 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.136665106 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.136719942 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.136727095 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.136769056 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.136903048 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.136917114 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.136966944 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.136974096 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.137017012 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.137373924 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.137387991 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.137439013 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.137444973 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.137489080 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.137522936 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.137537956 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.137589931 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.137598038 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.137643099 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.137836933 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.137851954 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.137902975 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.137909889 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.137948036 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.178345919 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.178364992 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.178406000 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.178414106 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.178453922 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.222629070 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.222645044 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.222700119 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.222707033 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.222763062 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.222992897 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.223006964 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.223056078 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.223062992 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.223103046 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.223257065 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.223288059 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.223329067 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.223336935 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.223349094 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.223427057 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.223675013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.223690033 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.223737955 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.223743916 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.223784924 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.223897934 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.223912001 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.223963976 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.223970890 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.224014044 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.224248886 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.224262953 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.224308968 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.224315882 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.224353075 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.224704027 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.224718094 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.224771976 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.224778891 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.224823952 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.265186071 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.265204906 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.265275955 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.265285015 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.265328884 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.309432983 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.309448957 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.309535980 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.309549093 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.309617043 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.309782982 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.309796095 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.309848070 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.309855938 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.309897900 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.310106993 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.310122967 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.310177088 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.310184002 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.310225964 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.310359001 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.310374022 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.310429096 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.310436964 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.310621023 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.310795069 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.310808897 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.310868025 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.310875893 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.310914040 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.311063051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.311077118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.311120987 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.311127901 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.311166048 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.311289072 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.311307907 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.311362982 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.311371088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.311410904 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.352011919 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.352026939 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.352226973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.352236986 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.352282047 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.396867037 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.396879911 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.396970987 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.396977901 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.397025108 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.397164106 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.397178888 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.397238970 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.397244930 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.397288084 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.397664070 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.397679090 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.397737026 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.397742987 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.397783995 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.397844076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.397856951 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.397911072 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.397917986 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.397958040 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.398159027 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.398174047 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.398226023 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.398232937 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.398277044 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.398556948 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.398574114 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.398631096 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.398638010 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.398677111 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.398678064 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.398689032 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.398720980 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.398732901 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.398741007 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.398765087 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.398778915 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.438916922 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.438935995 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.439096928 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.439107895 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.439157009 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.483530998 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.483549118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.483649969 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.483659029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.483700991 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.483932018 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.483962059 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.484023094 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.484030008 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.484074116 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.484208107 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.484221935 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.484318018 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.484325886 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.484376907 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.484522104 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.484534979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.484594107 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.484600067 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.484637022 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.484833002 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.484848022 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.484910011 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.484918118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.484954119 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.485238075 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.485255957 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.485312939 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.485320091 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.485368013 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.485424042 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.485438108 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.485490084 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.485496998 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.485539913 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.525556087 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.525572062 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.525666952 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.525680065 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.525751114 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.570338964 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.570354939 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.570440054 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.570451021 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.570540905 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.570643902 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.570657015 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.570719957 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.570727110 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.570765972 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.571058989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.571073055 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.571115017 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.571121931 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.571154118 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.571281910 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.571295977 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.571346998 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.571353912 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.571391106 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.571659088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.571675062 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.571722984 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.571729898 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.571767092 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.571993113 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.572009087 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.572067022 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.572074890 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.572105885 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.572360039 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.572374105 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.572416067 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.572422981 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.572444916 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.572463036 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.612330914 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.612344980 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.612422943 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.612449884 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.612490892 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.657145977 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.657166004 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.657246113 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.657257080 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.657293081 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.657474995 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.657490015 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.657540083 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.657547951 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.657583952 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.657845020 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.657859087 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.657980919 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.657989025 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.658039093 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.658134937 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.658148050 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.658184052 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.658190966 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.658220053 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.658230066 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.658499002 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.658518076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.658576965 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.658587933 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.658641100 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.658795118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.658807993 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.658843040 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.658849955 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.658890009 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.659185886 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.659198999 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.659241915 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.659249067 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.659272909 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.659287930 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.699206114 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.699223042 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.699323893 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.699336052 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.699379921 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.744266033 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.744282961 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.744399071 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.744419098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.744463921 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.744633913 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.744649887 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.744704962 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.744712114 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.744755983 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.744946957 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.744962931 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.745024920 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.745033026 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.745071888 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.745351076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.745364904 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.745424986 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.745431900 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.745469093 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.745524883 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.745541096 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.745573997 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.745580912 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.745608091 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.745628119 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.745837927 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.745853901 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.745909929 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.745917082 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.745959044 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.746292114 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.746309996 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.746371984 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.746380091 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.746427059 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.786001921 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.786016941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.786108971 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.786118984 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.786158085 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.831026077 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.831042051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.831120014 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.831127882 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.831165075 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.831351042 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.831365108 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.831418991 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.831427097 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.831469059 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.831712008 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.831726074 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.831779003 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.831785917 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.831820965 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.832067013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.832083941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.832189083 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.832199097 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.832237005 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.832329035 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.832343102 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.832389116 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.832396030 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.832438946 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.832653046 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.832668066 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.832716942 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.832724094 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.832761049 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.832941055 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.832954884 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.833003998 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.833010912 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.833045959 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.872833967 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.872849941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.872920990 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.872929096 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.872962952 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.872975111 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.917857885 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.917871952 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.917994976 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.918005943 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.918046951 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.918168068 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.918180943 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.918231010 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.918239117 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.918267012 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.918282032 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.918489933 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.918504000 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.918559074 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.918566942 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.918602943 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.918800116 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.918817043 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.918864965 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.918872118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.918909073 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.919260979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.919274092 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.919328928 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.919334888 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.919374943 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.919440985 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.919454098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.919507980 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.919513941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.919559002 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.919810057 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.919822931 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.919879913 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.919886112 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.919922113 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.959549904 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.959566116 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.959646940 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:58.959656000 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:58.959696054 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.005084991 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.005104065 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.005217075 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.005224943 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.005269051 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.005578041 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.005593061 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.005657911 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.005665064 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.005707026 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.005979061 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.005995035 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.006052017 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.006059885 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.006097078 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.006465912 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.006479979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.006525040 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.006532907 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.006572962 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.006978989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.006995916 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.007055044 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.007062912 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.007101059 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.007356882 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.007373095 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.007424116 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.007430077 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.007447958 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.007464886 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.008136034 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.008152962 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.008198023 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.008205891 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.008244038 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.046423912 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.046437979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.046524048 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.046539068 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.046582937 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.091686964 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.091705084 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.091797113 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.091804981 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.091847897 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.091939926 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.091953039 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.092009068 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.092015028 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.092052937 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.092359066 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.092372894 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.092422962 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.092431068 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.092464924 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.092647076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.092660904 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.092710018 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.092715979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.092752934 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.092917919 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.092931986 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.092988014 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.092995882 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.093031883 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.093158960 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.093174934 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.093221903 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.093230009 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.093266010 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.093569040 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.093583107 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.093632936 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.093640089 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.093674898 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.133713961 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.133729935 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.133809090 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.133822918 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.133893967 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.179032087 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.179049969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.179136992 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.179145098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.179193020 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.179651976 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.179672003 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.179733992 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.179740906 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.179778099 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.179964066 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.179981947 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.180026054 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.180032969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.180052996 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.180069923 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.180469036 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.180484056 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.180537939 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.180546045 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.180581093 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.180912971 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.180926085 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.180988073 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.180996895 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.181031942 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.181467056 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.181480885 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.181536913 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.181543112 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.181560040 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.181580067 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.181941032 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.181957006 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.182013988 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.182022095 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.182065010 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.220052004 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.220069885 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.220200062 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.220208883 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.220252037 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.266139984 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.266154051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.266238928 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.266247988 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.266289949 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.266467094 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.266480923 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.266527891 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.266535044 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.266558886 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.266572952 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.267049074 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.267062902 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.267108917 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.267116070 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.267132044 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.267153978 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.267543077 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.267556906 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.267610073 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.267616987 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.267652035 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.267865896 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.267880917 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.267930031 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.267936945 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.267971039 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.268198013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.268212080 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.268256903 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.268264055 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.268285990 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.268297911 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.268762112 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.268775940 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.268827915 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.268834114 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.268857002 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.268871069 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.306875944 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.306889057 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.306956053 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.306965113 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.306999922 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.351996899 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.352020025 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.352080107 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.352093935 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.352129936 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.352174997 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.352190971 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.352226973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.352232933 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.352253914 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.352274895 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.352515936 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.352530003 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.352569103 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.352575064 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.352592945 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.352615118 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.352906942 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.352921009 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.352962971 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.352968931 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.352978945 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.353003979 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.353146076 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.353161097 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.353204012 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.353209972 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.353234053 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.353251934 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.353550911 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.353564978 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.353609085 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.353615999 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.353647947 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.353669882 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.353771925 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.353787899 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.353831053 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.353837967 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.353885889 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.393740892 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.393758059 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.393837929 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.393852949 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.393894911 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.438812017 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.438827991 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.438915968 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.438924074 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.438965082 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.439044952 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.439059973 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.439110994 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.439117908 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.439155102 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.439348936 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.439364910 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.439415932 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.439423084 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.439457893 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.439630032 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.439644098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.439690113 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.439697027 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.439721107 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.439733028 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.440020084 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.440033913 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.440083981 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.440089941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.440126896 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.440308094 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.440321922 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.440368891 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.440376997 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.440418005 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.440686941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.440700054 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.440748930 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.440754890 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.440792084 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.480516911 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.480536938 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.480597973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.480609894 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.480648041 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.525701046 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.525722027 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.525772095 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.525783062 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.525815964 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.525826931 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.526248932 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.526268005 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.526321888 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.526334047 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.526376009 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.526511908 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.526526928 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.526577950 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.526583910 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.526619911 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.526828051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.526843071 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.526887894 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.526894093 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.526932001 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.527234077 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.527250051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.527299881 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.527299881 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.527319908 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.527338982 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.527355909 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.527394056 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.527409077 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.527451038 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.527837038 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.527852058 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.527905941 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.527911901 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.527951002 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.567293882 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.567320108 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.567428112 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.567437887 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.567476034 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.613151073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.613172054 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.613267899 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.613276005 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.613315105 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.613537073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.613550901 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.613620043 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.613627911 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.613667965 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.613715887 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.613729000 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.613765001 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.613775969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.613823891 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.613823891 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.614097118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.614110947 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.614166021 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.614172935 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.614207983 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.614469051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.614485979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.614543915 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.614551067 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.614594936 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.615000010 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.615012884 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.615065098 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.615072012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.615108967 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.615528107 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.615551949 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.615595102 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.615602970 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.615638971 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.654063940 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.654078007 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.654203892 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.654220104 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.654279947 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.699111938 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.699127913 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.699223995 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.699234009 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.699280977 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.699489117 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.699505091 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.699561119 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.699573994 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.699611902 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.699712038 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.699726105 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.699783087 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.699790955 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.699830055 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.700062037 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.700074911 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.700135946 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.700146914 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.700187922 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.700366974 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.700381994 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.700442076 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.700448990 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.700498104 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.700678110 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.700697899 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.700750113 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.700762033 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.700803995 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.700983047 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.700997114 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.701057911 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.701066017 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.701102018 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.740804911 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.740825891 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.740932941 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.740947008 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.740992069 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.785995960 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.786009073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.786096096 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.786108971 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.786166906 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.786289930 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.786304951 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.786365032 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.786372900 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.786412954 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.786874056 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.786887884 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.786953926 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.786962032 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.787002087 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.787201881 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.787216902 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.787297010 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.787305117 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.787353992 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.787409067 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.787421942 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.787481070 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.787487984 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.787524939 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.787789106 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.787806034 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.787854910 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.787863016 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.787888050 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.787902117 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.788075924 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.788093090 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.788153887 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.788161039 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.788198948 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.827450037 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.827466011 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.827517986 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.827528000 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.827569008 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.873567104 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.873583078 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.873639107 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.873651028 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.873688936 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.874064922 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.874078989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.874124050 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.874130964 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.874165058 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.874432087 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.874445915 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.874495983 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.874504089 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.874536991 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.874695063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.874708891 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.874752998 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.874761105 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.874798059 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.875175953 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.875189066 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.875227928 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.875236034 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.875256062 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.875274897 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.875448942 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.875463009 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.875504017 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.875511885 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.875529051 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.875543118 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.875691891 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.875705004 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.875746012 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.875754118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.875788927 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.959985018 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.960000992 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.960069895 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.960082054 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.960128069 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.960323095 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.960336924 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.960382938 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.960388899 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.960422993 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.960664988 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.960679054 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.960726976 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.960732937 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.960756063 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.960772038 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.960998058 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.961013079 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.961069107 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.961075068 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.961085081 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.961110115 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.961307049 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.961322069 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.961363077 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.961369038 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.961394072 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.961406946 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.961637974 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.961653948 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.961700916 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.961709023 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.961720943 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.961745024 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.961908102 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.961921930 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.961985111 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.961992025 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.962003946 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.962022066 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.962249994 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.962264061 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.962321997 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:41:59.962328911 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:41:59.962363958 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.047111988 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.047130108 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.047257900 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.047270060 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.047321081 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.047596931 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.047611952 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.047677994 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.047686100 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.047719955 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.048110962 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.048125029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.048192978 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.048201084 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.048245907 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.048453093 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.048471928 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.048516035 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.048523903 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.048551083 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.048571110 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.049020052 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.049035072 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.049105883 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.049113989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.049159050 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.049385071 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.049398899 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.049460888 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.049467087 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.049504995 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.049916029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.049931049 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.049999952 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.050007105 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.050049067 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.050438881 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.050455093 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.050529003 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.050538063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.050581932 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.133747101 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.133766890 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.133836985 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.133855104 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.133904934 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.133943081 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.133956909 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.134001017 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.134008884 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.134043932 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.134260893 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.134274960 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.134325981 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.134334087 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.134371996 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.134617090 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.134634018 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.134685993 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.134692907 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.134731054 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.135006905 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.135025978 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.135086060 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.135092020 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.135128975 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.135287046 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.135301113 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.135344982 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.135351896 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.135387897 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.135613918 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.135627031 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.135664940 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.135672092 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.135695934 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.135711908 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.135919094 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.135932922 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.135992050 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.135998964 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.136037111 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.220669985 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.220690966 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.220798016 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.220810890 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.220854998 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.221398115 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.221412897 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.221477032 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.221483946 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.221525908 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.221594095 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.221610069 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.221662045 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.221669912 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.221708059 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.222186089 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.222202063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.222258091 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.222264051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.222306013 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.222486973 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.222501993 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.222568035 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.222575903 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.222666025 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.223426104 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.223439932 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.223495960 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.223505020 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.223545074 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.223738909 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.223752975 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.223818064 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.223824978 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.223864079 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.224270105 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.224284887 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.224338055 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.224344969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.224380970 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.307470083 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.307487965 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.307575941 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.307585955 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.307630062 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.308104992 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.308120012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.308186054 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.308192968 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.308233023 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.308501005 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.308516979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.308564901 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.308573008 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.308610916 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.308939934 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.308960915 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.309034109 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.309042931 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.309087038 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.309277058 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.309290886 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.309344053 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.309351921 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.309391975 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.310237885 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.310254097 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.310312986 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.310318947 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.310357094 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.310561895 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.310576916 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.310643911 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.310652971 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.310704947 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.310936928 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.310951948 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.311014891 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.311022997 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.311062098 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.394323111 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.394340038 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.394434929 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.394449949 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.394499063 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.394716978 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.394731998 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.394781113 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.394788980 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.394830942 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.395054102 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.395068884 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.395113945 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.395119905 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.395162106 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.395641088 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.395657063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.395704031 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.395709991 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.395746946 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.395935059 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.395948887 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.395983934 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.395988941 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.396008015 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.396032095 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.396814108 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.396830082 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.396872044 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.396877050 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.396900892 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.397001982 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.397202969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.397217989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.397258043 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.397264004 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.397288084 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.397313118 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.397830963 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.397845030 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.397886992 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.397892952 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.397917032 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.397938967 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.481225014 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.481247902 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.481357098 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.481374979 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.481421947 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.481657982 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.481673956 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.481712103 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.481718063 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.481745005 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.481760025 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.482063055 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.482079983 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.482115984 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.482122898 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.482144117 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.482163906 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.482352972 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.482367992 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.482403994 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.482409954 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.482435942 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.482459068 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.482800007 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.482819080 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.482856035 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.482862949 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.482897043 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.483556986 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.483572006 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.483613014 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.483619928 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.483644962 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.483664036 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.483870029 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.483886003 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.483925104 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.483932018 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.483961105 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.483974934 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.484539032 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.484554052 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.484591961 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.484597921 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.484630108 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.484643936 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.567913055 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.567929983 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.568001986 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.568016052 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.568051100 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.568274975 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.568290949 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.568350077 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.568357944 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.568392038 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.568639994 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.568666935 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.568698883 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.568710089 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.568732023 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.568753004 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.569156885 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.569171906 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.569220066 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.569226027 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.569264889 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.569477081 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.569495916 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.569549084 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.569555998 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.569595098 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.570266008 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.570281982 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.570333958 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.570339918 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.570374966 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.570583105 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.570599079 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.570650101 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.570657015 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.570694923 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.571320057 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.571333885 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.571377039 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.571382999 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.571409941 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.571428061 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.654624939 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.654644966 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.654772997 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.654812098 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.654855013 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.655198097 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.655216932 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.655272007 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.655282974 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.655335903 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.655606031 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.655622959 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.655668974 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.655675888 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.655704975 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.655714035 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.655808926 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.655827999 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.655864000 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.655869961 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.655898094 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.655919075 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.656172037 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.656188011 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.656239033 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.656245947 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.656270981 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.656282902 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.657090902 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.657104969 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.657160997 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.657169104 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.657210112 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.657391071 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.657406092 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.657471895 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.657480001 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.657536030 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.658015013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.658031940 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.658085108 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.658094883 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.658130884 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.741414070 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.741434097 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.741549969 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.741565943 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.741612911 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.741908073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.741923094 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.741964102 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.741971970 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.741997004 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.742036104 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.742360115 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.742374897 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.742433071 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.742440939 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.742470980 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.742487907 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.742619991 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.742635012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.742686987 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.742695093 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.742738962 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.743010998 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.743026018 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.743086100 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.743099928 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.743140936 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.743895054 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.743911028 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.743968964 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.743977070 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.744016886 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.744236946 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.744251966 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.744311094 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.744318962 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.744359016 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.744878054 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.744893074 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.744952917 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.744961023 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.745007038 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.828195095 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.828214884 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.828293085 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.828305960 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.828368902 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.828604937 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.828619957 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.828677893 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.828685999 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.828727961 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.829016924 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.829030991 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.829093933 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.829099894 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.829135895 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.829312086 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.829327106 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.829382896 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.829391956 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.829437971 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.829750061 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.829763889 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.829858065 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.829865932 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.829904079 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.830517054 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.830530882 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.830595016 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.830601931 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.830640078 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.830972910 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.830986977 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.831039906 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.831051111 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.831089973 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.831609964 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.831625938 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.831684113 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.831691980 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.831732988 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.915035009 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.915057898 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.915141106 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.915152073 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.915194988 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.915436983 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.915452957 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.915519953 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.915527105 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.915568113 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.915817976 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.915832043 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.915888071 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.915895939 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.915940046 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.916143894 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.916158915 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.916241884 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.916249990 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.916297913 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.916569948 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.916605949 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.916665077 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.916671991 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.916707039 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.917263031 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.917278051 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.917330980 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.917337894 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.917372942 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.917581081 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.917599916 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.917654037 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.917666912 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.917706013 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.918314934 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.918333054 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.918391943 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:00.918399096 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:00.918452024 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.001781940 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.001802921 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.001852036 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.001866102 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.001878977 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.001904011 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.002226114 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.002238989 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.002276897 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.002285957 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.002312899 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.002329111 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.002577066 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.002590895 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.002650023 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.002660990 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.002700090 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.002944946 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.002959013 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.003005028 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.003011942 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.003036022 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.003050089 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.003187895 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.003202915 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.003258944 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.003268003 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.003300905 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.004076958 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.004092932 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.004165888 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.004173040 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.004218102 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.004357100 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.004378080 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.004420042 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.004426956 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.004447937 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.004475117 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.005125999 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.005141020 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.005189896 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.005198002 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.005234003 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.088757038 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.088773012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.088907003 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.088922977 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.088972092 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.089210987 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.089225054 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.089272022 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.089277983 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.089317083 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.089327097 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.089545012 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.089560032 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.089607954 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.089615107 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.089653969 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.089894056 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.089914083 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.089951992 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.089958906 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.089992046 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.090024948 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.090361118 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.090421915 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.090424061 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.090435982 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.090445995 CET	443	49764	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.090473890 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.090508938 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.093924999 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.094907999 CET	49764	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.286489010 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.286516905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.286585093 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.286927938 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.286938906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.760406017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.773039103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.773061991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.909007072 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.909106970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.909137011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.909171104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.909202099 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.909218073 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.909239054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.909266949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.909272909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.909286022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.909290075 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.909337044 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.909341097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.913826942 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.913883924 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.913889885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.956940889 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.999504089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.999619007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.999645948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.999670029 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.999691963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.999782085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.999795914 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:01.999802113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:01.999880075 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.000463009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.000802994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.000849962 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.000854969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.000901937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.000936031 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.000958920 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.000965118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.001034021 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.001668930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.001714945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.001744032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.001760006 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.001764059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.001800060 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.001802921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.002554893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.002592087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.002599955 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.002604961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.002645016 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.090554953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.090626001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.090653896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.090683937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.090689898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.090703964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.090737104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.090766907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.090770960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.090780973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.090783119 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.090847969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.090883017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.090890884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.090897083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.090913057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.090922117 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.090971947 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.090976000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.091233015 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.091346025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.091398001 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.091401100 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.091413021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.091444016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.091456890 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.091460943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.091485023 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.091502905 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.091536045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.091583967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.092310905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.092364073 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.092567921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.092612982 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.092617035 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.092624903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.092653990 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.092660904 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.131256104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.131330967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.180648088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.180722952 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.180840015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.180891991 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.181199074 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.181253910 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.181382895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.181427956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.181437016 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.181442976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.181474924 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.181689978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.181740999 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.181746960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.182185888 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.182239056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.182244062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.182280064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.182332039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.182336092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.182439089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.182475090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.182487965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.182491064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.182531118 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.182533026 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.182560921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.182564020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.182570934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.182576895 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.182615995 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.182960987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.183015108 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.183044910 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.183089018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.183150053 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.183192968 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.183198929 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.183250904 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.221748114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.221813917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.271213055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.271264076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.271289110 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.271316051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.271332979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.271358013 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.271431923 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.271478891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.271493912 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.271531105 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.271759033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.271812916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.271848917 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.271897078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.272156000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.272190094 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.272205114 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.272209883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.272228003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.272242069 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.272334099 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.272387981 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.272507906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.272557020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.272679090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.272730112 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.272751093 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.272787094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.272793055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.272831917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.273063898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.273094893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.273122072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.273127079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.273137093 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.273154020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.273910046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.273931026 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.273966074 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.273971081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.273993015 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.274009943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.274643898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.274657965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.274708986 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.274714947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.274804115 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.275006056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.275018930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.275068998 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.275074005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.275183916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.361850977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.361867905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.361958981 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.361970901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.362030983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.362171888 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.362185955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.362241983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.362247944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.362284899 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.362482071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.362497091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.362550020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.362554073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.362592936 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.362828970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.362843037 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.362894058 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.362898111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.362924099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.362941980 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.363147020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.363161087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.363208055 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.363214016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.363248110 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.363528967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.363543987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.363599062 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.363603115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.363640070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.363749027 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.363763094 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.363812923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.363821030 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.363861084 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.364079952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.364094973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.364142895 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.364146948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.364185095 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.452510118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.452533960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.452630043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.452640057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.452698946 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.452843904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.452857971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.452891111 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.452897072 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.452920914 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.452939987 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.453078985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.453093052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.453154087 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.453157902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.453197956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.453463078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.453478098 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.453536034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.453540087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.453577995 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.453746080 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.453759909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.453820944 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.453828096 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.453867912 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.454070091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.454082966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.454143047 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.454147100 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.454185963 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.454390049 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.454401970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.454448938 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.454454899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.454479933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.454498053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.454628944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.454642057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.454704046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.454709053 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.454749107 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.543148041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.543176889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.543246984 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.543270111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.543302059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.543323040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.543421984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.543440104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.543493032 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.543499947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.543539047 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.543812037 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.543831110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.543884039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.543889999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.543926001 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.544164896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.544179916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.544226885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.544230938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.544274092 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.544397116 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.544410944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.544466972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.544472933 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.544506073 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.544702053 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.544715881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.544810057 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.544816017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.544882059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.545135021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.545147896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.545289040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.545298100 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.545335054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.545360088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.545389891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.545394897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.545414925 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.545444012 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.563290119 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.633811951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.633825064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.633932114 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.633945942 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.634119034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.634829998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.634843111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.634903908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.634912014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.634948015 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.635176897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.635190964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.635240078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.635245085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.635277987 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.635402918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.635416985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.635459900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.635467052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.635502100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.635641098 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.635654926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.635704994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.635710001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.635749102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.636100054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.636112928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.636162043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.636166096 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.636176109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.636208057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.636224031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.636229038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.636259079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.636276960 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.636601925 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.636614084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.636657953 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.636663914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.636703968 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.669059038 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.727408886 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.727423906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.727637053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.727646112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.727694988 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.727706909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.727721930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.727775097 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.727780104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.727818966 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.728055954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.728069067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.728121996 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.728127956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.728166103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.728384972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.728399992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.728440046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.728445053 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.728470087 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.728487968 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.728868961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.728894949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.728924990 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.728929996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.728959084 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.728971004 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.729171038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.729186058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.729231119 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.729231119 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.729245901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.729273081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.729285955 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.729290962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.729324102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.729332924 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.729717970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.729732037 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.729774952 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.729784966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.729823112 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.731817961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.815077066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.815098047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.815150976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.815160990 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.815196037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.815212011 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.815391064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.815402985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.815439939 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.815443993 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.815466881 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.815481901 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.815742016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.815753937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.815785885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.815790892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.815817118 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.815828085 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.816127062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.816140890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.816173077 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.816179037 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.816200018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.816219091 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.816379070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.816391945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.816438913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.816443920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.816478968 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.816672087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.816684961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.816729069 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.816734076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.816771030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.817123890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.817137003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.817179918 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.817186117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.817223072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.817368031 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.817380905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.817428112 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.817433119 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.817485094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.818938971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.905826092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.905844927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.905927896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.905947924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.905991077 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.906106949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.906121016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.906186104 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.906193018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.906230927 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.906493902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.906507015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.906553984 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.906560898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.906596899 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.906903028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.906915903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.906965971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.906970978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.907010078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.907229900 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.907244921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.907293081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.907298088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.907334089 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.907684088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.907700062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.907754898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.907790899 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.907797098 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.907829046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.908112049 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.908123970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.908164024 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.908169985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.908188105 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.909935951 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.996432066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.996448040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.996494055 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.996511936 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.996526003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.996546984 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.996675014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.996687889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.996730089 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.996735096 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.996774912 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.996921062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.996933937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.996969938 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.996974945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.996999025 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.997016907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.997240067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.997252941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.997288942 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.997293949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.997317076 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.997334957 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.997607946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.997622967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.997658968 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.997662067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.997690916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.997701883 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.997945070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.997958899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.997987986 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.997996092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.998023987 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.998023987 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.998341084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.998353004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.998393059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.998397112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.998426914 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.998446941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.998555899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.998569012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.998604059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.998608112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:02.998627901 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:02.998645067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.087212086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.087227106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.087342978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.087376118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.087408066 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.087408066 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.087430000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.087443113 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.087599039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.087610960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.087646961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.087654114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.087678909 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.087924004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.087940931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.087970972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.087976933 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.087989092 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.088298082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.088315010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.088361025 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.088366985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.088377953 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.088526011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.088548899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.088571072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.088578939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.088587999 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.088891029 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.088901997 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.088936090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.088941097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.088962078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.089139938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.089157104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.089190006 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.089195967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.089209080 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.098877907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.177798033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.177815914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.177887917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.177908897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.177947044 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.178046942 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.178059101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.178102970 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.178107977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.178148985 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.178447008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.178461075 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.178508043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.178512096 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.178549051 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.178709030 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.178721905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.178766012 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.178771973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.178808928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.178953886 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.178972006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.179006100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.179011106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.179037094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.179054976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.179336071 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.179430008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.179447889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.179502964 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.179507971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.179543972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.179670095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.179683924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.179696083 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.179725885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.179728985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.179754972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.179770947 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.179827929 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.180001974 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.180015087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.180049896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.180052996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.180079937 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.180097103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.268477917 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.268502951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.268554926 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.268579006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.268593073 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.268624067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.268778086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.268791914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.268821001 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.268826962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.268846989 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.268872023 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.269085884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.269099951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.269140959 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.269144058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.269155979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.269256115 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.269500971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.269519091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.269553900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.269562006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.269587040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.269607067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.269736052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.269751072 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.269782066 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.269785881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.269813061 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.269826889 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.270030022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.270045042 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.270076036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.270080090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.270107031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.270123005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.270445108 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.270457983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.270495892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.270498991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.270523071 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.270541906 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.270777941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.270791054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.270812035 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.270849943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.270853996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.270899057 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.359096050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.359112024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.359191895 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.359191895 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.359214067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.359252930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.359386921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.359399080 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.359451056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.359457016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.359502077 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.359685898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.359704018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.359738111 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.359741926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.359766006 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.359778881 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.360182047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.360193968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.360236883 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.360241890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.360266924 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.360280037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.360395908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.360409021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.360441923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.360445976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.360471010 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.360490084 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.360601902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.360615015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.360649109 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.360654116 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.360673904 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.360694885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.361118078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.361130953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.361176968 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.361181974 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.361205101 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.361232996 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.361258984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.361273050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.361311913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.361316919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.361366987 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.449843884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.449863911 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.449950933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.449973106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.450015068 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.450107098 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.450119972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.450150967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.450155020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.450180054 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.450191975 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.450414896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.450428963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.450475931 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.450480938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.450515032 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.450738907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.450752974 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.450795889 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.450800896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.450835943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.451049089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.451061964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.451102972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.451107979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.451131105 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.451148987 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.451505899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.451524973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.451567888 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.451572895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.451608896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.451744080 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.451757908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.451797962 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.451802969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.451834917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.452065945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.452079058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.452120066 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.452124119 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.452146053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.452157974 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.540455103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.540473938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.540545940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.540571928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.540585995 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.540608883 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.540688038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.540703058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.540744066 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.540750027 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.540771961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.540786982 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.541073084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.541088104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.541122913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.541165113 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.541174889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.541212082 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.541378021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.541392088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.541520119 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.541524887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.541564941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.541625977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.541641951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.541682005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.541687965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.541729927 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.541987896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.542002916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.542066097 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.542073965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.542128086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.542433977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.542449951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.542515039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.542521000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.542593956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.542622089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.542634964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.542714119 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.542720079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.542778969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.631093979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.631110907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.631306887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.631331921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.631391048 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.631447077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.631464958 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.631505966 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.631510973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.631551981 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.631695986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.631711960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.631762028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.631766081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.631818056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.632100105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.632121086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.632165909 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.632169962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.632209063 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.632419109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.632433891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.632477045 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.632483959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.632529974 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.632672071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.632688046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.632735014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.632740021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.632775068 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.633043051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.633057117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.633105993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.633116007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.633155107 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.633296967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.633311033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.633347988 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.633354902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.633373022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.633384943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.727339029 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.727355003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.727519035 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.727541924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.727592945 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.727595091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.727605104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.727637053 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.727641106 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.727669001 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.727674961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.727686882 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.727719069 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.727893114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.727911949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.727947950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.727952003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.727981091 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.727989912 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.728286982 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.728302002 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.728349924 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.728360891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.728404045 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.728590965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.728605986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.728652954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.728657961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.728725910 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.728753090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.728765965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.728807926 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.728813887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.728841066 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.728863955 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.729311943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.729329109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.729386091 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.729389906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.729401112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.729427099 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.729434013 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.729456902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.729460955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.729496956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.729512930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.823333979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.823352098 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.823430061 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.823443890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.823457956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.823482990 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.823810101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.823827028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.823878050 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.823884010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.823919058 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.824179888 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.824194908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.824249983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.824255943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.824290037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.824316025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.824331045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.824372053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.824377060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.824414015 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.824790955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.824805021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.824853897 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.824858904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.824903965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.825068951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.825087070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.825133085 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.825139046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.825165033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.825174093 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.825182915 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.825192928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.825202942 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.825229883 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.825886965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.825898886 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.825951099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.825957060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.825967073 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.825987101 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.909452915 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.909471035 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.909588099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.909605980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.909694910 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.910115957 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.910130024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.910195112 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.910200119 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.910252094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.910533905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.910547972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.910600901 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.910605907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.910641909 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.910866976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.910881042 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.910940886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.910950899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.911005020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.911432981 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.911447048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.911501884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.911508083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.911539078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.911560059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.913882017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.913897038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.914077044 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.914082050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.914166927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.914186001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.914222956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.914227962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.914346933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.914346933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.914520025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.914537907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.914586067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.914591074 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.914613962 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.916604042 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:03.999973059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:03.999994993 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.000045061 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.000076056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.000089884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.000123024 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.000721931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.000737906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.000792027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.000798941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.000853062 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.000885010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.000899076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.000943899 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.000951052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.000988007 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.001195908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.001209021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.001251936 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.001256943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.001279116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.001293898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.001466036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.001481056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.001532078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.001538038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.001571894 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.004327059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.004340887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.004414082 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.004421949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.004462004 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.004576921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.004591942 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.004623890 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.004628897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.004647970 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.004672050 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.004942894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.004956961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.005004883 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.005011082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.005047083 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.090652943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.090672970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.090730906 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.090755939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.090769053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.090792894 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.090821981 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.090843916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.090874910 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.090881109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.090909958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.090919018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.091109037 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.091124058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.091175079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.091181040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.091218948 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.091445923 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.091460943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.091506004 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.091514111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.091552019 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.091716051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.091731071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.091773033 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.091778040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.091804028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.091821909 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.094856977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.094871998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.094927073 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.094930887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.094954014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.094973087 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.095088005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.095108032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.095149994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.095155001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.095195055 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.095227957 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.095510006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.095524073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.095604897 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.095604897 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.095611095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.095645905 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.181097984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.181116104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.181214094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.181240082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.181302071 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.181330919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.181344986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.181380033 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.181385994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.181427956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.181427956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.181716919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.181730986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.181927919 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.181935072 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.181974888 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.182070971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.182085037 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.182132959 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.182138920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.182162046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.182169914 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.182313919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.182327032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.182373047 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.182380915 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.182418108 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.185380936 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.185394049 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.185471058 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.185483932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.185520887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.185704947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.185717106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.185761929 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.185775995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.185810089 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.185983896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.185997963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.186031103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.186038017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.186059952 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.186078072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.271780014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.271796942 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.271889925 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.271914005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.271960020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.272027016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.272041082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.272089005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.272094011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.272131920 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.272368908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.272382975 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.272429943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.272434950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.272470951 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.272679090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.272692919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.272742033 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.272746086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.272783041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.273032904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.273047924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.273093939 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.273098946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.273139000 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.276048899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.276065111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.276139975 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.276148081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.276185036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.276398897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.276411057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.276612997 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.276619911 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.276664972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.276674986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.276689053 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.276734114 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.276738882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.276770115 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.276788950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.362287998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.362308025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.362406015 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.362436056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.362544060 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.362628937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.362643003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.362698078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.362704992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.362777948 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.362943888 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.362957954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.363008022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.363014936 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.363085985 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.363250971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.363265038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.363322020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.363328934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.363528013 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.363549948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.363584042 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.363590002 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.363621950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.363631010 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.366744995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.366758108 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.366803885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.366811037 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.366880894 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.367033005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.367044926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.367090940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.367098093 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.367167950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.367327929 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.367340088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.367391109 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.367397070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.367471933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.453062057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.453084946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.453185081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.453201056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.453242064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.453259945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.453294039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.453301907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.453315973 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.453342915 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.453607082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.453619957 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.453779936 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.453785896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.453831911 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.453901052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.453915119 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.453958035 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.453963041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.454139948 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.454164028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.454185009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.454230070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.454236984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.454389095 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.457201958 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.457216024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.457264900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.457271099 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.457348108 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.457596064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.457609892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.457658052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.457663059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.457742929 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.457911015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.457925081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.457976103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.457982063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.458060026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.543724060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.543752909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.543886900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.543911934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.543931961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.543951988 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.543983936 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.543989897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.544008017 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.544033051 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.544198036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.544212103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.544250011 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.544255018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.544266939 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.544296026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.544584990 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.544600010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.544656992 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.544661999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.544828892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.544918060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.544931889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.544986963 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.544991970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.545072079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.547799110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.547818899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.547852993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.547858000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.547883987 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.547903061 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.548141003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.548156023 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.548207045 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.548212051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.548300028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.548392057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.548407078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.548455954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.548460960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.548578024 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.634268999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.634285927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.634452105 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.634466887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.634532928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.634551048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.634591103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.634597063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.634610891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.634639025 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.634879112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.634891987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.634943008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.634947062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.635025978 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.635288000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.635308027 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.635351896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.635358095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.635448933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.635567904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.635581970 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.635634899 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.635639906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.635715961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.638463020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.638477087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.638535976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.638540983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.638614893 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.638760090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.638775110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.638828993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.638834000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.638912916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.639072895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.639086962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.639137030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.639142036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.639317036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.727884054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.727901936 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.727974892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.727998018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.728240013 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.728256941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.728300095 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.728306055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.728315115 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.728343964 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.728542089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.728554964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.728600025 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.728605032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.728615999 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.728641987 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.728907108 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.728920937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.728952885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.728961945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.728976011 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.729001045 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.729168892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.729182005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.729221106 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.729226112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.729252100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.729262114 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.729439974 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.729454994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.729507923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.729511976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.729763031 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.729779005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.729810953 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.729815006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.729831934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.729859114 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.730138063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.730153084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.730195999 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.730200052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.730216980 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.730540037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.818820000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.818837881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.818887949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.818938017 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.818943977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.818958044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.818989038 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.819169998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.819185972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.819232941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.819238901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.819514036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.819531918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.819566965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.819571972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.819588900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.819741011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.819752932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.819777012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.819787979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.819792032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.819799900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.819823027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.820095062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.820110083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.820144892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.820151091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.820173979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.820348024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.820358992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.820401907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.820409060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.820491076 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.820720911 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.820732117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.820780039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.820785046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.820874929 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.909553051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.909569979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.909672022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.909684896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.910002947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.910022020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.910070896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.910077095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.910151958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.910393953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.910409927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.910458088 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.910461903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.910546064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.910562992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.910598993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.910603046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.910625935 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.910645962 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.910799026 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.910816908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.910864115 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.910868883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.910881042 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.910907984 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.911122084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.911135912 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.911180973 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.911185980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.911556959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.911573887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.911607027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.911612034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.911624908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.911653996 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.911756992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.911771059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.911807060 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.911811113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:04.911823034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:04.911849022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.000353098 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.000369072 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.000473976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.000488043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.000715017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.000735998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.000819921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.000824928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.001140118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.001152992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.001221895 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.001229048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.001513958 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.001529932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.001576900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.001579046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.001590014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.001617908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.001652956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.001657963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.001686096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.002043962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.002059937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.002118111 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.002124071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.002207041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.002218962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.002271891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.002276897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.002551079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.002568007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.002600908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.002607107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.002641916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.050676107 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.090590954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.090607882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.090730906 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.090743065 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.090779066 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.090787888 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.090817928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.090833902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.090884924 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.090888977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.090918064 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.090935946 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.091068983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.091084003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.091139078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.091142893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.091409922 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.091428041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.091465950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.091470957 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.091492891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.091515064 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.091816902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.091829062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.091886044 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.091891050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.092087030 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.092103004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.092139959 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.092144966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.092169046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.092190981 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.092483997 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.092497110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.092561007 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.092565060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.092658997 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.092674971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.092714071 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.092719078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.092741966 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.092762947 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.181199074 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.181217909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.181310892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.181318045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.181389093 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.181478977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.181493044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.181541920 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.181548119 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.181698084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.181720972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.181757927 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.181762934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.181771994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.182091951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.182105064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.182163000 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.182169914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.182363033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.182379961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.182383060 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.182389975 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.182410002 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.182441950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.182585001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.182596922 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.182646990 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.182651043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.182667971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.182686090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.182950020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.182965040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.183018923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.183023930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.183254004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.183271885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.183339119 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.183343887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.186569929 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.271716118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.271735907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.271804094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.271822929 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.272003889 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.272023916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.272042036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.272092104 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.272095919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.272258043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.272380114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.272396088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.272428036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.272433043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.272471905 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.272488117 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.272617102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.272631884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.272677898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.272685051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.272766113 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.272958040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.272973061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.273010969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.273015976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.273039103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.273052931 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.273303032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.273319006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.273412943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.273417950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.273464918 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.273761034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.273775101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.273824930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.273829937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.273909092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.273930073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.273963928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.273968935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.273988008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.274005890 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.364147902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.364166021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.364248991 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.364257097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.364293098 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.364312887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.365031004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.365046024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.365107059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.365113020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.365148067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.365402937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.365420103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.365473032 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.365478039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.365520954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.365798950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.365813017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.365870953 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.365875006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.365914106 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.366405964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.366420984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.366472006 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.366477013 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.366513014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.366637945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.366655111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.366703033 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.366708994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.366744041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.366853952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.366911888 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.367422104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.367484093 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.367552042 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.367568016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.367614985 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.367621899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.367660046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.453170061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.453201056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.453377962 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.453401089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.453416109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.453437090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.453466892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.453475952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.453506947 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.453532934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.453762054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.453780890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.453834057 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.453840017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.453882933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.454092979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.454108953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.454171896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.454178095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.454219103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.454513073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.454533100 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.454581976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.454586983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.454632998 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.454768896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.454787016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.454864025 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.454869032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.454915047 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.455049992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.455077887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.455120087 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.455127001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.455185890 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.455332994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.455348969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.455405951 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.455413103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.455463886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.543891907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.543915987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.544030905 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.544043064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.544106960 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.544173956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.544192076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.544240952 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.544250011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.544292927 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.544400930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.544419050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.544457912 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.544466019 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.544490099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.544503927 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.544783115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.544799089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.544861078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.544867992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.544918060 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.545192957 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.545208931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.545265913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.545272112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.545311928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.545452118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.545468092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.545509100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.545516014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.545552969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.545728922 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.545749903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.545783043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.545789003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.545810938 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.545823097 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.546066999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.546087027 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.546128988 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.546135902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.546174049 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.636110067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.636199951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.636303902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.636312008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.636367083 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.636403084 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.636441946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.636459112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.636516094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.636523008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.636563063 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.636985064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.637005091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.637056112 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.637063026 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.637103081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.637407064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.637423038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.637475014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.637481928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.637521029 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.637784004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.637799978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.637876034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.637881994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.637926102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.638272047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.638300896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.638334036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.638339996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.638365030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.638384104 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.638685942 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.638761997 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.638783932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.638819933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.638825893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.638850927 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.638865948 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.638986111 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.639092922 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.639110088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.639159918 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.639166117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.639195919 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.639204025 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.726979017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.727010965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.727097034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.727106094 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.727145910 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.727343082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.727361917 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.727407932 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.727417946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.727458954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.727545977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.727577925 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.727581024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.727596045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.727642059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.727642059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.727665901 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.729073048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.729088068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.729137897 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.729146004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.729190111 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.732074976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.732090950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.732147932 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.732155085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.732211113 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.732362032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.732377052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.732438087 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.732444048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.732476950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.732491970 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.732498884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.732508898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.732521057 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.732558012 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.732588053 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.732604027 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.732733965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.732742071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.732799053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.818222046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.818242073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.818367004 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.818375111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.818453074 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.818713903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.818731070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.818783045 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.818789959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.818825960 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.819056988 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.819076061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.819134951 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.819143057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.819171906 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.819719076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.819737911 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.819793940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.819801092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.819835901 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.820059061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.820080996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.820137024 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.820143938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.820180893 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.820570946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.820590019 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.820631981 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.820638895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.820661068 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.820703983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.820950985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.820964098 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.821014881 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.821022034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.821067095 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.821415901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.821433067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.821512938 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.821518898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.821552992 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.907385111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.907407999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.907486916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.907511950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.907552958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.907557011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.907568932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.907588959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.907608032 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.907614946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.907643080 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.907654047 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.907919884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.907937050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.907979012 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.907987118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.908011913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.908030033 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.908269882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.908286095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.908333063 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.908340931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.908377886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.908735991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.908751965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.908801079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.908807993 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.908818960 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.908842087 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.908958912 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.908987045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.909028053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.909034014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.909051895 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.909074068 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.909156084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.909173012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.909229040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.909235001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.909272909 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.909523964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.909540892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.909579039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.909584999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.909614086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.909636021 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.998078108 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.998099089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.998199940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.998205900 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.998266935 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.999825954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.999844074 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.999903917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:05.999911070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:05.999957085 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.000139952 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.000155926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.000216007 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.000222921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.000262022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.000904083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.000932932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.000982046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.000988960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.001024008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.001252890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.001270056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.001327038 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.001332998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.001370907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.002152920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.002168894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.002223969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.002229929 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.002269030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.002814054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.002831936 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.002882004 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.002887011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.002924919 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.003051996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.003078938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.003108025 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.003114939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.003139973 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.003154039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.088839054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.088857889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.088927984 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.088937998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.088989019 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.090342045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.090358019 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.090418100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.090425014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.090466022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.091007948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.091034889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.091065884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.091072083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.091098070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.091118097 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.091576099 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.091594934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.091634989 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.091641903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.091665030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.091684103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.091883898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.091914892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.091953993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.091959953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.091988087 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.092005014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.092681885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.092695951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.092755079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.092760086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.092799902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.093247890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.093264103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.093317986 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.093323946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.093362093 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.093662024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.093682051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.093738079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.093744040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.093784094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.179439068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.179457903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.179544926 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.179563046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.179605961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.180885077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.180900097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.180960894 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.180969000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.181015968 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.181389093 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.181420088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.181452036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.181458950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.181499958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.181524038 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.182303905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.182323933 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.182372093 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.182379007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.182406902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.182425976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.182482004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.182499886 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.182544947 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.182549953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.182573080 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.182590961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.183281898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.183298111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.183351040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.183357954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.183382988 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.183401108 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.183981895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.183996916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.184051037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.184058905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.184098005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.184247971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.184266090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.184309006 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.184314966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.184340000 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.184349060 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.270410061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.270428896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.270490885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.270502090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.270544052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.271907091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.271920919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.271975994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.271989107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.272028923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.272661924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.272676945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.272726059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.272737980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.272758961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.272789001 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.273627996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.273642063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.273686886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.273695946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.273709059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.273737907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.273946047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.273962975 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.274010897 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.274019957 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.274084091 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.275034904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.275053024 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.275122881 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.275130033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.275170088 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.275693893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.275710106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.275757074 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.275763035 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.275788069 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.275806904 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.276091099 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.276106119 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.276148081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.276154995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.276182890 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.276210070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.360970974 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.360991955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.361079931 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.361088991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.361143112 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.362449884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.362467051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.362514019 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.362521887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.362545013 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.362551928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.363185883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.363207102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.363254070 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.363260984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.363301992 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.364114046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.364147902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.364178896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.364183903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.364207983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.364221096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.364231110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.364247084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.364291906 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.364299059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.364337921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.364729881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.364748955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.364799976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.364806890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.364847898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.366817951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.366842985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.366874933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.366880894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.366906881 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.366925001 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.367150068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.367165089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.367218971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.367225885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.367258072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.451498032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.451519012 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.451587915 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.451596022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.451623917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.451642990 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.452670097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.452686071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.452743053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.452749968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.452794075 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.453150988 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.453166008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.453201056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.453207016 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.453233957 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.453248978 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.453931093 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.453947067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.453995943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.454000950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.454022884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.454041004 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.454274893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.454291105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.454344988 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.454350948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.454387903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.455306053 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.455329895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.455362082 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.455368996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.455393076 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.455408096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.455966949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.455985069 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.456037045 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.456043005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.456072092 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.456084967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.456209898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.456226110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.456270933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.456278086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.456306934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.456315041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.542021036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.542049885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.542232037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.542241096 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.542288065 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.543306112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.543328047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.543379068 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.543385983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.543452978 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.543613911 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.543652058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.543675900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.543684006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.543697119 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.543716908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.544605017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.544631004 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.544668913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.544675112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.544699907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.544718981 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.544922113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.544949055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.544980049 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.544986963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.545010090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.545034885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.545942068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.545998096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.546005011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.546032906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.546046972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.546056986 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.546468973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.546525955 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.546528101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.546569109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.546574116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.546605110 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.546835899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.546885967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.546890020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.546911001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.546935081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.546947002 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.632776976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.632805109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.632878065 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.632885933 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.632927895 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.633850098 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.633869886 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.633899927 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.633908987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.633935928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.633955002 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.634236097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.634253025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.634290934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.634299040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.634325981 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.634332895 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.635060072 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.635077000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.635116100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.635123968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.635162115 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.635354996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.635371923 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.635418892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.635426044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.635463953 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.636408091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.636421919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.636475086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.636480093 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.636507034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.636526108 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.636972904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.636989117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.637025118 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.637029886 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.637053013 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.637069941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.637320995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.637343884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.637375116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.637382030 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.637403965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.638331890 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.730052948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.730077028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.730192900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.730201006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.730262995 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.730386972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.730405092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.730452061 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.730458021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.730496883 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.730667114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.730683088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.730741024 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.730747938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.730787992 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.730984926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.731004953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.731043100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.731050968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.731076956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.731096029 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.731343985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.731360912 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.731420040 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.731426001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.731471062 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.731487036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.731518030 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.731548071 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.731554031 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.731581926 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.731591940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.732000113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.732017994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.732070923 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.732076883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.732110023 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.732124090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.732141972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.732187033 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.732194901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.732230902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.820775032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.820795059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.820854902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.820869923 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.820899010 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.820907116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.821088076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.821105003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.821156025 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.821161985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.821201086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.821403980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.821418047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.821460962 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.821466923 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.821504116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.821674109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.821703911 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.821755886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.821762085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.821805000 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.821911097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.821926117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.821969986 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.821976900 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.822020054 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.822246075 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.822261095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.822312117 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.822319031 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.822355986 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.822669983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.822689056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.822721958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.822727919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.822753906 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.822768927 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.822807074 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.822824001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.822854996 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.822860956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.822889090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.822896957 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.911442041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.911464930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.911549091 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.911559105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.911598921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.911731005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.911748886 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.911789894 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.911798000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.911815882 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.911832094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.912050962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.912066936 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.912120104 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.912127018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.912166119 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.912336111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.912363052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.912390947 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.912396908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.912421942 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.912441015 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.912827015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.912846088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.912893057 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.912902117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.912940979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.912992954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.913021088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.913047075 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.913053036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.913074970 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.913095951 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.913317919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.913335085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.913384914 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.913391113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.913433075 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.913609028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.913625002 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.913676977 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:06.913685083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:06.913727045 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.002113104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.002130032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.002222061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.002233028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.002238989 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.002258062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.002271891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.002310991 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.002315044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.002355099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.002608061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.002624989 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.002665043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.002670050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.002696037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.002717018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.002850056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.002877951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.002902031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.002907991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.002934933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.002954006 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.003174067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.003190994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.003247023 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.003253937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.003303051 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.003555059 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.003578901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.003613949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.003618956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.003643036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.003660917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.003870964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.003911972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.003933907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.003937960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.003969908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.003988981 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.025882959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.025902033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.025938034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.025943995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.025965929 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.025980949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.092642069 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.092664003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.092705965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.092713118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.092735052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.092751026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.092983961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.092999935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.093044043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.093051910 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.093091965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.093354940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.093372107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.093406916 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.093414068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.093435049 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.093453884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.093651056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.093677998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.093704939 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.093712091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.093734980 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.093750000 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.093990088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.094011068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.094043970 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.094049931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.094074011 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.094093084 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.094304085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.094321966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.094358921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.094364882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.094402075 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.094716072 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.094731092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.094772100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.094779015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.094813108 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.116465092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.116485119 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.116533995 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.116539955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.116578102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.183188915 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.183209896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.183298111 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.183306932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.183352947 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.183584929 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.183602095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.183646917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.183653116 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.183690071 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.183924913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.183940887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.183989048 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.183995008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.184032917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.184211969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.184228897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.184274912 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.184282064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.184318066 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.184536934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.184561968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.184595108 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.184604883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.184623003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.184640884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.184740067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.184756041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.184787989 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.184793949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.184815884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.184834957 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.185157061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.185175896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.185214043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.185225010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.185261011 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.207186937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.207206964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.207257032 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.207264900 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.207279921 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.207304955 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.276472092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.276498079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.276634932 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.276643991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.276688099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.276823044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.276844025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.276901007 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.276909113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.276947975 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.277159929 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.277179003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.277235031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.277245045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.277283907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.277515888 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.277533054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.277587891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.277594090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.277636051 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.277755976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.277770996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.277817965 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.277823925 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.277848005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.277864933 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.278053045 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.278079033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.278122902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.278130054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.278151035 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.278168917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.278538942 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.278554916 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.278604031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.278609037 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.278650999 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.297909021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.297925949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.298001051 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.298011065 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.298053026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.367263079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.367280960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.367342949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.367371082 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.367381096 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.367394924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.367419958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.367454052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.367702007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.367719889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.367753983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.367762089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.367785931 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.368223906 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.368249893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.368307114 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.368320942 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.368482113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.368498087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.368527889 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.368535042 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.368566036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.368751049 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.368769884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.368803978 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.368810892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.368833065 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.368979931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.368997097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.369034052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.369041920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.369069099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.388612032 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.388675928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.388681889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.388698101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.388751984 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.388757944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.441313982 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.457631111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.457653046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.457710028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.457716942 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.457752943 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.458013058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.458033085 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.458084106 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.458090067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.458127022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.458283901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.458302021 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.458350897 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.458357096 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.458396912 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.458734035 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.458750963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.458801031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.458806992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.458844900 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.458911896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.458933115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.458962917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.458969116 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.458996058 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.459008932 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.459279060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.459294081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.459337950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.459345102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.459382057 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.459633112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.459650040 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.459696054 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.459707022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.459744930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.479084969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.479104996 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.479211092 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.479218960 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.479258060 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.548232079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.548254967 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.548391104 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.548398972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.548439980 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.548593998 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.548612118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.548671007 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.548676968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.548717022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.548821926 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.548858881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.548891068 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.548901081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.548917055 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.548938036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.549226999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.549245119 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.549294949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.549300909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.549335003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.549491882 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.549511909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.549552917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.549560070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.549587011 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.549597979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.549823046 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.549839973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.549891949 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.549899101 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.549932957 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.550265074 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.550282001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.550328016 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.550334930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.550373077 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.569746017 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.569770098 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.569844007 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.569850922 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.569892883 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.639036894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.639058113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.639098883 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.639106035 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.639125109 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.639132977 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.639209986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.639224052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.639264107 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.639270067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.639302969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.639487028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.639503002 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.639530897 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.639564991 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.639569044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.639610052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.639883041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.639916897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.639934063 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.639940023 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.639955044 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.639976025 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.640129089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.640145063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.640172958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.640177965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.640196085 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.640208006 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.640640020 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.640655041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.640691042 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.640696049 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.640713930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.640727997 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.640738964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.640754938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.640799999 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.640806913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.640820980 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.640840054 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.660317898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.660339117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.660394907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.660402060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.660422087 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.660440922 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.729566097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.729599953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.729686022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.729697943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.729751110 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.729871035 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.729897976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.729947090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.729953051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.729995966 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.730204105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.730220079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.730276108 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.730283022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.730320930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.730602980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.730619907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.730675936 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.730683088 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.730720043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.730859995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.730875969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.730923891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.730931044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.730963945 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.731230974 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.731247902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.731303930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.731311083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.731359959 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.731530905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.731545925 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.731599092 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.731606007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.731643915 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.750878096 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.750901937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.750962019 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.750967979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.751008034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.820293903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.820313931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.820384979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.820391893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.820426941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.820633888 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.820648909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.820703030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.820709944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.820748091 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.820935965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.820955992 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.820987940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.820995092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.821019888 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.821034908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.821335077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.821350098 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.821402073 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.821408033 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.821444988 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.821626902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.821641922 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.821690083 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.821696997 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.821734905 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.821907043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.821918964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.821970940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.821978092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.822016001 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.822252989 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.822266102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.822312117 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.822319031 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.822360039 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.841590881 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.841607094 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.841660976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.841666937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.841703892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.911029100 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.911060095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.911108971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.911117077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.911143064 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.911154985 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.911541939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.911559105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.911612988 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.911618948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.911631107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.911650896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.911655903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.911664009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.911691904 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.911716938 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.912009001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.912022114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.912081003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.912087917 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.912127972 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.912247896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.912264109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.912312984 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.912322044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.912362099 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.912640095 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.912678003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.912704945 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.912712097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.912722111 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.912746906 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.913023949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.913038969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.913086891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.913096905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.913136005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.932167053 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.932184935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.932250977 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:07.932262897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:07.932303905 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.001616001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.001633883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.001719952 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.001734972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.001779079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.001909018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.001924038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.001976013 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.001982927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.002017975 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.002240896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.002254009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.002310991 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.002317905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.002356052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.002540112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.002557993 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.002599001 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.002605915 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.002643108 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.002949953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.002965927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.003014088 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.003021002 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.003058910 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.003341913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.003356934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.003401041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.003411055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.003421068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.003439903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.003453016 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.003459930 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.003470898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.003498077 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.003514051 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.022839069 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.022861958 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.022932053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.022944927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.022985935 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.092334986 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.092386007 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.092431068 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.092437983 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.092464924 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.092487097 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.093393087 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.093410015 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.093465090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.093471050 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.093514919 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.093777895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.093795061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.093839884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.093846083 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.093885899 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.094055891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.094074965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.094122887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.094130039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.094167948 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.094391108 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.094409943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.094465017 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.094470978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.094510078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.095165014 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.095206976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.095227003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.095232964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.095257998 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.095279932 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.095293999 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.095324039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.095349073 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.095355034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.095377922 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.095388889 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.113497019 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.113513947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.113712072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.113718987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.113763094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.183413029 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.183432102 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.183514118 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.183522940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.183533907 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.183563948 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.184170961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.184187889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.184236050 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.184242010 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.184274912 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.184555054 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.184575081 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.184617043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.184623003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.184634924 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.184657097 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.184978962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.184993029 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.185045004 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.185050964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.185086966 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.185307026 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.185324907 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.185364008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.185369968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.185394049 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.185401917 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.185623884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.185638905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.185745955 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.185750961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.185800076 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.186024904 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.186047077 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.186172009 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.186180115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.186230898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.204127073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.204144001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.204212904 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.204220057 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.204269886 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.274050951 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.274070978 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.274131060 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.274137974 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.274175882 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.274693966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.274712086 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.274766922 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.274774075 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.274810076 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.275135994 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.275155067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.275193930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.275199890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.275234938 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.275343895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.275361061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.275403976 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.275410891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.275450945 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.275728941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.275747061 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.275779963 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.275787115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.275799990 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.275825024 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.276070118 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.276091099 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.276138067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.276145935 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.276154041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.276200056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.276324034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.276336908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.276391029 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.276396990 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.276429892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.276429892 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.294734955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.294749022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.294801950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.294807911 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.294842958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.364725113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.364748955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.364856005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.364883900 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.364932060 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.365271091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.365284920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.365331888 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.365339041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.365377903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.365583897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.365598917 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.365647078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.365653038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.365689993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.365993023 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.366005898 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.366046906 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.366053104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.366089106 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.366189957 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.366204977 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.366239071 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.366244078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.366270065 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.366276026 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.366647005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.366669893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.366728067 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.366734028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.366801023 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.366926908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.366940975 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.366978884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.366983891 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.367006063 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.367017031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.385401964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.385416985 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.385504961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.385515928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.385564089 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.455298901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.455324888 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.455374956 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.455389023 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.455404043 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.455430031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.455889940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.455913067 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.455972910 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.455979109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.455991030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.456022978 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.456245899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.456259966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.456305027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.456310987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.456336975 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.456346989 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.456479073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.456494093 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.456547022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.456554890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.456590891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.456825018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.456841946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.456909895 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.456917048 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.456952095 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.457142115 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.457155943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.457211971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.457218885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.457254887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.458861113 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.458874941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.458928108 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.458935976 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.458967924 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.476121902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.476151943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.476224899 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.476231098 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.476283073 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.545876980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.545900106 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.546003103 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.546010971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.546047926 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.546358109 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.546376944 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.546431065 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.546437025 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.546468019 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.546478033 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.546722889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.546741009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.546793938 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.546801090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.546842098 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.547082901 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.547101974 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.547152996 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.547159910 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.547198057 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.547377110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.547398090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.547442913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.547449112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.547472954 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.547481060 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.547607899 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.547625065 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.547667027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.547673941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.547698021 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.547717094 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.549452066 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.549473047 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.549530983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.549536943 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.549576044 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.566732883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.566754103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.566800117 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.566806078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.566823959 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.566836119 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.636418104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.636437893 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.636503935 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.636512995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.636554003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.636989117 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.637006044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.637058020 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.637063980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.637104034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.637317896 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.637343884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.637373924 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.637379885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.637394905 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.637409925 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.637823105 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.637841940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.637887001 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.637892962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.637928963 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.638000011 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.638041973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.638052940 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.638057947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.638086081 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.638103008 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.638278961 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.638305902 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.638333082 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.638339043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.638358116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.638371944 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.640176058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.640191078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.640240908 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.640248060 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.640288115 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.657314062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.657335043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.657417059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.657423973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.657463074 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.727564096 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.727590084 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.727633953 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.727639914 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.727665901 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.727684021 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.727955103 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.727969885 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.728008986 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.728014946 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.728040934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.728055000 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.728122950 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.728136063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.728184938 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.728189945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.728229046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.728471041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.728494883 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.728529930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.728534937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.728544950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.728575945 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.728756905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.728774071 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.728801966 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.728806973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.728832960 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.728848934 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.729089022 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.729105949 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.729140997 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.729146957 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.729156971 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.729182959 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.730732918 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.730751038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.730777979 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.730783939 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.730804920 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.730812073 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.747965097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.747983932 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.748044014 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.748050928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.748080969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.748095036 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.818259954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.818279982 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.818367958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.818376064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.818407059 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.818581104 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.818597078 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.818639994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.818645954 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.818677902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.818902969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.818921089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.818965912 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.818973064 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.819011927 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.819283009 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.819302082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.819341898 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.819349051 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.819365978 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.819375992 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.819639921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.819659948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.819694996 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.819700003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.819725037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.819729090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.819730997 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.819741964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.819761038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.819772005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.819798946 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.819803953 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.819842100 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.821178913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.821194887 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.821240902 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.821249008 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.821285009 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.838783979 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.838849068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.838861942 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.838867903 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.838888884 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.838911057 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.908932924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.908950090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.909017086 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.909024000 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.909063101 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.909351110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.909389019 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.909457922 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.909465075 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.909503937 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.909534931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.909558058 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.909600973 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.909606934 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.909615993 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.909646034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.910213947 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.910243034 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.910275936 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.910281897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.910306931 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.910316944 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.910443068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.910469055 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.910502911 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.910511971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.910523891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.910542011 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.910547018 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.910566092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.910589933 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.910602093 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.910644054 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.910648108 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.910692930 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.911787987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.911809921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.911849022 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.911855936 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.911870003 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.914791107 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.929244995 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.929264069 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.929419994 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.929426908 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.929471016 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.999602079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.999622107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.999775887 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.999783039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.999820948 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.999911070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.999926090 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:08.999974012 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:08.999980927 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.000016928 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.000231981 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.000252962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.000281096 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.000287056 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.000312090 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.000319958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.000487089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.000499964 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.000535011 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.000540972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.000555992 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.000576973 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.000792980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.000808001 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.000854969 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.000868082 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.000905037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.001112938 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.001132965 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.001163006 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.001169920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.001193047 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.001200914 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.002445936 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.002461910 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.002496958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.002504110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.002526999 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.002551079 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.019747972 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.019771099 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.019810915 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.019818068 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.019962072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.019962072 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.090281963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.090313911 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.090399981 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.090406895 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.090431929 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.090456009 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.090552092 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.090574980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.090621948 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.090627909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.090666056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.090820074 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.090835094 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.090886116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.090892076 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.090928078 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.091164112 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.091177940 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.091227055 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.091233969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.091272116 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.091690063 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.091711044 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.091762066 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.091768980 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.091809034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.091856956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.091872931 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.091919899 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.091927052 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.091963053 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.092885971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.092900038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.092952967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.092961073 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.092995882 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.110771894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.110800028 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.110857010 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.110863924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.111023903 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.181607962 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.181628942 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.181699038 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.181706905 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.181718111 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.181735039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.181745052 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.181751013 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.181783915 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.181813002 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.182265043 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.182281971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.182337046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.182343006 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.182379961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.182420969 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.182435036 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.182483912 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.182490110 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.182511091 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.182523012 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.182528973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.182540894 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.182557106 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.182583094 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.182590961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.182598114 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.182621956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.182630062 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.182646990 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.182650089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.182682037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.182693005 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.183563948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.183578968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.183624983 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.183633089 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.183670044 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.201170921 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.201185942 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.201241016 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.201248884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.201390028 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.271579981 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.271603107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.271775961 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.271785975 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.271826982 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.272214890 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.272228956 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.272281885 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.272289038 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.272330046 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.272623062 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.272635937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.272686958 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.272692919 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.272732019 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.272883892 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.272897959 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.272948027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.272954941 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.272991896 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.273257971 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.273273945 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.273324966 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.273329973 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.273365974 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.273550987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.273569107 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.273611069 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.273618937 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.273655891 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.274168968 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.274199963 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.274234056 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.274250984 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.274264097 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.274276018 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.291594982 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.291610003 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.291666031 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.291671991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.291719913 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.362446070 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.362466097 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.362524986 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.362531900 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.362555027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.362561941 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.362720013 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.362734079 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.362776041 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.362783909 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.362821102 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.363040924 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.363054991 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.363101959 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.363107920 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.363171101 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.363365889 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.363379955 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.363435030 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.363440990 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.363452911 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.363472939 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.363818884 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.363838911 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.363867998 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.363873005 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.363894939 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.363903999 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.364089966 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.364109039 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.364135027 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.364140987 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.364165068 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.364171982 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.364728928 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.364743948 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.364805937 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.364811897 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.364845037 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.364893913 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.364938974 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.364948034 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.364953041 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.364990950 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.364996910 CET	443	49768	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.365036011 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.365494967 CET	49768	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.559457064 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.559500933 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:09.559573889 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.560043097 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:09.560056925 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.111749887 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.113428116 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.113460064 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.216036081 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.216098070 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.216140032 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.216172934 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.216212034 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.216223001 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.216331959 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.216341972 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.216398001 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.216408014 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.216490984 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.216547966 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.216553926 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.217242002 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.217279911 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.217287064 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.217293024 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.217329025 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.220788956 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.269558907 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.302702904 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.302778006 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.302813053 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.302968979 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.302977085 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.303031921 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.303211927 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.303291082 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.303335905 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.303340912 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.303345919 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.303389072 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.303790092 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.303858042 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.303900003 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.303904057 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.303966045 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.303999901 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.304004908 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.304778099 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.304819107 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.304821968 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.304866076 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.304903984 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.304903984 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.304913044 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.304950953 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.304955959 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.305682898 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.305723906 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.305725098 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.305731058 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.305769920 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.305783987 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.347632885 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.347639084 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.389543056 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.389591932 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.389700890 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.389740944 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.389760971 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.389760971 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.389775991 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.389843941 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.389956951 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.389964104 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.390003920 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.390044928 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.390049934 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.390105963 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.390111923 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.390129089 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.390132904 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.390162945 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.390188932 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.390779018 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.390825987 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.390830994 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.390836000 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.390866041 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.390883923 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.390933990 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.390980959 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.391946077 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.391993046 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.391995907 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.392000914 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.392036915 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.392043114 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.392086029 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.392752886 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.392795086 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.392800093 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.392803907 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.392837048 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.392940044 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.392990112 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.393685102 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.393738031 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.476110935 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.476191044 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.476257086 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.476303101 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.476392984 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.476447105 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.476654053 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.476701021 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.476717949 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.476723909 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.476759911 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.476769924 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.476818085 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.477179050 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.477230072 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.477380991 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.477425098 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.477457047 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.477500916 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.477624893 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.477663994 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.477672100 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.477675915 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.477718115 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.477730036 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.478281021 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.478344917 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.478349924 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.478353977 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.478388071 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.478436947 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.478482962 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.478502035 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.478538990 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.478552103 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.478554964 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.478578091 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.479127884 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.479171038 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.479180098 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.479185104 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.479212046 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.479275942 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.479326010 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.479330063 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.479366064 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.479398012 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.479440928 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.479460001 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.479501009 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.480112076 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.480161905 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.480214119 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.480262995 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.480330944 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.480380058 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.480382919 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.480391979 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.480422020 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.481012106 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.481076956 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.562958002 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.562982082 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.563035011 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.563044071 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.563064098 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.563467979 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.563482046 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.563518047 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.563523054 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.563548088 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.564040899 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.564055920 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.564094067 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.564100027 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.564116955 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.564225912 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.564238071 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.564271927 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.564275026 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.564287901 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.568121910 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.568144083 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.568171978 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.568176985 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.568192959 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.568744898 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.568757057 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.568795919 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.568802118 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.569152117 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.569165945 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.569204092 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.569207907 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.569231033 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.607471943 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.607491016 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.607758999 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.607778072 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.653085947 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.653115034 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.653157949 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.653167963 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.653219938 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.653352976 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.653378010 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.653399944 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.653405905 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.653410912 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.653425932 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.653448105 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.653615952 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.653629065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.653686047 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.653691053 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.654114962 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.654135942 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.654162884 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.654171944 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.654179096 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.654182911 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.654189110 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.654221058 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.654227972 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.654251099 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.654687881 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.654710054 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.654755116 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.654758930 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.654783010 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.654831886 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.654858112 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.654875994 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.654880047 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.654905081 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.694367886 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.694401026 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.694462061 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.694468975 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.694663048 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.736793995 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.736810923 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.736968040 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.736974001 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.737137079 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.737162113 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.737168074 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.737184048 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.737185955 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.737196922 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.737212896 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.737237930 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.737520933 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.737545967 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.737576008 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.737581015 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.737602949 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.737757921 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.737780094 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.737807989 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.737812042 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.737837076 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.738102913 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.738115072 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.738188028 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.738193989 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.738447905 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.738464117 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.738502979 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.738507032 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.738527060 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.738729000 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.738743067 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.738778114 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.738782883 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.738795996 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.781095028 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.781126022 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.781172037 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.781193972 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.781208992 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.823939085 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.823956966 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.824023008 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.824039936 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.824058056 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.824342966 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.824363947 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.824395895 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.824404001 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.824409008 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.824425936 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.824445009 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.824809074 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.824824095 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.824876070 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.824879885 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.825078011 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.825094938 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.825146914 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.825153112 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.825450897 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.825463057 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.825505972 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.825515985 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.825526953 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.825784922 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.825803041 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.825838089 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.825840950 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.825860977 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.826153994 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.826172113 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.826210022 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.826216936 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.826235056 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.867873907 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.867892027 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.867990971 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.868014097 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.910079956 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.910665035 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.910671949 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.910706997 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.910727978 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.910818100 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.910825968 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.910855055 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.910875082 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.911000967 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.911020994 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.911062002 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.911067009 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.911099911 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.911118031 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.911252022 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.911295891 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.911317110 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.911329985 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.911350012 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.911364079 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.911626101 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.911639929 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.911705017 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.911710978 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.911741972 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.911741972 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.911890984 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.911906958 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.911963940 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.911969900 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.911995888 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.912007093 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.912267923 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.912285089 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.912332058 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.912337065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.912375927 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.912421942 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.912534952 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.912550926 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.912602901 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.912609100 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.912626982 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.912647009 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.954900026 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.954912901 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.955125093 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.955132961 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.955184937 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.997997999 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.998022079 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.998311996 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.998321056 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.998380899 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.999639988 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.999660015 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.999717951 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.999722004 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.999746084 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.999758959 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.999763012 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.999778986 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.999809980 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.999849081 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.999852896 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.999859095 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.999882936 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.999910116 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.999933004 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:10.999950886 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:10.999980927 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.000004053 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.000016928 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.000066042 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.000070095 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.000109911 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.000147104 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.000168085 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.000195026 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.000199080 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.000225067 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.000238895 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.000349045 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.000364065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.000395060 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.000400066 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.000426054 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.000447035 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.050128937 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.050143957 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.050216913 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.050228119 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.050282955 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.084263086 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.084278107 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.084350109 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.084357023 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.084371090 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.084395885 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.084644079 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.084657907 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.084702015 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.084706068 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.084743023 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.084849119 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.084886074 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.084894896 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.084897995 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.084906101 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.084959030 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.085201025 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.085213900 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.085264921 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.085268974 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.085302114 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.085489988 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.085529089 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.085531950 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.085541964 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.085577965 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.085808992 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.085823059 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.085922956 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.085932016 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.085969925 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.086244106 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.086267948 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.086297989 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.086301088 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.086330891 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.086353064 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.137020111 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.137042999 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.137181044 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.137201071 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.137263060 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.170975924 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.170991898 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.171072960 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.171081066 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.171128035 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.171356916 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.171372890 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.171427011 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.171433926 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.171477079 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.171634912 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.171650887 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.171705961 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.171710968 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.171762943 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.171992064 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.172005892 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.172059059 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.172065020 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.172113895 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.172292948 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.172307014 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.172365904 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.172370911 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.172409058 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.172683001 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.172700882 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.172734976 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.172739029 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.172766924 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.172780991 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.172939062 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.172950983 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.173006058 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.173016071 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.173053980 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.223887920 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.223905087 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.223963022 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.223973989 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.224031925 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.258177996 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.258218050 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.258285046 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.258290052 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.258403063 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.258598089 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.258616924 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.258699894 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.258703947 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.258790970 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.258955002 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.258985996 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.259012938 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.259016037 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.259035110 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.259051085 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.259802103 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.259830952 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.259860039 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.259862900 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.259886026 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.259907007 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.260159969 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.260194063 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.260221958 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.260226965 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.260247946 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.260262012 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.260350943 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.260366917 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.260401011 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.260405064 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.260430098 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.260430098 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.260451078 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.260461092 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.260472059 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.260477066 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.260516882 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.310688972 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.310723066 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.310869932 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.310869932 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.310880899 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.310924053 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.344511032 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.344527006 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.344688892 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.344695091 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.344738960 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.344784975 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.344801903 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.344860077 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.344866991 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.344902039 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.345115900 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.345130920 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.345181942 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.345186949 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.345225096 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.345565081 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.345580101 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.345633030 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.345638037 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.345673084 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.346005917 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.346020937 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.346074104 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.346080065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.346111059 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.346290112 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.346304893 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.346350908 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.346354961 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.346390963 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.346692085 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.346707106 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.346757889 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.346762896 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.346798897 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.397399902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.397416115 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.397653103 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.397665977 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.397725105 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.444489002 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.444505930 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.444612980 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.444621086 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.444762945 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.444948912 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.444967985 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.445014000 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.445018053 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.445035934 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.445056915 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.445064068 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.445075035 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.445081949 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.445108891 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.445132017 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.445764065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.445776939 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.445838928 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.445844889 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.445864916 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.445888996 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.446216106 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.446229935 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.446297884 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.446302891 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.446340084 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.451030970 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.451045036 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.451122999 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.451124907 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.451132059 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.451153994 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.451175928 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.451180935 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.451201916 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.451224089 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.484271049 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.484287977 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.484354019 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.484369040 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.484394073 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.484436989 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.517873049 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.517889977 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.517983913 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.517991066 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.518052101 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.518246889 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.518265009 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.518316031 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.518321037 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.518347025 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.518366098 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.518565893 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.518579960 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.518649101 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.518654108 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.518692970 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.518981934 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.518997908 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.519057035 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.519059896 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.519098997 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.519459009 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.519474030 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.519530058 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.519535065 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.519571066 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.519644022 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.519658089 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.519711018 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.519716024 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.519754887 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.520169020 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.520184040 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.520241976 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.520245075 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.520281076 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.571002960 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.571033955 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.571099043 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.571124077 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.571135998 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.571161032 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.604649067 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.604662895 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.604712963 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.604720116 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.604861975 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.605007887 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.605026007 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.605051041 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.605055094 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.605079889 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.605087996 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.605353117 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.605370045 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.605405092 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.605408907 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.605434895 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.605453014 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.605863094 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.605876923 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.605936050 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.605940104 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.605974913 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.606103897 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.606117964 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.606158972 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.606162071 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.606197119 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.606442928 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.606458902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.606501102 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.606506109 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.606534958 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.606542110 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.607007980 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.607018948 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.607213974 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.607219934 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.607250929 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.657835007 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.657857895 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.657902956 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.657922029 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.657934904 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.657960892 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.691611052 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.691625118 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.691694975 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.691713095 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.691751003 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.691976070 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.691989899 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.692033052 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.692037106 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.692065954 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.692080021 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.692246914 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.692264080 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.692303896 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.692307949 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.692333937 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.692352057 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.692656994 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.692671061 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.692720890 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.692725897 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.692759991 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.692979097 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.693003893 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.693028927 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.693032026 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.693058968 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.693080902 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.693408012 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.693428993 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.693463087 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.693466902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.693491936 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.693511009 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.693747997 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.693761110 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.693805933 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.693809032 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.693834066 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.693846941 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.744574070 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.744590998 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.744666100 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.744676113 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.744714022 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.778311968 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.778333902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.778402090 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.778407097 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.778433084 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.778450966 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.778739929 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.778753042 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.778903961 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.778909922 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.778953075 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.779023886 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.779038906 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.779077053 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.779083014 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.779097080 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.779115915 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.779323101 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.779337883 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.779375076 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.779377937 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.779402018 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.779411077 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.779654980 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.779668093 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.779716015 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.779721022 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.779756069 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.779968977 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.779983044 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.780020952 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.780025959 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.780045033 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.780061007 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.780468941 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.780487061 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.780535936 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.780540943 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.780576944 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.831459999 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.831476927 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.831671953 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.831685066 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.831731081 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.865334988 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.865350008 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.865416050 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.865422010 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.865461111 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.865664005 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.865685940 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.865722895 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.865727901 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.865757942 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.865777016 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.865904093 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.865931988 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.865958929 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.865962029 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.865991116 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.866010904 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.866326094 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.866353035 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.866386890 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.866391897 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.866417885 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.866436958 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.866626978 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.866641998 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.866697073 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.866702080 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.866741896 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.867892981 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.867913008 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.867938995 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.867944002 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.867973089 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.867985010 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.868289948 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.868326902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.868351936 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.868355036 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.868382931 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.868397951 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.918292999 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.918308973 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.918364048 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.918375969 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.918412924 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.951945066 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.951962948 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.951999903 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.952006102 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.952022076 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.952042103 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.952398062 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.952411890 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.952464104 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.952469110 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.952500105 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.952574968 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.952588081 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.952620983 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.952625990 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.952650070 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.952661991 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.952908993 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.952922106 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.952960968 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.952964067 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.952987909 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.953005075 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.953233004 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.953246117 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.953289986 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.953299046 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.953327894 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.954713106 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.954725981 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.954772949 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.954777956 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.954811096 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.955096960 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.955111027 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.955147982 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.955152988 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:11.955168962 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:11.955187082 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.004928112 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.004945040 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.005112886 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.005120039 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.005173922 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.038769007 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.038786888 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.038889885 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.038903952 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.038947105 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.039067984 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.039083004 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.039355040 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.039360046 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.039376974 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.039401054 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.039402008 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.039411068 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.039439917 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.039474010 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.039676905 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.039690018 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.039733887 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.039737940 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.039768934 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.039794922 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.039982080 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.039998055 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.040055037 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.040060043 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.040096045 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.041477919 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.041501045 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.041533947 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.041538000 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.041564941 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.041582108 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.041814089 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.041829109 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.041877985 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.041882992 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.041918993 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.091799021 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.091821909 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.091876984 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.091886997 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.091933966 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.091953993 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.125472069 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.125485897 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.125576019 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.125583887 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.125622988 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.125823975 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.125838995 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.125874043 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.125879049 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.125909090 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.125927925 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.126005888 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.126056910 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.126061916 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.126406908 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.126430988 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.126461029 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.126466036 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.126492977 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.126596928 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.126609087 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.126641035 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.126645088 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.126669884 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.127959013 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.127971888 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.128022909 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.128026962 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.128350019 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.128362894 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.128397942 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.128403902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.128415108 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.128628016 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.128639936 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.128679037 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.128684044 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.128711939 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.175707102 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.212158918 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.212183952 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.212246895 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.212256908 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.212282896 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.212301016 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.212410927 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.212424994 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.212459087 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.212462902 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.212485075 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.212507010 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.212759972 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.212780952 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.212805986 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.212810040 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.212838888 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.212856054 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.213099003 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.213133097 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.213154078 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.213157892 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.213184118 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.213198900 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.213444948 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.213459015 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.213510036 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.213515997 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.213547945 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.214801073 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.214822054 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.214883089 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.214890003 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.214936018 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.215267897 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.215285063 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.215325117 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.215328932 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.215365887 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.215451956 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.215478897 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.215501070 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.215508938 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.215531111 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.215547085 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.298929930 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.298968077 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.299011946 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.299024105 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.299066067 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.299082994 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.299216032 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.299232960 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.299262047 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.299266100 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.299288988 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.299303055 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.299598932 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.299614906 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.299665928 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.299670935 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.299709082 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.299895048 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.299910069 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.299947023 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.299949884 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.299974918 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.299992085 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.300223112 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.300235987 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.300285101 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.300290108 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.300316095 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.300326109 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.303524017 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.303543091 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.303591013 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.303595066 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.303627968 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.303864956 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.303889036 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.303914070 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.303916931 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.303944111 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.303956985 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.304086924 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.304100990 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.304141045 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.304145098 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.304177999 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.385853052 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.385869026 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.385950089 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.385957956 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.385987997 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.386008024 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.386133909 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.386147976 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.386181116 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.386183977 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.386208057 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.386229992 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.386426926 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.386457920 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.386483908 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.386487961 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.386513948 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.386526108 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.386826992 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.386847019 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.386878967 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.386883020 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.386904955 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.386921883 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.387201071 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.387222052 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.387253046 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.387258053 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.387284040 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.387298107 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.390398979 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.390414000 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.390455961 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.390463114 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.390484095 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.390496016 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.390708923 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.390729904 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.390767097 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.390773058 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.390793085 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.390803099 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.390990973 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.391005993 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.391045094 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.391048908 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.391074896 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.391092062 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.472703934 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.472734928 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.472793102 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.472800970 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.472836018 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.472879887 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.472896099 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.472933054 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.472937107 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.472981930 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.473201036 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.473217010 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.473261118 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.473267078 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.473298073 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.473624945 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.473640919 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.473675966 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.473680973 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.473709106 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.473721981 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.473889112 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.473903894 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.473953962 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.473958969 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.473993063 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.477108955 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.477125883 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.477168083 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.477174044 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.477209091 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.477452040 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.477473974 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.477502108 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.477507114 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.477531910 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.477554083 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.477734089 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.477749109 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.477790117 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.477794886 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.477833033 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.559606075 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.559627056 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.559690952 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.559699059 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.559737921 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.559930086 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.559942961 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.559993029 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.559998035 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.560033083 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.560338974 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.560353041 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.560400009 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.560405970 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.560440063 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.560576916 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.560591936 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.560632944 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.560636044 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.560662031 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.560679913 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.560895920 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.560909033 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.560960054 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.560964108 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.561000109 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.563951969 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.563976049 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.564042091 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.564048052 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.564083099 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.564264059 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.564279079 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.564327955 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.564333916 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.564367056 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.564552069 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.564563036 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.564615011 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.564620018 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.564660072 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.646357059 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.646373987 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.646476984 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.646485090 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.646526098 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.646678925 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.646696091 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.646744967 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.646750927 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.646781921 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.646986961 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.647002935 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.647049904 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.647053003 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.647085905 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.647317886 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.647332907 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.647386074 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.647392035 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.647428036 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.647603989 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.647619963 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.647666931 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.647672892 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.647711039 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.650590897 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.650605917 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.650656939 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.650662899 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.650696993 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.650944948 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.650959015 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.651009083 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.651014090 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.651048899 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.651285887 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.651299953 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.651344061 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.651348114 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.651384115 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.733259916 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.733282089 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.733375072 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.733391047 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.733429909 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.733481884 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.733496904 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.733537912 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.733542919 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.733572960 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.733798027 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.733809948 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.733859062 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.733863115 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.733895063 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.734179974 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.734194040 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.734250069 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.734255075 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.734287977 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.734402895 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.734428883 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.734463930 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.734468937 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.734491110 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.734504938 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.737463951 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.737478971 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.737526894 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.737530947 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.737570047 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.737875938 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.737898111 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.737929106 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.737934113 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.737955093 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.737972975 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.738085032 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.738099098 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.738164902 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.738169909 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.738205910 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.820008039 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.820033073 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.820095062 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.820142984 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.820149899 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.820338011 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.820359945 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.820389032 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.820394039 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.820405960 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.820430994 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.820676088 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.820697069 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.820724964 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.820728064 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.820754051 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.820766926 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.821065903 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.821086884 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.821118116 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.821122885 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.821146965 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.821165085 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.821325064 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.821340084 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.821373940 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.821378946 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.821404934 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.821422100 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.824253082 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.824268103 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.824321985 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.824326992 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.824363947 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.824510098 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.824523926 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.824556112 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.824559927 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.824584961 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.824601889 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.824865103 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.824878931 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.824923038 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.824928999 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.824961901 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.906946898 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.906979084 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.907028913 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.907041073 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.907080889 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.907099009 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.907118082 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.907133102 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.907171965 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.907176971 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.907202959 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.907223940 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.907480001 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.907495022 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.907541037 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.907546997 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.907581091 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.907927036 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.907946110 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.907988071 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.907991886 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.908025026 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.908174038 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.908186913 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.908221960 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.908226967 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.908252954 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.908272028 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.911092997 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.911107063 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.911149979 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.911154985 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.911190987 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.911295891 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.911319017 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.911338091 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.911343098 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.911370039 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.911389112 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.911567926 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.911583900 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.911617041 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.911624908 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.911653996 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.911740065 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.993596077 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.993613005 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.993701935 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.993716002 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.993751049 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.993956089 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.993969917 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.994020939 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.994025946 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.994062901 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.994335890 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.994354010 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.994395018 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.994399071 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.994436979 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.994595051 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.994607925 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.994656086 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.994661093 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.994698048 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.994944096 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.994959116 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.995004892 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.995012045 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.995043993 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.998020887 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.998034954 CET	443	49769	104.16.149.130	192.168.2.4
Jan 6, 2025 09:42:12.998081923 CET	49769	443	192.168.2.4	104.16.149.130
Jan 6, 2025 09:42:12.998085976 CET	443	49769	104.16.149.130	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 6, 2025 09:41:34.724108934 CET	192.168.2.4	1.1.1.1	0x62b0	Standard query (0)	geo.lavasoft.com	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:41:36.067464113 CET	192.168.2.4	1.1.1.1	0x57f	Standard query (0)	featureflags.lavasoft.com	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:41:37.038075924 CET	192.168.2.4	1.1.1.1	0xf4b8	Standard query (0)	flwadw.com	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:41:53.300332069 CET	192.168.2.4	1.1.1.1	0xe3d4	Standard query (0)	wcdownloadercdn.lavasoft.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Jan 6, 2025 09:41:34.732197046 CET	1.1.1.1	192.168.2.4	0x62b0	No error (0)	geo.lavasoft.com	104.16.148.130	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:41:34.732197046 CET	1.1.1.1	192.168.2.4	0x62b0	No error (0)	geo.lavasoft.com	104.16.149.130	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:41:36.074206114 CET	1.1.1.1	192.168.2.4	0x57f	No error (0)	featureflags.lavasoft.com	104.16.148.130	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:41:36.074206114 CET	1.1.1.1	192.168.2.4	0x57f	No error (0)	featureflags.lavasoft.com	104.16.149.130	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:41:37.045274019 CET	1.1.1.1	192.168.2.4	0xf4b8	No error (0)	flwadw.com	104.18.26.149	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:41:37.045274019 CET	1.1.1.1	192.168.2.4	0xf4b8	No error (0)	flwadw.com	104.18.27.149	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:41:53.308425903 CET	1.1.1.1	192.168.2.4	0xe3d4	No error (0)	wcdownloadercdn.lavasoft.com	104.16.149.130	A (IP address)	IN (0x0001)	false
Jan 6, 2025 09:41:53.308425903 CET	1.1.1.1	192.168.2.4	0xe3d4	No error (0)	wcdownloadercdn.lavasoft.com	104.16.148.130	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49732	104.16.148.130	80	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
Jan 6, 2025 09:41:34.741514921 CET	66	OUT	GET / HTTP/1.1 Host: geo.lavasoft.com Connection: Keep-Alive
Jan 6, 2025 09:41:35.218230963 CET	310	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:35 GMT Content-Type: text/plain Content-Length: 76 Connection: keep-alive Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda68ea98daf795-EWR Data Raw: 7b 22 78 2d 67 65 6f 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 78 2d 67 65 6f 63 6f 75 6e 74 72 79 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 66 2d 69 70 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"x-geocountry":"US","x-geocountryname":"United States","cf-ipcountry":"US"}
Jan 6, 2025 09:41:50.772353888 CET	42	OUT	GET / HTTP/1.1 Host: geo.lavasoft.com
Jan 6, 2025 09:41:50.893533945 CET	310	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:50 GMT Content-Type: text/plain Content-Length: 76 Connection: keep-alive Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda694c9f14f795-EWR Data Raw: 7b 22 78 2d 67 65 6f 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 78 2d 67 65 6f 63 6f 75 6e 74 72 79 6e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 66 2d 69 70 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 7d Data Ascii: {"x-geocountry":"US","x-geocountryname":"United States","cf-ipcountry":"US"}

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49733	104.16.148.130	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:36 UTC	143	OUT	POST /api/feature/WC HTTP/1.1 Content-Type: application/json Host: featureflags.lavasoft.com Content-Length: 194 Connection: Keep-Alive
2025-01-06 08:41:36 UTC	194	OUT	Data Raw: 7b 22 47 65 6f 22 3a 22 55 53 22 2c 22 50 61 72 74 6e 65 72 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 22 3a 22 32 31 37 39 34 35 39 39 31 39 36 22 2c 22 49 6e 73 74 61 6c 6c 44 61 74 65 22 3a 22 32 30 32 35 30 31 30 36 22 2c 22 54 72 69 67 67 65 72 54 79 70 65 22 3a 22 69 6e 73 74 61 6c 6c 22 2c 22 54 72 69 67 67 65 72 45 76 65 6e 74 22 3a 22 69 6e 73 74 61 6c 6c 65 72 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 66 65 61 74 75 72 65 77 70 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 61 6c 22 3a 74 72 75 65 7d Data Ascii: {"Geo":"US","Partner":"IN240402","Campaign":"21794599196","InstallDate":"20250106","TriggerType":"install","TriggerEvent":"installer","Version":"13.900.0.1080","featurewp":true,"featureal":true}
2025-01-06 08:41:36 UTC	249	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:36 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda68f50e05ef9d-EWR
2025-01-06 08:41:36 UTC	884	IN	Data Raw: 33 36 64 0d 0a 5b 7b 22 73 65 63 74 69 6f 6e 43 6f 64 65 22 3a 22 57 41 43 22 2c 22 63 6f 64 65 22 3a 22 57 41 43 22 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 22 7b 5c 22 49 63 6f 6e 5c 22 3a 20 5c 22 68 74 74 70 73 3a 2f 2f 77 65 62 63 6f 6d 70 61 6e 69 6f 6e 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 5c 22 2c 20 5c 22 41 70 70 4e 61 6d 65 5c 22 3a 20 5c 22 57 65 62 20 43 6f 6d 70 61 6e 69 6f 6e 5c 22 2c 20 5c 22 53 65 74 74 69 6e 67 73 5c 22 3a 20 5b 5c 22 57 43 41 75 74 6f 55 70 64 61 74 65 5c 22 2c 20 5c 22 45 6e 61 62 6c 65 47 72 61 6e 75 6c 61 72 69 74 79 5c 22 2c 20 5c 22 50 6f 73 74 52 75 6e 56 32 41 63 74 69 6f 6e 5c 22 2c 20 5c 22 50 6f 73 74 52 75 6e 54 69 6d 65 72 41 63 74 69 6f 6e 5c 22 2c 20 5c 22 45 6e 61 Data Ascii: 36d[{"sectionCode":"WAC","code":"WAC","configuration":"{\"Icon\": \"https://webcompanion.com/images/favicon.ico\", \"AppName\": \"Web Companion\", \"Settings\": [\"WCAutoUpdate\", \"EnableGranularity\", \"PostRunV2Action\", \"PostRunTimerAction\", \"Ena
2025-01-06 08:41:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49734	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:37 UTC	166	OUT	POST /v1/event-stat?Type=Start&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 447 Connection: Keep-Alive
2025-01-06 08:41:37 UTC	447	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 54 72 69 67 67 65 72 22 3a 20 22 69 6e 73 74 61 6c 6c 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "6cf17893-cdb5-4488-afe0-2ac226fa3ae3", "Version": "13.900.0.1080", "Trigger": "install", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId"
2025-01-06 08:41:37 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:37 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda68fa6d630fa5-EWR
2025-01-06 08:41:37 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49735	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:38 UTC	145	OUT	POST /v1/event-stat-wc?Type=Start&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 398
2025-01-06 08:41:38 UTC	398	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 54 72 69 67 67 65 72 22 3a 22 69 6e 73 74 61 6c 6c 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"6cf17893-cdb5-4488-afe0-2ac226fa3ae3","Version":"13.900.0.1080","Trigger":"install","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402"
2025-01-06 08:41:38 UTC	235	IN	HTTP/1.1 400 Bad Request Date: Mon, 06 Jan 2025 08:41:38 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda68ff194e0f6f-EWR
2025-01-06 08:41:38 UTC	39	IN	Data Raw: 32 31 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 49 6e 76 61 6c 69 64 20 66 6f 72 6d 61 74 2f 64 61 74 61 22 7d 0d 0a Data Ascii: 21{"message":"Invalid format/data"}
2025-01-06 08:41:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49736	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:39 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 508
2025-01-06 08:41:39 UTC	508	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "6cf17893-cdb5-4488-afe0-2ac226fa3ae3", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:41:39 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:39 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda6903ad9e8c7b-EWR
2025-01-06 08:41:39 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49737	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:39 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 646
2025-01-06 08:41:39 UTC	646	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"6cf17893-cdb5-4488-afe0-2ac226fa3ae3","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:41:40 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:40 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda690908e74343-EWR
2025-01-06 08:41:40 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49738	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:41 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 515
2025-01-06 08:41:41 UTC	515	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "6cf17893-cdb5-4488-afe0-2ac226fa3ae3", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:41:41 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:41 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda69113feec484-EWR
2025-01-06 08:41:41 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49739	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:42 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 482
2025-01-06 08:41:42 UTC	482	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"6cf17893-cdb5-4488-afe0-2ac226fa3ae3","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:41:42 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:42 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda69173a32f78d-EWR
2025-01-06 08:41:42 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49742	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:42 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 515
2025-01-06 08:41:42 UTC	515	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "6cf17893-cdb5-4488-afe0-2ac226fa3ae3", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:41:43 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:42 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda691b48017c7b-EWR
2025-01-06 08:41:43 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49743	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:43 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 488
2025-01-06 08:41:43 UTC	488	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"6cf17893-cdb5-4488-afe0-2ac226fa3ae3","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:41:43 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:43 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda691f789c80dc-EWR
2025-01-06 08:41:43 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49744	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:44 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 527
2025-01-06 08:41:44 UTC	527	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "6cf17893-cdb5-4488-afe0-2ac226fa3ae3", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:41:44 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:44 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda6923995143a7-EWR
2025-01-06 08:41:44 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49746	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:44 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 466
2025-01-06 08:41:44 UTC	466	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"6cf17893-cdb5-4488-afe0-2ac226fa3ae3","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:41:45 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:45 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda69281d3842af-EWR
2025-01-06 08:41:45 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49747	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:45 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 527
2025-01-06 08:41:45 UTC	527	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "6cf17893-cdb5-4488-afe0-2ac226fa3ae3", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:41:45 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:45 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda692cad209e08-EWR
2025-01-06 08:41:45 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49748	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:46 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 458
2025-01-06 08:41:46 UTC	458	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"6cf17893-cdb5-4488-afe0-2ac226fa3ae3","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:41:46 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:46 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda6930ed70427f-EWR
2025-01-06 08:41:46 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49750	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:46 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 520
2025-01-06 08:41:46 UTC	520	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "6cf17893-cdb5-4488-afe0-2ac226fa3ae3", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:41:47 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:47 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda69351ef9c402-EWR
2025-01-06 08:41:47 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49752	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:47 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 460
2025-01-06 08:41:47 UTC	460	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"6cf17893-cdb5-4488-afe0-2ac226fa3ae3","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:41:47 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:47 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda69395e131819-EWR
2025-01-06 08:41:47 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49753	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:48 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 520
2025-01-06 08:41:48 UTC	520	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "6cf17893-cdb5-4488-afe0-2ac226fa3ae3", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:41:48 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:48 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda693d9b2d43b8-EWR
2025-01-06 08:41:48 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49754	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:48 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 475
2025-01-06 08:41:48 UTC	475	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"6cf17893-cdb5-4488-afe0-2ac226fa3ae3","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:41:49 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:49 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda69419ae17cb2-EWR
2025-01-06 08:41:49 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49755	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:49 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 520
2025-01-06 08:41:49 UTC	520	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "6cf17893-cdb5-4488-afe0-2ac226fa3ae3", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:41:49 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:49 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda6945a9e2185d-EWR
2025-01-06 08:41:49 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49756	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:50 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 491
2025-01-06 08:41:50 UTC	491	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"6cf17893-cdb5-4488-afe0-2ac226fa3ae3","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:41:50 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:50 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda694bba7ef5f7-EWR
2025-01-06 08:41:50 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49758	104.16.148.130	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:51 UTC	118	OUT	POST /api/Update/WC HTTP/1.1 Content-Type: application/json Host: featureflags.lavasoft.com Content-Length: 194
2025-01-06 08:41:51 UTC	194	OUT	Data Raw: 7b 22 47 65 6f 22 3a 22 55 53 22 2c 22 50 61 72 74 6e 65 72 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 22 3a 22 32 31 37 39 34 35 39 39 31 39 36 22 2c 22 49 6e 73 74 61 6c 6c 44 61 74 65 22 3a 22 32 30 32 35 30 31 30 36 22 2c 22 54 72 69 67 67 65 72 54 79 70 65 22 3a 22 69 6e 73 74 61 6c 6c 22 2c 22 54 72 69 67 67 65 72 45 76 65 6e 74 22 3a 22 69 6e 73 74 61 6c 6c 65 72 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 66 65 61 74 75 72 65 77 70 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 61 6c 22 3a 74 72 75 65 7d Data Ascii: {"Geo":"US","Partner":"IN240402","Campaign":"21794599196","InstallDate":"20250106","TriggerType":"install","TriggerEvent":"installer","Version":"13.900.0.1080","featurewp":true,"featureal":true}
2025-01-06 08:41:51 UTC	249	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:51 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda695108aa42c1-EWR
2025-01-06 08:41:51 UTC	327	IN	Data Raw: 31 34 30 0d 0a 7b 22 63 6f 64 65 22 3a 22 55 50 44 22 2c 22 63 6f 6e 66 69 67 75 72 61 74 69 6f 6e 22 3a 22 7b 5c 22 56 65 72 73 69 6f 6e 5c 22 3a 20 5c 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 5c 22 2c 20 5c 22 49 6e 73 74 61 6c 6c 65 72 45 78 65 5c 22 3a 20 5c 22 68 74 74 70 73 3a 2f 2f 77 63 64 6f 77 6e 6c 6f 61 64 65 72 63 64 6e 2e 6c 61 76 61 73 6f 66 74 2e 63 6f 6d 2f 31 33 2e 30 2e 30 2e 31 30 38 30 2f 57 43 49 6e 73 74 61 6c 6c 65 72 5f 4e 6f 6e 41 64 6d 69 6e 2e 65 78 65 5c 22 2c 20 5c 22 49 6e 73 74 61 6c 6c 65 72 5a 69 70 5c 22 3a 20 5c 22 68 74 74 70 73 3a 2f 2f 77 63 64 6f 77 6e 6c 6f 61 64 65 72 63 64 6e 2e 6c 61 76 61 73 6f 66 74 2e 63 6f 6d 2f 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 2f 57 65 62 43 6f 6d 70 61 6e 69 6f 6e 2d 31 33 2e 39 30 Data Ascii: 140{"code":"UPD","configuration":"{\"Version\": \"13.900.0.1080\", \"InstallerExe\": \"https://wcdownloadercdn.lavasoft.com/13.0.0.1080/WCInstaller_NonAdmin.exe\", \"InstallerZip\": \"https://wcdownloadercdn.lavasoft.com/13.900.0.1080/WebCompanion-13.90
2025-01-06 08:41:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49760	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:52 UTC	152	OUT	POST /v1/event-stat?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 517
2025-01-06 08:41:52 UTC	517	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "6cf17893-cdb5-4488-afe0-2ac226fa3ae3", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:41:52 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:52 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda69559d294370-EWR
2025-01-06 08:41:52 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49763	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:52 UTC	155	OUT	POST /v1/event-stat-wc?Type=ProgressInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 485
2025-01-06 08:41:52 UTC	485	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"6cf17893-cdb5-4488-afe0-2ac226fa3ae3","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:41:53 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:53 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda695a6f3241d2-EWR
2025-01-06 08:41:53 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:41:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49764	104.16.149.130	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:41:53 UTC	127	OUT	GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1 Host: wcdownloadercdn.lavasoft.com Connection: Keep-Alive
2025-01-06 08:41:53 UTC	380	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:41:53 GMT Content-Type: application/zip Content-Length: 10494317 Connection: close ETag: "3718275022" Last-Modified: Wed, 15 May 2024 10:29:47 GMT CF-Cache-Status: HIT Age: 696 Expires: Mon, 06 Jan 2025 12:41:53 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8fda695ffe4defa3-EWR
2025-01-06 08:41:53 UTC	989	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 d3 25 ae 58 c9 f2 0a dc 46 46 03 00 98 24 07 00 13 00 00 00 41 70 70 6c 69 63 61 74 69 6f 6e 2f 37 7a 61 2e 65 78 65 ec bd 79 78 54 45 d6 38 7c 7b 49 d2 59 48 27 40 43 58 c4 56 5b 8d 84 25 43 50 93 34 68 5f d2 4d 6e 43 47 40 44 51 a3 a0 68 0b ae 18 fa 86 20 8b 60 27 be e9 5c 5b 1d c5 19 75 1c c7 79 67 9c cf 19 97 51 47 59 5c bb 13 c8 c2 be b8 b0 8c 8a 7b 85 16 64 91 10 b6 dc ef 9c 53 b7 b7 10 a2 cf f7 fc 7e ff 7d 79 9e f4 dd aa 4e 9d 3a 75 ea d4 a9 53 a7 4e 55 dc f4 a4 60 10 04 c1 08 ff aa 2a 08 6b 04 fe e7 10 7e fd 8f c1 7f f6 f9 ef 65 0b ef a4 6f be 60 8d ce b3 f9 82 eb e6 ce 5b 60 9d 5f f5 c0 5d 55 b7 dd 67 9d 73 db fd f7 3f e0 b3 de 7e a7 b5 4a be df 3a ef 7e ab 73 ca 74 eb 7d 0f dc 71 e7 a8 3e 7d 32 6c 1a 8c f3 87 dd dd Data Ascii: PK%XFF$Application/7za.exeyxTE8\|{IYH'@CXV[%CP4h_MnCG@DQh `'\[uygQGY\{dS~}yN:uSNU`*k~eo`[`_]Ugs?~J:~st}q>}2l
2025-01-06 08:41:53 UTC	1369	IN	Data Raw: 23 7a 68 16 65 1b d6 f6 c2 2b 0c 82 7f 89 ad 50 f0 0d c7 24 f9 1c 18 0a 38 68 10 2c ec c3 6c ed 56 62 6f c3 6d fb fd 54 69 fc f2 b7 f8 97 67 a3 b7 c5 2c 88 25 fb d7 cd 25 ee 8b b7 51 b0 a2 98 0d de 1e 6d 9f 4d 67 b5 71 b0 42 62 27 b7 f5 f6 3d 9f ed e9 e5 bb 12 c4 aa 32 33 2f 1d 93 38 81 1f ad dd fa ae 14 6b b7 0a e5 90 47 f9 46 52 0e 17 ed 2d b9 c9 64 ae 3d 4f 8f b4 d7 7b fd c5 23 cd 75 39 f0 a0 34 69 e4 73 06 ef 51 95 88 d3 be b1 fa 41 e8 f4 6e 65 a0 72 aa 78 b0 af 9f 84 dd 51 52 43 c5 79 f2 71 85 a7 14 ed 67 96 95 04 cb 75 a2 dd 69 33 2d cc 77 2b 59 36 e0 4b 3d db d1 4f 10 4a 9b 7c d9 ca fa 28 48 e5 e7 48 8e 96 29 92 a6 dd a8 eb dd fe 96 3c fb 6b b6 57 e0 a1 ea 8f 4e 7b 64 e9 40 29 78 8d 55 0a 5a 76 6f 33 0a 6c df 00 41 18 13 6a af 86 51 46 0c ce 80 ae Data Ascii: #zhe+P$8h,lVbomTig,%%QmMgqBb'=23/8kGFR-d=O{#u94isQAnerxQRCyqgui3-w+Y6K=OJ\|(HH)<kWN{d@)xUZvo3lAjQF
2025-01-06 08:41:53 UTC	1369	IN	Data Raw: 01 92 a9 81 72 98 19 0c 9d 00 5c 03 59 ae 80 c1 ad 64 96 c9 37 92 0b a1 2b 53 50 08 39 6d 33 71 74 cb 26 71 d8 ca fe 60 e1 63 1b ca a3 2d ac 76 04 f5 84 c2 59 b7 26 4b 94 c4 3e 33 93 0d 4e 11 12 f5 5e f1 3a 69 c5 4f cb b1 9e d1 01 44 54 18 2a 3b f0 38 97 b4 6f ae b0 ce 65 83 7c 28 66 1d a5 2d 72 4a 3b 33 e0 10 ad 69 80 73 d9 25 f7 c2 14 92 3e 6c c5 0f 2b 96 d8 f2 f7 a9 ea c3 55 29 ed 1f 1b a2 aa ed 97 a0 d7 3c b9 e2 cc 9b 30 01 35 d7 4e 00 96 5a 71 e6 2d ba bf 42 c7 93 cc 64 8b fb 90 d4 01 55 15 74 a2 3b aa 73 51 ae e2 fb bf e0 e0 8e af 3d c1 c7 6c ad a4 12 81 d0 bd 0e 68 41 a5 33 ad f4 21 38 aa cf 64 25 c6 98 7a 39 0a 6f db ed 80 03 48 f8 56 52 0d 00 8a 4f 4b 98 13 4f 98 42 09 fb 6a c8 ce 65 97 dd 23 08 1e a5 d2 36 53 cb 37 a1 7e 5c 9e 02 63 a7 dd 97 a1 Data Ascii: r\Yd7+SP9m3qt&q`c-vY&K>3N^:iODT*;8oe\|(f-rJ;3is%>l+U)<05NZq-BdUt;sQ=lhA3!8d%z9oHVROKOBje#6S7~\c
2025-01-06 08:41:53 UTC	1369	IN	Data Raw: ef f8 41 c2 42 a3 d7 df 68 f5 06 72 71 34 32 af ce f5 d6 ed 90 bf 6b da 14 d5 c7 78 e3 79 94 af 61 b4 18 6a f3 2a 4b 05 34 e4 a2 44 f7 da bf f2 4d f3 fa 4f dd 56 95 0b bf 0f 2d 4c 09 2e d8 17 01 4d f2 d4 c3 0b 53 bc ca d1 48 96 79 f5 46 d5 e2 f8 00 2b 71 c8 eb 57 6f ab 1a 06 bf 0f 2d 4c f5 fa 7f b6 46 fa c2 fd c3 d5 90 66 ab 6a 19 4a 69 3a bd f6 e3 72 5f 6f dd 5e 79 25 ef 79 9a 5c 87 5e 79 78 13 e8 fe e9 91 e1 2e a8 a0 1b d0 04 fd 94 e3 9e 02 3a 74 c8 1a 14 3f 1e 37 68 a1 61 79 d8 6a 5e d5 06 b5 0d cb 59 0d 19 a0 1c d7 b6 c9 9b df d4 01 00 ac 6f 16 52 2e 4f e2 a3 2e 0c c9 40 1a bb 0e 2a 15 f2 fd 00 09 20 19 96 b1 dd d5 a0 77 36 64 b8 21 95 da e8 2a 0d fb 2e c4 a2 00 78 aa 18 94 ac 30 e7 68 68 15 79 69 46 98 0d 59 c5 d2 36 d9 04 70 e5 d6 68 31 08 03 80 67 Data Ascii: ABhrq42kxyajK4DMOV-L.MSHyF+qWo-LFfjJi:r_o^y%y\^yx.:t?7hayj^YoR.O.@ w6d!*.x0hhyiFY6ph1g
2025-01-06 08:41:53 UTC	1369	IN	Data Raw: 5e b3 d1 64 1a 2d 78 47 82 fd 0b 2a 94 76 04 3e 17 80 13 64 ad b6 9f e1 c4 cb 0f 80 9d 41 17 cc c6 b3 ec c0 47 6e e5 53 36 1f 5e f1 02 f2 63 2b 09 bc 1f 89 8a c3 54 a1 98 9c ca 04 a8 76 5f 9c 14 3a 6d e4 e2 11 80 19 11 ab 51 a3 53 8f c2 84 be 87 cb ef 6d 5e b1 c4 14 f0 d8 1c 4e a5 cd 67 4e 68 8e 12 93 fc 0b 2d 91 56 28 ad 31 a8 1b d9 a8 24 48 67 8d 1f 38 68 b0 65 87 7a 18 3f 34 8e 8c 8e 20 b1 3e 6d 5e b5 e7 3d 6e 6d 3e c1 6e 3b a3 8d 00 2d 5e 31 30 c4 2b b6 94 e9 f9 54 64 16 95 a5 c9 ae bd dc d8 ea 2d 19 0c 3a 3a c8 0f 40 58 6d 22 f6 f9 05 9a fb 3c 9a 65 65 3b 83 65 3a 20 1a 32 8e 7d 25 f6 bf e6 38 ff 27 c3 29 1e 1c 13 81 4d 5c 04 ee 64 bb 4e ab 6a 1d 34 c5 30 df 40 b7 b2 51 d9 69 5e 95 26 81 64 0e 90 6e 28 a9 1b e4 83 80 9c f1 66 21 19 6e b7 f1 ec e9 d3 Data Ascii: ^d-xG*v>dAGnS6^c+Tv_:mQSm^NgNh-V(1$Hg8hez?4 >m^=nm>n;-^10+Td-::@Xm"<ee;e: 2}%8')M\dNj40@Qi^&dn(f!n
2025-01-06 08:41:53 UTC	1369	IN	Data Raw: 41 a0 2e a4 b0 9a 0b 5d ca 3a 34 0d 6f 61 af 9f 46 fd 0d 6a 8a 0f 87 40 a7 15 0d 07 ec f7 9b aa 36 24 29 ac 09 e3 7b 31 88 d0 16 91 34 45 51 61 a4 22 3a 95 49 d0 72 47 a0 1a d0 c4 e6 da 97 04 5c 3a d4 2b 9b 8b 76 80 46 cb fd 9a d0 c8 2f d0 22 40 fe 3f 10 49 a5 53 b6 a9 96 fe 74 ef ab 82 29 d2 8a a9 7c 8a 34 1b 52 ce f6 5d 63 14 d8 a7 8f 01 e7 d8 cb b2 aa 33 10 d3 8d ec 2f 47 b0 25 0c 4e 18 c5 3c 4a 6a d1 0e 65 73 60 89 2d 1f 57 db ad aa 65 c7 cb 08 49 c6 c9 d6 95 67 41 52 10 52 a0 cc 84 d3 3b 50 6a 8d 12 69 a8 c5 bc 66 ce fa 24 9f 42 8f f2 5f 6e 7f d6 79 94 bf db b0 2a ae a2 0e 67 e0 41 93 b3 be d0 55 3f d6 86 75 05 ed c6 a3 ec 77 d9 b7 50 75 33 75 54 dd 8a c0 82 4e f8 3f e4 0a 2c 60 80 dc 56 b8 df a7 5a 26 00 5e a2 bd 59 39 24 8f 56 2d 17 f3 07 73 ed 2e Data Ascii: A.]:4oaFj@6$){14EQa":IrG\:+vF/"@?ISt)\|4R]c3/G%N<Jjes`-WeIgARR;Pjif$B_ny*gAU?uwPu3uTN?,`VZ&^Y9$V-s.
2025-01-06 08:41:53 UTC	1369	IN	Data Raw: 3a d4 cb 00 19 f3 ca 50 fb 03 70 fb a6 ae 1d 5d d8 34 bd 9e e6 03 1b d0 6d 20 38 74 02 a8 63 92 7d 0f fa fe 95 e1 9c a5 d2 97 0d bf a3 7d 26 c9 0e 44 d8 25 33 50 5c dc 4a 9b a7 a0 d1 bd bd 93 2d 26 f3 0b f0 dd 56 ae 3c b5 ff e3 20 1a 3d 7b 81 3b da eb 5f dc 55 09 5d 1b 2e a3 65 23 70 70 d7 6f 2f 2e ab 7b 71 57 1e e4 36 d6 e9 49 56 8a 3d b1 8e fe e3 61 cc b0 d5 19 74 c0 3c c7 30 29 d8 df c1 fe 8b c6 f3 84 05 16 65 9a a9 08 cd b2 30 9f 49 f7 fa 4b 86 fb fa c1 ef d5 be 3e 2a ad 5b da 1b ab f6 f3 15 59 18 10 8a 76 78 ed 8d be 7c af 7f 91 be 54 be c0 5b 32 cd 28 0f f1 8e bf 4d a8 4a f5 8e 7f 48 a8 06 69 26 0a 7c cd 92 4c 75 0d 8d f1 39 d7 f2 45 b9 82 af 70 f9 a2 be 82 6f f8 f2 45 fd 04 9f ed 7d 4c 52 72 a3 09 f4 27 45 07 83 fd 88 bf 62 5b 9a c8 b5 23 ff 45 d2 Data Ascii: :Pp]4m 8tc}}&D%3P\J-&V< ={;_U].e#ppo/.{qW6IV=at<0)e0IK>*[Yvx\|T[2(MJHi&\|Lu9EpoE}LRr'Eb[#E
2025-01-06 08:41:53 UTC	1369	IN	Data Raw: df a9 ea 93 4a 93 12 b1 9f aa be 97 76 1e 57 08 5e d1 3f 2e ab d2 67 a2 eb 68 79 b2 53 59 af 99 38 79 9e 6a d0 1d 39 5b bc f6 09 d2 9a cf d4 71 37 82 39 b6 d7 2e 15 f5 50 03 36 3d 37 01 1d 39 a5 17 82 2e 1d 6e 56 5c a7 b7 ff 5c f5 c7 82 4e 65 1b 6e 73 c6 3d 7c e4 33 89 90 87 c6 20 5f db 0d 72 7c 17 df 6b df d1 4a b6 b6 d3 e1 79 80 ab f9 51 4e fe 84 c8 27 f5 d0 10 c9 7e 94 1b fe d0 db 1e bb e5 c4 2b 3b 93 5c 96 cf fa fe 55 fc bb b3 de 69 cb d3 64 14 b5 55 3e b6 95 5b 39 2c 36 30 50 cd 80 6b 5d 0d ad 1e a5 b1 68 07 bb ec 04 17 c1 cd a9 02 28 a4 57 e2 16 cb 54 9d b3 61 33 e8 7c 6f eb 70 2a 86 7b b1 1c 0d 0c 3a a8 ce fc e8 40 f2 eb 07 1a e6 e0 a7 41 9d aa 8a 16 09 50 5f ea 4f 6a 3b d4 80 66 85 6c d7 49 cd 65 bb 10 dd 20 80 e7 2d d8 8d af 42 04 95 8d ec 8a 9d Data Ascii: JvW^?.ghySY8yj9[q79.P6=79.nV\\Nens=\|3 _r\|kJyQN'~+;\UidU>[9,60Pk]h(WTa3\|op*{:@AP_Oj;flIe -B
2025-01-06 08:41:53 UTC	1369	IN	Data Raw: 49 c3 67 73 38 e1 47 c2 1f 0f 3e 4e c5 bb 99 f8 53 89 8f b3 f1 6e 2e fe dc 2b 05 a7 e4 91 fa cf 1c 5d 04 94 56 5e 59 a4 13 45 a6 c7 36 95 7d ad dd 39 d8 5d 31 65 98 8d 6b a5 a5 5c c0 d6 6d d7 74 ca cb 5a b9 44 bd 80 ae 99 38 03 4e d2 88 cf 7b 80 7b 81 88 ea 66 51 d9 84 2a b1 a4 8c 6b 25 6d fc 7f d0 8b de 59 b2 c0 e4 1b 4c 95 ef 8f 3d 58 49 67 6f ec a7 aa cb 46 67 fd 82 7e 62 e9 41 54 1b a7 e4 a3 fe b5 0e 54 80 08 48 f9 29 c5 f8 b4 0a 9f ce 4f 4a f0 37 7c 95 15 4d f0 0c 0f 7e 30 3f 39 06 53 d2 bc e5 a9 ce de f6 51 e6 13 6f 1c 0c 74 8f 65 54 93 c0 e8 38 1b 91 fc 8d c5 34 3a 17 80 40 2e 3a 50 72 8f d5 fc e8 7f 31 6e 86 66 9b 33 a6 e2 bc eb 15 ea 2f 21 13 de d3 32 2f 5f 2b 7a 3a 82 06 30 73 a0 8e 9c 37 a9 55 57 6a cb c0 48 f3 9c cf 01 64 08 7b 8f 03 fe f1 ea Data Ascii: Igs8G>NSn.+]V^YE6}9]1ek\mtZD8N{{fQ*k%mYL=XIgoFg~bATTH)OJ7\|M~0?9SQoteT84:@.:Pr1nf3/!2/_+z:0s7UWjHd{
2025-01-06 08:41:53 UTC	1369	IN	Data Raw: d7 c2 01 c4 42 01 24 fa 51 1e e2 1b fd d8 87 80 57 d1 de d2 26 19 03 08 0c 74 2a cd 68 a3 db ac 5a c6 03 0c c9 0e b3 bb 34 2d bc 65 f7 bd 6e 5c ed 67 4b 13 f3 c3 e4 6e 8b 6a c9 e8 96 35 ea f3 02 03 7b 21 6d ab 00 54 fb cc 90 52 b5 ce ae 18 a2 0b 2e 6b 52 30 60 08 da 38 bc dc 17 51 b5 34 2f 35 0a e3 8d f0 7a a1 05 6a 94 1b f3 1a bf 7f 0b d9 43 d1 56 b8 62 1d 42 e5 b8 f5 68 4b 89 ca 18 f6 f2 26 f2 51 93 f8 7e 8f 8d 6c 1e b7 cd 5e 40 f1 d0 b6 a3 66 56 63 51 43 f6 32 d3 82 ec 64 4f 44 5c f1 c1 31 cd 52 5e cb e3 7b dd b3 35 79 e3 cf d9 be 6c 52 cc 97 4d 42 5f 36 07 5b f9 70 82 2f 9b 66 97 c1 2d 47 3c a8 a5 83 34 1d 8a 3a e1 20 a1 cc 3a 61 fe db c2 43 a5 e9 a2 41 85 34 49 a9 49 6d 2d d4 1a 5a b5 d1 b9 4c 69 29 da b1 56 e8 87 54 2b 5c 4c 0c 70 13 ea 75 cf 6a 95 Data Ascii: B$QW&t*hZ4-en\gKnj5{!mTR.kR0`8Q4/5zjCVbBhK&Q~l^@fVcQC2dOD\1R^{5ylRMB_6[p/f-G<4: :aCA4IIm-ZLi)VT+\Lpuj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49768	104.16.149.130	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:42:01 UTC	103	OUT	GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1 Host: wcdownloadercdn.lavasoft.com
2025-01-06 08:42:01 UTC	380	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:42:01 GMT Content-Type: application/zip Content-Length: 10494317 Connection: close ETag: "3718275022" Last-Modified: Wed, 15 May 2024 10:29:47 GMT CF-Cache-Status: HIT Age: 704 Expires: Mon, 06 Jan 2025 12:42:01 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8fda6991888232ee-EWR
2025-01-06 08:42:01 UTC	989	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 d3 25 ae 58 c9 f2 0a dc 46 46 03 00 98 24 07 00 13 00 00 00 41 70 70 6c 69 63 61 74 69 6f 6e 2f 37 7a 61 2e 65 78 65 ec bd 79 78 54 45 d6 38 7c 7b 49 d2 59 48 27 40 43 58 c4 56 5b 8d 84 25 43 50 93 34 68 5f d2 4d 6e 43 47 40 44 51 a3 a0 68 0b ae 18 fa 86 20 8b 60 27 be e9 5c 5b 1d c5 19 75 1c c7 79 67 9c cf 19 97 51 47 59 5c bb 13 c8 c2 be b8 b0 8c 8a 7b 85 16 64 91 10 b6 dc ef 9c 53 b7 b7 10 a2 cf f7 fc 7e ff 7d 79 9e f4 dd aa 4e 9d 3a 75 ea d4 a9 53 a7 4e 55 dc f4 a4 60 10 04 c1 08 ff aa 2a 08 6b 04 fe e7 10 7e fd 8f c1 7f f6 f9 ef 65 0b ef a4 6f be 60 8d ce b3 f9 82 eb e6 ce 5b 60 9d 5f f5 c0 5d 55 b7 dd 67 9d 73 db fd f7 3f e0 b3 de 7e a7 b5 4a be df 3a ef 7e ab 73 ca 74 eb 7d 0f dc 71 e7 a8 3e 7d 32 6c 1a 8c f3 87 dd dd Data Ascii: PK%XFF$Application/7za.exeyxTE8\|{IYH'@CXV[%CP4h_MnCG@DQh `'\[uygQGY\{dS~}yN:uSNU`*k~eo`[`_]Ugs?~J:~st}q>}2l
2025-01-06 08:42:01 UTC	1369	IN	Data Raw: 23 7a 68 16 65 1b d6 f6 c2 2b 0c 82 7f 89 ad 50 f0 0d c7 24 f9 1c 18 0a 38 68 10 2c ec c3 6c ed 56 62 6f c3 6d fb fd 54 69 fc f2 b7 f8 97 67 a3 b7 c5 2c 88 25 fb d7 cd 25 ee 8b b7 51 b0 a2 98 0d de 1e 6d 9f 4d 67 b5 71 b0 42 62 27 b7 f5 f6 3d 9f ed e9 e5 bb 12 c4 aa 32 33 2f 1d 93 38 81 1f ad dd fa ae 14 6b b7 0a e5 90 47 f9 46 52 0e 17 ed 2d b9 c9 64 ae 3d 4f 8f b4 d7 7b fd c5 23 cd 75 39 f0 a0 34 69 e4 73 06 ef 51 95 88 d3 be b1 fa 41 e8 f4 6e 65 a0 72 aa 78 b0 af 9f 84 dd 51 52 43 c5 79 f2 71 85 a7 14 ed 67 96 95 04 cb 75 a2 dd 69 33 2d cc 77 2b 59 36 e0 4b 3d db d1 4f 10 4a 9b 7c d9 ca fa 28 48 e5 e7 48 8e 96 29 92 a6 dd a8 eb dd fe 96 3c fb 6b b6 57 e0 a1 ea 8f 4e 7b 64 e9 40 29 78 8d 55 0a 5a 76 6f 33 0a 6c df 00 41 18 13 6a af 86 51 46 0c ce 80 ae Data Ascii: #zhe+P$8h,lVbomTig,%%QmMgqBb'=23/8kGFR-d=O{#u94isQAnerxQRCyqgui3-w+Y6K=OJ\|(HH)<kWN{d@)xUZvo3lAjQF
2025-01-06 08:42:01 UTC	1369	IN	Data Raw: 01 92 a9 81 72 98 19 0c 9d 00 5c 03 59 ae 80 c1 ad 64 96 c9 37 92 0b a1 2b 53 50 08 39 6d 33 71 74 cb 26 71 d8 ca fe 60 e1 63 1b ca a3 2d ac 76 04 f5 84 c2 59 b7 26 4b 94 c4 3e 33 93 0d 4e 11 12 f5 5e f1 3a 69 c5 4f cb b1 9e d1 01 44 54 18 2a 3b f0 38 97 b4 6f ae b0 ce 65 83 7c 28 66 1d a5 2d 72 4a 3b 33 e0 10 ad 69 80 73 d9 25 f7 c2 14 92 3e 6c c5 0f 2b 96 d8 f2 f7 a9 ea c3 55 29 ed 1f 1b a2 aa ed 97 a0 d7 3c b9 e2 cc 9b 30 01 35 d7 4e 00 96 5a 71 e6 2d ba bf 42 c7 93 cc 64 8b fb 90 d4 01 55 15 74 a2 3b aa 73 51 ae e2 fb bf e0 e0 8e af 3d c1 c7 6c ad a4 12 81 d0 bd 0e 68 41 a5 33 ad f4 21 38 aa cf 64 25 c6 98 7a 39 0a 6f db ed 80 03 48 f8 56 52 0d 00 8a 4f 4b 98 13 4f 98 42 09 fb 6a c8 ce 65 97 dd 23 08 1e a5 d2 36 53 cb 37 a1 7e 5c 9e 02 63 a7 dd 97 a1 Data Ascii: r\Yd7+SP9m3qt&q`c-vY&K>3N^:iODT*;8oe\|(f-rJ;3is%>l+U)<05NZq-BdUt;sQ=lhA3!8d%z9oHVROKOBje#6S7~\c
2025-01-06 08:42:01 UTC	1369	IN	Data Raw: ef f8 41 c2 42 a3 d7 df 68 f5 06 72 71 34 32 af ce f5 d6 ed 90 bf 6b da 14 d5 c7 78 e3 79 94 af 61 b4 18 6a f3 2a 4b 05 34 e4 a2 44 f7 da bf f2 4d f3 fa 4f dd 56 95 0b bf 0f 2d 4c 09 2e d8 17 01 4d f2 d4 c3 0b 53 bc ca d1 48 96 79 f5 46 d5 e2 f8 00 2b 71 c8 eb 57 6f ab 1a 06 bf 0f 2d 4c f5 fa 7f b6 46 fa c2 fd c3 d5 90 66 ab 6a 19 4a 69 3a bd f6 e3 72 5f 6f dd 5e 79 25 ef 79 9a 5c 87 5e 79 78 13 e8 fe e9 91 e1 2e a8 a0 1b d0 04 fd 94 e3 9e 02 3a 74 c8 1a 14 3f 1e 37 68 a1 61 79 d8 6a 5e d5 06 b5 0d cb 59 0d 19 a0 1c d7 b6 c9 9b df d4 01 00 ac 6f 16 52 2e 4f e2 a3 2e 0c c9 40 1a bb 0e 2a 15 f2 fd 00 09 20 19 96 b1 dd d5 a0 77 36 64 b8 21 95 da e8 2a 0d fb 2e c4 a2 00 78 aa 18 94 ac 30 e7 68 68 15 79 69 46 98 0d 59 c5 d2 36 d9 04 70 e5 d6 68 31 08 03 80 67 Data Ascii: ABhrq42kxyajK4DMOV-L.MSHyF+qWo-LFfjJi:r_o^y%y\^yx.:t?7hayj^YoR.O.@ w6d!*.x0hhyiFY6ph1g
2025-01-06 08:42:01 UTC	1369	IN	Data Raw: 5e b3 d1 64 1a 2d 78 47 82 fd 0b 2a 94 76 04 3e 17 80 13 64 ad b6 9f e1 c4 cb 0f 80 9d 41 17 cc c6 b3 ec c0 47 6e e5 53 36 1f 5e f1 02 f2 63 2b 09 bc 1f 89 8a c3 54 a1 98 9c ca 04 a8 76 5f 9c 14 3a 6d e4 e2 11 80 19 11 ab 51 a3 53 8f c2 84 be 87 cb ef 6d 5e b1 c4 14 f0 d8 1c 4e a5 cd 67 4e 68 8e 12 93 fc 0b 2d 91 56 28 ad 31 a8 1b d9 a8 24 48 67 8d 1f 38 68 b0 65 87 7a 18 3f 34 8e 8c 8e 20 b1 3e 6d 5e b5 e7 3d 6e 6d 3e c1 6e 3b a3 8d 00 2d 5e 31 30 c4 2b b6 94 e9 f9 54 64 16 95 a5 c9 ae bd dc d8 ea 2d 19 0c 3a 3a c8 0f 40 58 6d 22 f6 f9 05 9a fb 3c 9a 65 65 3b 83 65 3a 20 1a 32 8e 7d 25 f6 bf e6 38 ff 27 c3 29 1e 1c 13 81 4d 5c 04 ee 64 bb 4e ab 6a 1d 34 c5 30 df 40 b7 b2 51 d9 69 5e 95 26 81 64 0e 90 6e 28 a9 1b e4 83 80 9c f1 66 21 19 6e b7 f1 ec e9 d3 Data Ascii: ^d-xG*v>dAGnS6^c+Tv_:mQSm^NgNh-V(1$Hg8hez?4 >m^=nm>n;-^10+Td-::@Xm"<ee;e: 2}%8')M\dNj40@Qi^&dn(f!n
2025-01-06 08:42:01 UTC	1369	IN	Data Raw: 41 a0 2e a4 b0 9a 0b 5d ca 3a 34 0d 6f 61 af 9f 46 fd 0d 6a 8a 0f 87 40 a7 15 0d 07 ec f7 9b aa 36 24 29 ac 09 e3 7b 31 88 d0 16 91 34 45 51 61 a4 22 3a 95 49 d0 72 47 a0 1a d0 c4 e6 da 97 04 5c 3a d4 2b 9b 8b 76 80 46 cb fd 9a d0 c8 2f d0 22 40 fe 3f 10 49 a5 53 b6 a9 96 fe 74 ef ab 82 29 d2 8a a9 7c 8a 34 1b 52 ce f6 5d 63 14 d8 a7 8f 01 e7 d8 cb b2 aa 33 10 d3 8d ec 2f 47 b0 25 0c 4e 18 c5 3c 4a 6a d1 0e 65 73 60 89 2d 1f 57 db ad aa 65 c7 cb 08 49 c6 c9 d6 95 67 41 52 10 52 a0 cc 84 d3 3b 50 6a 8d 12 69 a8 c5 bc 66 ce fa 24 9f 42 8f f2 5f 6e 7f d6 79 94 bf db b0 2a ae a2 0e 67 e0 41 93 b3 be d0 55 3f d6 86 75 05 ed c6 a3 ec 77 d9 b7 50 75 33 75 54 dd 8a c0 82 4e f8 3f e4 0a 2c 60 80 dc 56 b8 df a7 5a 26 00 5e a2 bd 59 39 24 8f 56 2d 17 f3 07 73 ed 2e Data Ascii: A.]:4oaFj@6$){14EQa":IrG\:+vF/"@?ISt)\|4R]c3/G%N<Jjes`-WeIgARR;Pjif$B_ny*gAU?uwPu3uTN?,`VZ&^Y9$V-s.
2025-01-06 08:42:01 UTC	1369	IN	Data Raw: 3a d4 cb 00 19 f3 ca 50 fb 03 70 fb a6 ae 1d 5d d8 34 bd 9e e6 03 1b d0 6d 20 38 74 02 a8 63 92 7d 0f fa fe 95 e1 9c a5 d2 97 0d bf a3 7d 26 c9 0e 44 d8 25 33 50 5c dc 4a 9b a7 a0 d1 bd bd 93 2d 26 f3 0b f0 dd 56 ae 3c b5 ff e3 20 1a 3d 7b 81 3b da eb 5f dc 55 09 5d 1b 2e a3 65 23 70 70 d7 6f 2f 2e ab 7b 71 57 1e e4 36 d6 e9 49 56 8a 3d b1 8e fe e3 61 cc b0 d5 19 74 c0 3c c7 30 29 d8 df c1 fe 8b c6 f3 84 05 16 65 9a a9 08 cd b2 30 9f 49 f7 fa 4b 86 fb fa c1 ef d5 be 3e 2a ad 5b da 1b ab f6 f3 15 59 18 10 8a 76 78 ed 8d be 7c af 7f 91 be 54 be c0 5b 32 cd 28 0f f1 8e bf 4d a8 4a f5 8e 7f 48 a8 06 69 26 0a 7c cd 92 4c 75 0d 8d f1 39 d7 f2 45 b9 82 af 70 f9 a2 be 82 6f f8 f2 45 fd 04 9f ed 7d 4c 52 72 a3 09 f4 27 45 07 83 fd 88 bf 62 5b 9a c8 b5 23 ff 45 d2 Data Ascii: :Pp]4m 8tc}}&D%3P\J-&V< ={;_U].e#ppo/.{qW6IV=at<0)e0IK>*[Yvx\|T[2(MJHi&\|Lu9EpoE}LRr'Eb[#E
2025-01-06 08:42:01 UTC	1369	IN	Data Raw: df a9 ea 93 4a 93 12 b1 9f aa be 97 76 1e 57 08 5e d1 3f 2e ab d2 67 a2 eb 68 79 b2 53 59 af 99 38 79 9e 6a d0 1d 39 5b bc f6 09 d2 9a cf d4 71 37 82 39 b6 d7 2e 15 f5 50 03 36 3d 37 01 1d 39 a5 17 82 2e 1d 6e 56 5c a7 b7 ff 5c f5 c7 82 4e 65 1b 6e 73 c6 3d 7c e4 33 89 90 87 c6 20 5f db 0d 72 7c 17 df 6b df d1 4a b6 b6 d3 e1 79 80 ab f9 51 4e fe 84 c8 27 f5 d0 10 c9 7e 94 1b fe d0 db 1e bb e5 c4 2b 3b 93 5c 96 cf fa fe 55 fc bb b3 de 69 cb d3 64 14 b5 55 3e b6 95 5b 39 2c 36 30 50 cd 80 6b 5d 0d ad 1e a5 b1 68 07 bb ec 04 17 c1 cd a9 02 28 a4 57 e2 16 cb 54 9d b3 61 33 e8 7c 6f eb 70 2a 86 7b b1 1c 0d 0c 3a a8 ce fc e8 40 f2 eb 07 1a e6 e0 a7 41 9d aa 8a 16 09 50 5f ea 4f 6a 3b d4 80 66 85 6c d7 49 cd 65 bb 10 dd 20 80 e7 2d d8 8d af 42 04 95 8d ec 8a 9d Data Ascii: JvW^?.ghySY8yj9[q79.P6=79.nV\\Nens=\|3 _r\|kJyQN'~+;\UidU>[9,60Pk]h(WTa3\|op*{:@AP_Oj;flIe -B
2025-01-06 08:42:01 UTC	1369	IN	Data Raw: 49 c3 67 73 38 e1 47 c2 1f 0f 3e 4e c5 bb 99 f8 53 89 8f b3 f1 6e 2e fe dc 2b 05 a7 e4 91 fa cf 1c 5d 04 94 56 5e 59 a4 13 45 a6 c7 36 95 7d ad dd 39 d8 5d 31 65 98 8d 6b a5 a5 5c c0 d6 6d d7 74 ca cb 5a b9 44 bd 80 ae 99 38 03 4e d2 88 cf 7b 80 7b 81 88 ea 66 51 d9 84 2a b1 a4 8c 6b 25 6d fc 7f d0 8b de 59 b2 c0 e4 1b 4c 95 ef 8f 3d 58 49 67 6f ec a7 aa cb 46 67 fd 82 7e 62 e9 41 54 1b a7 e4 a3 fe b5 0e 54 80 08 48 f9 29 c5 f8 b4 0a 9f ce 4f 4a f0 37 7c 95 15 4d f0 0c 0f 7e 30 3f 39 06 53 d2 bc e5 a9 ce de f6 51 e6 13 6f 1c 0c 74 8f 65 54 93 c0 e8 38 1b 91 fc 8d c5 34 3a 17 80 40 2e 3a 50 72 8f d5 fc e8 7f 31 6e 86 66 9b 33 a6 e2 bc eb 15 ea 2f 21 13 de d3 32 2f 5f 2b 7a 3a 82 06 30 73 a0 8e 9c 37 a9 55 57 6a cb c0 48 f3 9c cf 01 64 08 7b 8f 03 fe f1 ea Data Ascii: Igs8G>NSn.+]V^YE6}9]1ek\mtZD8N{{fQ*k%mYL=XIgoFg~bATTH)OJ7\|M~0?9SQoteT84:@.:Pr1nf3/!2/_+z:0s7UWjHd{
2025-01-06 08:42:01 UTC	1369	IN	Data Raw: d7 c2 01 c4 42 01 24 fa 51 1e e2 1b fd d8 87 80 57 d1 de d2 26 19 03 08 0c 74 2a cd 68 a3 db ac 5a c6 03 0c c9 0e b3 bb 34 2d bc 65 f7 bd 6e 5c ed 67 4b 13 f3 c3 e4 6e 8b 6a c9 e8 96 35 ea f3 02 03 7b 21 6d ab 00 54 fb cc 90 52 b5 ce ae 18 a2 0b 2e 6b 52 30 60 08 da 38 bc dc 17 51 b5 34 2f 35 0a e3 8d f0 7a a1 05 6a 94 1b f3 1a bf 7f 0b d9 43 d1 56 b8 62 1d 42 e5 b8 f5 68 4b 89 ca 18 f6 f2 26 f2 51 93 f8 7e 8f 8d 6c 1e b7 cd 5e 40 f1 d0 b6 a3 66 56 63 51 43 f6 32 d3 82 ec 64 4f 44 5c f1 c1 31 cd 52 5e cb e3 7b dd b3 35 79 e3 cf d9 be 6c 52 cc 97 4d 42 5f 36 07 5b f9 70 82 2f 9b 66 97 c1 2d 47 3c a8 a5 83 34 1d 8a 3a e1 20 a1 cc 3a 61 fe db c2 43 a5 e9 a2 41 85 34 49 a9 49 6d 2d d4 1a 5a b5 d1 b9 4c 69 29 da b1 56 e8 87 54 2b 5c 4c 0c 70 13 ea 75 cf 6a 95 Data Ascii: B$QW&t*hZ4-en\gKnj5{!mTR.kR0`8Q4/5zjCVbBhK&Q~l^@fVcQC2dOD\1R^{5ylRMB_6[p/f-G<4: :aCA4IIm-ZLi)VT+\Lpuj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49769	104.16.149.130	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:42:10 UTC	103	OUT	GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1 Host: wcdownloadercdn.lavasoft.com
2025-01-06 08:42:10 UTC	380	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:42:10 GMT Content-Type: application/zip Content-Length: 10494317 Connection: close ETag: "3718275022" Last-Modified: Wed, 15 May 2024 10:29:47 GMT CF-Cache-Status: HIT Age: 713 Expires: Mon, 06 Jan 2025 12:42:10 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8fda69c58c84c346-EWR
2025-01-06 08:42:10 UTC	989	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 d3 25 ae 58 c9 f2 0a dc 46 46 03 00 98 24 07 00 13 00 00 00 41 70 70 6c 69 63 61 74 69 6f 6e 2f 37 7a 61 2e 65 78 65 ec bd 79 78 54 45 d6 38 7c 7b 49 d2 59 48 27 40 43 58 c4 56 5b 8d 84 25 43 50 93 34 68 5f d2 4d 6e 43 47 40 44 51 a3 a0 68 0b ae 18 fa 86 20 8b 60 27 be e9 5c 5b 1d c5 19 75 1c c7 79 67 9c cf 19 97 51 47 59 5c bb 13 c8 c2 be b8 b0 8c 8a 7b 85 16 64 91 10 b6 dc ef 9c 53 b7 b7 10 a2 cf f7 fc 7e ff 7d 79 9e f4 dd aa 4e 9d 3a 75 ea d4 a9 53 a7 4e 55 dc f4 a4 60 10 04 c1 08 ff aa 2a 08 6b 04 fe e7 10 7e fd 8f c1 7f f6 f9 ef 65 0b ef a4 6f be 60 8d ce b3 f9 82 eb e6 ce 5b 60 9d 5f f5 c0 5d 55 b7 dd 67 9d 73 db fd f7 3f e0 b3 de 7e a7 b5 4a be df 3a ef 7e ab 73 ca 74 eb 7d 0f dc 71 e7 a8 3e 7d 32 6c 1a 8c f3 87 dd dd Data Ascii: PK%XFF$Application/7za.exeyxTE8\|{IYH'@CXV[%CP4h_MnCG@DQh `'\[uygQGY\{dS~}yN:uSNU`*k~eo`[`_]Ugs?~J:~st}q>}2l
2025-01-06 08:42:10 UTC	1369	IN	Data Raw: 23 7a 68 16 65 1b d6 f6 c2 2b 0c 82 7f 89 ad 50 f0 0d c7 24 f9 1c 18 0a 38 68 10 2c ec c3 6c ed 56 62 6f c3 6d fb fd 54 69 fc f2 b7 f8 97 67 a3 b7 c5 2c 88 25 fb d7 cd 25 ee 8b b7 51 b0 a2 98 0d de 1e 6d 9f 4d 67 b5 71 b0 42 62 27 b7 f5 f6 3d 9f ed e9 e5 bb 12 c4 aa 32 33 2f 1d 93 38 81 1f ad dd fa ae 14 6b b7 0a e5 90 47 f9 46 52 0e 17 ed 2d b9 c9 64 ae 3d 4f 8f b4 d7 7b fd c5 23 cd 75 39 f0 a0 34 69 e4 73 06 ef 51 95 88 d3 be b1 fa 41 e8 f4 6e 65 a0 72 aa 78 b0 af 9f 84 dd 51 52 43 c5 79 f2 71 85 a7 14 ed 67 96 95 04 cb 75 a2 dd 69 33 2d cc 77 2b 59 36 e0 4b 3d db d1 4f 10 4a 9b 7c d9 ca fa 28 48 e5 e7 48 8e 96 29 92 a6 dd a8 eb dd fe 96 3c fb 6b b6 57 e0 a1 ea 8f 4e 7b 64 e9 40 29 78 8d 55 0a 5a 76 6f 33 0a 6c df 00 41 18 13 6a af 86 51 46 0c ce 80 ae Data Ascii: #zhe+P$8h,lVbomTig,%%QmMgqBb'=23/8kGFR-d=O{#u94isQAnerxQRCyqgui3-w+Y6K=OJ\|(HH)<kWN{d@)xUZvo3lAjQF
2025-01-06 08:42:10 UTC	1369	IN	Data Raw: 01 92 a9 81 72 98 19 0c 9d 00 5c 03 59 ae 80 c1 ad 64 96 c9 37 92 0b a1 2b 53 50 08 39 6d 33 71 74 cb 26 71 d8 ca fe 60 e1 63 1b ca a3 2d ac 76 04 f5 84 c2 59 b7 26 4b 94 c4 3e 33 93 0d 4e 11 12 f5 5e f1 3a 69 c5 4f cb b1 9e d1 01 44 54 18 2a 3b f0 38 97 b4 6f ae b0 ce 65 83 7c 28 66 1d a5 2d 72 4a 3b 33 e0 10 ad 69 80 73 d9 25 f7 c2 14 92 3e 6c c5 0f 2b 96 d8 f2 f7 a9 ea c3 55 29 ed 1f 1b a2 aa ed 97 a0 d7 3c b9 e2 cc 9b 30 01 35 d7 4e 00 96 5a 71 e6 2d ba bf 42 c7 93 cc 64 8b fb 90 d4 01 55 15 74 a2 3b aa 73 51 ae e2 fb bf e0 e0 8e af 3d c1 c7 6c ad a4 12 81 d0 bd 0e 68 41 a5 33 ad f4 21 38 aa cf 64 25 c6 98 7a 39 0a 6f db ed 80 03 48 f8 56 52 0d 00 8a 4f 4b 98 13 4f 98 42 09 fb 6a c8 ce 65 97 dd 23 08 1e a5 d2 36 53 cb 37 a1 7e 5c 9e 02 63 a7 dd 97 a1 Data Ascii: r\Yd7+SP9m3qt&q`c-vY&K>3N^:iODT*;8oe\|(f-rJ;3is%>l+U)<05NZq-BdUt;sQ=lhA3!8d%z9oHVROKOBje#6S7~\c
2025-01-06 08:42:10 UTC	1369	IN	Data Raw: ef f8 41 c2 42 a3 d7 df 68 f5 06 72 71 34 32 af ce f5 d6 ed 90 bf 6b da 14 d5 c7 78 e3 79 94 af 61 b4 18 6a f3 2a 4b 05 34 e4 a2 44 f7 da bf f2 4d f3 fa 4f dd 56 95 0b bf 0f 2d 4c 09 2e d8 17 01 4d f2 d4 c3 0b 53 bc ca d1 48 96 79 f5 46 d5 e2 f8 00 2b 71 c8 eb 57 6f ab 1a 06 bf 0f 2d 4c f5 fa 7f b6 46 fa c2 fd c3 d5 90 66 ab 6a 19 4a 69 3a bd f6 e3 72 5f 6f dd 5e 79 25 ef 79 9a 5c 87 5e 79 78 13 e8 fe e9 91 e1 2e a8 a0 1b d0 04 fd 94 e3 9e 02 3a 74 c8 1a 14 3f 1e 37 68 a1 61 79 d8 6a 5e d5 06 b5 0d cb 59 0d 19 a0 1c d7 b6 c9 9b df d4 01 00 ac 6f 16 52 2e 4f e2 a3 2e 0c c9 40 1a bb 0e 2a 15 f2 fd 00 09 20 19 96 b1 dd d5 a0 77 36 64 b8 21 95 da e8 2a 0d fb 2e c4 a2 00 78 aa 18 94 ac 30 e7 68 68 15 79 69 46 98 0d 59 c5 d2 36 d9 04 70 e5 d6 68 31 08 03 80 67 Data Ascii: ABhrq42kxyajK4DMOV-L.MSHyF+qWo-LFfjJi:r_o^y%y\^yx.:t?7hayj^YoR.O.@ w6d!*.x0hhyiFY6ph1g
2025-01-06 08:42:10 UTC	1369	IN	Data Raw: 5e b3 d1 64 1a 2d 78 47 82 fd 0b 2a 94 76 04 3e 17 80 13 64 ad b6 9f e1 c4 cb 0f 80 9d 41 17 cc c6 b3 ec c0 47 6e e5 53 36 1f 5e f1 02 f2 63 2b 09 bc 1f 89 8a c3 54 a1 98 9c ca 04 a8 76 5f 9c 14 3a 6d e4 e2 11 80 19 11 ab 51 a3 53 8f c2 84 be 87 cb ef 6d 5e b1 c4 14 f0 d8 1c 4e a5 cd 67 4e 68 8e 12 93 fc 0b 2d 91 56 28 ad 31 a8 1b d9 a8 24 48 67 8d 1f 38 68 b0 65 87 7a 18 3f 34 8e 8c 8e 20 b1 3e 6d 5e b5 e7 3d 6e 6d 3e c1 6e 3b a3 8d 00 2d 5e 31 30 c4 2b b6 94 e9 f9 54 64 16 95 a5 c9 ae bd dc d8 ea 2d 19 0c 3a 3a c8 0f 40 58 6d 22 f6 f9 05 9a fb 3c 9a 65 65 3b 83 65 3a 20 1a 32 8e 7d 25 f6 bf e6 38 ff 27 c3 29 1e 1c 13 81 4d 5c 04 ee 64 bb 4e ab 6a 1d 34 c5 30 df 40 b7 b2 51 d9 69 5e 95 26 81 64 0e 90 6e 28 a9 1b e4 83 80 9c f1 66 21 19 6e b7 f1 ec e9 d3 Data Ascii: ^d-xG*v>dAGnS6^c+Tv_:mQSm^NgNh-V(1$Hg8hez?4 >m^=nm>n;-^10+Td-::@Xm"<ee;e: 2}%8')M\dNj40@Qi^&dn(f!n
2025-01-06 08:42:10 UTC	1369	IN	Data Raw: 41 a0 2e a4 b0 9a 0b 5d ca 3a 34 0d 6f 61 af 9f 46 fd 0d 6a 8a 0f 87 40 a7 15 0d 07 ec f7 9b aa 36 24 29 ac 09 e3 7b 31 88 d0 16 91 34 45 51 61 a4 22 3a 95 49 d0 72 47 a0 1a d0 c4 e6 da 97 04 5c 3a d4 2b 9b 8b 76 80 46 cb fd 9a d0 c8 2f d0 22 40 fe 3f 10 49 a5 53 b6 a9 96 fe 74 ef ab 82 29 d2 8a a9 7c 8a 34 1b 52 ce f6 5d 63 14 d8 a7 8f 01 e7 d8 cb b2 aa 33 10 d3 8d ec 2f 47 b0 25 0c 4e 18 c5 3c 4a 6a d1 0e 65 73 60 89 2d 1f 57 db ad aa 65 c7 cb 08 49 c6 c9 d6 95 67 41 52 10 52 a0 cc 84 d3 3b 50 6a 8d 12 69 a8 c5 bc 66 ce fa 24 9f 42 8f f2 5f 6e 7f d6 79 94 bf db b0 2a ae a2 0e 67 e0 41 93 b3 be d0 55 3f d6 86 75 05 ed c6 a3 ec 77 d9 b7 50 75 33 75 54 dd 8a c0 82 4e f8 3f e4 0a 2c 60 80 dc 56 b8 df a7 5a 26 00 5e a2 bd 59 39 24 8f 56 2d 17 f3 07 73 ed 2e Data Ascii: A.]:4oaFj@6$){14EQa":IrG\:+vF/"@?ISt)\|4R]c3/G%N<Jjes`-WeIgARR;Pjif$B_ny*gAU?uwPu3uTN?,`VZ&^Y9$V-s.
2025-01-06 08:42:10 UTC	1369	IN	Data Raw: 3a d4 cb 00 19 f3 ca 50 fb 03 70 fb a6 ae 1d 5d d8 34 bd 9e e6 03 1b d0 6d 20 38 74 02 a8 63 92 7d 0f fa fe 95 e1 9c a5 d2 97 0d bf a3 7d 26 c9 0e 44 d8 25 33 50 5c dc 4a 9b a7 a0 d1 bd bd 93 2d 26 f3 0b f0 dd 56 ae 3c b5 ff e3 20 1a 3d 7b 81 3b da eb 5f dc 55 09 5d 1b 2e a3 65 23 70 70 d7 6f 2f 2e ab 7b 71 57 1e e4 36 d6 e9 49 56 8a 3d b1 8e fe e3 61 cc b0 d5 19 74 c0 3c c7 30 29 d8 df c1 fe 8b c6 f3 84 05 16 65 9a a9 08 cd b2 30 9f 49 f7 fa 4b 86 fb fa c1 ef d5 be 3e 2a ad 5b da 1b ab f6 f3 15 59 18 10 8a 76 78 ed 8d be 7c af 7f 91 be 54 be c0 5b 32 cd 28 0f f1 8e bf 4d a8 4a f5 8e 7f 48 a8 06 69 26 0a 7c cd 92 4c 75 0d 8d f1 39 d7 f2 45 b9 82 af 70 f9 a2 be 82 6f f8 f2 45 fd 04 9f ed 7d 4c 52 72 a3 09 f4 27 45 07 83 fd 88 bf 62 5b 9a c8 b5 23 ff 45 d2 Data Ascii: :Pp]4m 8tc}}&D%3P\J-&V< ={;_U].e#ppo/.{qW6IV=at<0)e0IK>*[Yvx\|T[2(MJHi&\|Lu9EpoE}LRr'Eb[#E
2025-01-06 08:42:10 UTC	1369	IN	Data Raw: df a9 ea 93 4a 93 12 b1 9f aa be 97 76 1e 57 08 5e d1 3f 2e ab d2 67 a2 eb 68 79 b2 53 59 af 99 38 79 9e 6a d0 1d 39 5b bc f6 09 d2 9a cf d4 71 37 82 39 b6 d7 2e 15 f5 50 03 36 3d 37 01 1d 39 a5 17 82 2e 1d 6e 56 5c a7 b7 ff 5c f5 c7 82 4e 65 1b 6e 73 c6 3d 7c e4 33 89 90 87 c6 20 5f db 0d 72 7c 17 df 6b df d1 4a b6 b6 d3 e1 79 80 ab f9 51 4e fe 84 c8 27 f5 d0 10 c9 7e 94 1b fe d0 db 1e bb e5 c4 2b 3b 93 5c 96 cf fa fe 55 fc bb b3 de 69 cb d3 64 14 b5 55 3e b6 95 5b 39 2c 36 30 50 cd 80 6b 5d 0d ad 1e a5 b1 68 07 bb ec 04 17 c1 cd a9 02 28 a4 57 e2 16 cb 54 9d b3 61 33 e8 7c 6f eb 70 2a 86 7b b1 1c 0d 0c 3a a8 ce fc e8 40 f2 eb 07 1a e6 e0 a7 41 9d aa 8a 16 09 50 5f ea 4f 6a 3b d4 80 66 85 6c d7 49 cd 65 bb 10 dd 20 80 e7 2d d8 8d af 42 04 95 8d ec 8a 9d Data Ascii: JvW^?.ghySY8yj9[q79.P6=79.nV\\Nens=\|3 _r\|kJyQN'~+;\UidU>[9,60Pk]h(WTa3\|op*{:@AP_Oj;flIe -B
2025-01-06 08:42:10 UTC	1369	IN	Data Raw: 49 c3 67 73 38 e1 47 c2 1f 0f 3e 4e c5 bb 99 f8 53 89 8f b3 f1 6e 2e fe dc 2b 05 a7 e4 91 fa cf 1c 5d 04 94 56 5e 59 a4 13 45 a6 c7 36 95 7d ad dd 39 d8 5d 31 65 98 8d 6b a5 a5 5c c0 d6 6d d7 74 ca cb 5a b9 44 bd 80 ae 99 38 03 4e d2 88 cf 7b 80 7b 81 88 ea 66 51 d9 84 2a b1 a4 8c 6b 25 6d fc 7f d0 8b de 59 b2 c0 e4 1b 4c 95 ef 8f 3d 58 49 67 6f ec a7 aa cb 46 67 fd 82 7e 62 e9 41 54 1b a7 e4 a3 fe b5 0e 54 80 08 48 f9 29 c5 f8 b4 0a 9f ce 4f 4a f0 37 7c 95 15 4d f0 0c 0f 7e 30 3f 39 06 53 d2 bc e5 a9 ce de f6 51 e6 13 6f 1c 0c 74 8f 65 54 93 c0 e8 38 1b 91 fc 8d c5 34 3a 17 80 40 2e 3a 50 72 8f d5 fc e8 7f 31 6e 86 66 9b 33 a6 e2 bc eb 15 ea 2f 21 13 de d3 32 2f 5f 2b 7a 3a 82 06 30 73 a0 8e 9c 37 a9 55 57 6a cb c0 48 f3 9c cf 01 64 08 7b 8f 03 fe f1 ea Data Ascii: Igs8G>NSn.+]V^YE6}9]1ek\mtZD8N{{fQ*k%mYL=XIgoFg~bATTH)OJ7\|M~0?9SQoteT84:@.:Pr1nf3/!2/_+z:0s7UWjHd{
2025-01-06 08:42:10 UTC	1369	IN	Data Raw: d7 c2 01 c4 42 01 24 fa 51 1e e2 1b fd d8 87 80 57 d1 de d2 26 19 03 08 0c 74 2a cd 68 a3 db ac 5a c6 03 0c c9 0e b3 bb 34 2d bc 65 f7 bd 6e 5c ed 67 4b 13 f3 c3 e4 6e 8b 6a c9 e8 96 35 ea f3 02 03 7b 21 6d ab 00 54 fb cc 90 52 b5 ce ae 18 a2 0b 2e 6b 52 30 60 08 da 38 bc dc 17 51 b5 34 2f 35 0a e3 8d f0 7a a1 05 6a 94 1b f3 1a bf 7f 0b d9 43 d1 56 b8 62 1d 42 e5 b8 f5 68 4b 89 ca 18 f6 f2 26 f2 51 93 f8 7e 8f 8d 6c 1e b7 cd 5e 40 f1 d0 b6 a3 66 56 63 51 43 f6 32 d3 82 ec 64 4f 44 5c f1 c1 31 cd 52 5e cb e3 7b dd b3 35 79 e3 cf d9 be 6c 52 cc 97 4d 42 5f 36 07 5b f9 70 82 2f 9b 66 97 c1 2d 47 3c a8 a5 83 34 1d 8a 3a e1 20 a1 cc 3a 61 fe db c2 43 a5 e9 a2 41 85 34 49 a9 49 6d 2d d4 1a 5a b5 d1 b9 4c 69 29 da b1 56 e8 87 54 2b 5c 4c 0c 70 13 ea 75 cf 6a 95 Data Ascii: B$QW&t*hZ4-en\gKnj5{!mTR.kR0`8Q4/5zjCVbBhK&Q~l^@fVcQC2dOD\1R^{5ylRMB_6[p/f-G<4: :aCA4IIm-ZLi)VT+\Lpuj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49770	104.16.149.130	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:42:18 UTC	103	OUT	GET /13.900.0.1080/WebCompanion-13.900.0.1080-prod.zip HTTP/1.1 Host: wcdownloadercdn.lavasoft.com
2025-01-06 08:42:18 UTC	380	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:42:18 GMT Content-Type: application/zip Content-Length: 10494317 Connection: close ETag: "3718275022" Last-Modified: Wed, 15 May 2024 10:29:47 GMT CF-Cache-Status: HIT Age: 721 Expires: Mon, 06 Jan 2025 12:42:18 GMT Cache-Control: public, max-age=14400 Accept-Ranges: bytes Server: cloudflare CF-RAY: 8fda69f75b3e4261-EWR
2025-01-06 08:42:18 UTC	989	IN	Data Raw: 50 4b 03 04 14 00 00 00 08 00 d3 25 ae 58 c9 f2 0a dc 46 46 03 00 98 24 07 00 13 00 00 00 41 70 70 6c 69 63 61 74 69 6f 6e 2f 37 7a 61 2e 65 78 65 ec bd 79 78 54 45 d6 38 7c 7b 49 d2 59 48 27 40 43 58 c4 56 5b 8d 84 25 43 50 93 34 68 5f d2 4d 6e 43 47 40 44 51 a3 a0 68 0b ae 18 fa 86 20 8b 60 27 be e9 5c 5b 1d c5 19 75 1c c7 79 67 9c cf 19 97 51 47 59 5c bb 13 c8 c2 be b8 b0 8c 8a 7b 85 16 64 91 10 b6 dc ef 9c 53 b7 b7 10 a2 cf f7 fc 7e ff 7d 79 9e f4 dd aa 4e 9d 3a 75 ea d4 a9 53 a7 4e 55 dc f4 a4 60 10 04 c1 08 ff aa 2a 08 6b 04 fe e7 10 7e fd 8f c1 7f f6 f9 ef 65 0b ef a4 6f be 60 8d ce b3 f9 82 eb e6 ce 5b 60 9d 5f f5 c0 5d 55 b7 dd 67 9d 73 db fd f7 3f e0 b3 de 7e a7 b5 4a be df 3a ef 7e ab 73 ca 74 eb 7d 0f dc 71 e7 a8 3e 7d 32 6c 1a 8c f3 87 dd dd Data Ascii: PK%XFF$Application/7za.exeyxTE8\|{IYH'@CXV[%CP4h_MnCG@DQh `'\[uygQGY\{dS~}yN:uSNU`*k~eo`[`_]Ugs?~J:~st}q>}2l
2025-01-06 08:42:18 UTC	1369	IN	Data Raw: 23 7a 68 16 65 1b d6 f6 c2 2b 0c 82 7f 89 ad 50 f0 0d c7 24 f9 1c 18 0a 38 68 10 2c ec c3 6c ed 56 62 6f c3 6d fb fd 54 69 fc f2 b7 f8 97 67 a3 b7 c5 2c 88 25 fb d7 cd 25 ee 8b b7 51 b0 a2 98 0d de 1e 6d 9f 4d 67 b5 71 b0 42 62 27 b7 f5 f6 3d 9f ed e9 e5 bb 12 c4 aa 32 33 2f 1d 93 38 81 1f ad dd fa ae 14 6b b7 0a e5 90 47 f9 46 52 0e 17 ed 2d b9 c9 64 ae 3d 4f 8f b4 d7 7b fd c5 23 cd 75 39 f0 a0 34 69 e4 73 06 ef 51 95 88 d3 be b1 fa 41 e8 f4 6e 65 a0 72 aa 78 b0 af 9f 84 dd 51 52 43 c5 79 f2 71 85 a7 14 ed 67 96 95 04 cb 75 a2 dd 69 33 2d cc 77 2b 59 36 e0 4b 3d db d1 4f 10 4a 9b 7c d9 ca fa 28 48 e5 e7 48 8e 96 29 92 a6 dd a8 eb dd fe 96 3c fb 6b b6 57 e0 a1 ea 8f 4e 7b 64 e9 40 29 78 8d 55 0a 5a 76 6f 33 0a 6c df 00 41 18 13 6a af 86 51 46 0c ce 80 ae Data Ascii: #zhe+P$8h,lVbomTig,%%QmMgqBb'=23/8kGFR-d=O{#u94isQAnerxQRCyqgui3-w+Y6K=OJ\|(HH)<kWN{d@)xUZvo3lAjQF
2025-01-06 08:42:18 UTC	1369	IN	Data Raw: 01 92 a9 81 72 98 19 0c 9d 00 5c 03 59 ae 80 c1 ad 64 96 c9 37 92 0b a1 2b 53 50 08 39 6d 33 71 74 cb 26 71 d8 ca fe 60 e1 63 1b ca a3 2d ac 76 04 f5 84 c2 59 b7 26 4b 94 c4 3e 33 93 0d 4e 11 12 f5 5e f1 3a 69 c5 4f cb b1 9e d1 01 44 54 18 2a 3b f0 38 97 b4 6f ae b0 ce 65 83 7c 28 66 1d a5 2d 72 4a 3b 33 e0 10 ad 69 80 73 d9 25 f7 c2 14 92 3e 6c c5 0f 2b 96 d8 f2 f7 a9 ea c3 55 29 ed 1f 1b a2 aa ed 97 a0 d7 3c b9 e2 cc 9b 30 01 35 d7 4e 00 96 5a 71 e6 2d ba bf 42 c7 93 cc 64 8b fb 90 d4 01 55 15 74 a2 3b aa 73 51 ae e2 fb bf e0 e0 8e af 3d c1 c7 6c ad a4 12 81 d0 bd 0e 68 41 a5 33 ad f4 21 38 aa cf 64 25 c6 98 7a 39 0a 6f db ed 80 03 48 f8 56 52 0d 00 8a 4f 4b 98 13 4f 98 42 09 fb 6a c8 ce 65 97 dd 23 08 1e a5 d2 36 53 cb 37 a1 7e 5c 9e 02 63 a7 dd 97 a1 Data Ascii: r\Yd7+SP9m3qt&q`c-vY&K>3N^:iODT*;8oe\|(f-rJ;3is%>l+U)<05NZq-BdUt;sQ=lhA3!8d%z9oHVROKOBje#6S7~\c
2025-01-06 08:42:18 UTC	1369	IN	Data Raw: ef f8 41 c2 42 a3 d7 df 68 f5 06 72 71 34 32 af ce f5 d6 ed 90 bf 6b da 14 d5 c7 78 e3 79 94 af 61 b4 18 6a f3 2a 4b 05 34 e4 a2 44 f7 da bf f2 4d f3 fa 4f dd 56 95 0b bf 0f 2d 4c 09 2e d8 17 01 4d f2 d4 c3 0b 53 bc ca d1 48 96 79 f5 46 d5 e2 f8 00 2b 71 c8 eb 57 6f ab 1a 06 bf 0f 2d 4c f5 fa 7f b6 46 fa c2 fd c3 d5 90 66 ab 6a 19 4a 69 3a bd f6 e3 72 5f 6f dd 5e 79 25 ef 79 9a 5c 87 5e 79 78 13 e8 fe e9 91 e1 2e a8 a0 1b d0 04 fd 94 e3 9e 02 3a 74 c8 1a 14 3f 1e 37 68 a1 61 79 d8 6a 5e d5 06 b5 0d cb 59 0d 19 a0 1c d7 b6 c9 9b df d4 01 00 ac 6f 16 52 2e 4f e2 a3 2e 0c c9 40 1a bb 0e 2a 15 f2 fd 00 09 20 19 96 b1 dd d5 a0 77 36 64 b8 21 95 da e8 2a 0d fb 2e c4 a2 00 78 aa 18 94 ac 30 e7 68 68 15 79 69 46 98 0d 59 c5 d2 36 d9 04 70 e5 d6 68 31 08 03 80 67 Data Ascii: ABhrq42kxyajK4DMOV-L.MSHyF+qWo-LFfjJi:r_o^y%y\^yx.:t?7hayj^YoR.O.@ w6d!*.x0hhyiFY6ph1g
2025-01-06 08:42:18 UTC	1369	IN	Data Raw: 5e b3 d1 64 1a 2d 78 47 82 fd 0b 2a 94 76 04 3e 17 80 13 64 ad b6 9f e1 c4 cb 0f 80 9d 41 17 cc c6 b3 ec c0 47 6e e5 53 36 1f 5e f1 02 f2 63 2b 09 bc 1f 89 8a c3 54 a1 98 9c ca 04 a8 76 5f 9c 14 3a 6d e4 e2 11 80 19 11 ab 51 a3 53 8f c2 84 be 87 cb ef 6d 5e b1 c4 14 f0 d8 1c 4e a5 cd 67 4e 68 8e 12 93 fc 0b 2d 91 56 28 ad 31 a8 1b d9 a8 24 48 67 8d 1f 38 68 b0 65 87 7a 18 3f 34 8e 8c 8e 20 b1 3e 6d 5e b5 e7 3d 6e 6d 3e c1 6e 3b a3 8d 00 2d 5e 31 30 c4 2b b6 94 e9 f9 54 64 16 95 a5 c9 ae bd dc d8 ea 2d 19 0c 3a 3a c8 0f 40 58 6d 22 f6 f9 05 9a fb 3c 9a 65 65 3b 83 65 3a 20 1a 32 8e 7d 25 f6 bf e6 38 ff 27 c3 29 1e 1c 13 81 4d 5c 04 ee 64 bb 4e ab 6a 1d 34 c5 30 df 40 b7 b2 51 d9 69 5e 95 26 81 64 0e 90 6e 28 a9 1b e4 83 80 9c f1 66 21 19 6e b7 f1 ec e9 d3 Data Ascii: ^d-xG*v>dAGnS6^c+Tv_:mQSm^NgNh-V(1$Hg8hez?4 >m^=nm>n;-^10+Td-::@Xm"<ee;e: 2}%8')M\dNj40@Qi^&dn(f!n
2025-01-06 08:42:18 UTC	1369	IN	Data Raw: 41 a0 2e a4 b0 9a 0b 5d ca 3a 34 0d 6f 61 af 9f 46 fd 0d 6a 8a 0f 87 40 a7 15 0d 07 ec f7 9b aa 36 24 29 ac 09 e3 7b 31 88 d0 16 91 34 45 51 61 a4 22 3a 95 49 d0 72 47 a0 1a d0 c4 e6 da 97 04 5c 3a d4 2b 9b 8b 76 80 46 cb fd 9a d0 c8 2f d0 22 40 fe 3f 10 49 a5 53 b6 a9 96 fe 74 ef ab 82 29 d2 8a a9 7c 8a 34 1b 52 ce f6 5d 63 14 d8 a7 8f 01 e7 d8 cb b2 aa 33 10 d3 8d ec 2f 47 b0 25 0c 4e 18 c5 3c 4a 6a d1 0e 65 73 60 89 2d 1f 57 db ad aa 65 c7 cb 08 49 c6 c9 d6 95 67 41 52 10 52 a0 cc 84 d3 3b 50 6a 8d 12 69 a8 c5 bc 66 ce fa 24 9f 42 8f f2 5f 6e 7f d6 79 94 bf db b0 2a ae a2 0e 67 e0 41 93 b3 be d0 55 3f d6 86 75 05 ed c6 a3 ec 77 d9 b7 50 75 33 75 54 dd 8a c0 82 4e f8 3f e4 0a 2c 60 80 dc 56 b8 df a7 5a 26 00 5e a2 bd 59 39 24 8f 56 2d 17 f3 07 73 ed 2e Data Ascii: A.]:4oaFj@6$){14EQa":IrG\:+vF/"@?ISt)\|4R]c3/G%N<Jjes`-WeIgARR;Pjif$B_ny*gAU?uwPu3uTN?,`VZ&^Y9$V-s.
2025-01-06 08:42:18 UTC	1369	IN	Data Raw: 3a d4 cb 00 19 f3 ca 50 fb 03 70 fb a6 ae 1d 5d d8 34 bd 9e e6 03 1b d0 6d 20 38 74 02 a8 63 92 7d 0f fa fe 95 e1 9c a5 d2 97 0d bf a3 7d 26 c9 0e 44 d8 25 33 50 5c dc 4a 9b a7 a0 d1 bd bd 93 2d 26 f3 0b f0 dd 56 ae 3c b5 ff e3 20 1a 3d 7b 81 3b da eb 5f dc 55 09 5d 1b 2e a3 65 23 70 70 d7 6f 2f 2e ab 7b 71 57 1e e4 36 d6 e9 49 56 8a 3d b1 8e fe e3 61 cc b0 d5 19 74 c0 3c c7 30 29 d8 df c1 fe 8b c6 f3 84 05 16 65 9a a9 08 cd b2 30 9f 49 f7 fa 4b 86 fb fa c1 ef d5 be 3e 2a ad 5b da 1b ab f6 f3 15 59 18 10 8a 76 78 ed 8d be 7c af 7f 91 be 54 be c0 5b 32 cd 28 0f f1 8e bf 4d a8 4a f5 8e 7f 48 a8 06 69 26 0a 7c cd 92 4c 75 0d 8d f1 39 d7 f2 45 b9 82 af 70 f9 a2 be 82 6f f8 f2 45 fd 04 9f ed 7d 4c 52 72 a3 09 f4 27 45 07 83 fd 88 bf 62 5b 9a c8 b5 23 ff 45 d2 Data Ascii: :Pp]4m 8tc}}&D%3P\J-&V< ={;_U].e#ppo/.{qW6IV=at<0)e0IK>*[Yvx\|T[2(MJHi&\|Lu9EpoE}LRr'Eb[#E
2025-01-06 08:42:18 UTC	1369	IN	Data Raw: df a9 ea 93 4a 93 12 b1 9f aa be 97 76 1e 57 08 5e d1 3f 2e ab d2 67 a2 eb 68 79 b2 53 59 af 99 38 79 9e 6a d0 1d 39 5b bc f6 09 d2 9a cf d4 71 37 82 39 b6 d7 2e 15 f5 50 03 36 3d 37 01 1d 39 a5 17 82 2e 1d 6e 56 5c a7 b7 ff 5c f5 c7 82 4e 65 1b 6e 73 c6 3d 7c e4 33 89 90 87 c6 20 5f db 0d 72 7c 17 df 6b df d1 4a b6 b6 d3 e1 79 80 ab f9 51 4e fe 84 c8 27 f5 d0 10 c9 7e 94 1b fe d0 db 1e bb e5 c4 2b 3b 93 5c 96 cf fa fe 55 fc bb b3 de 69 cb d3 64 14 b5 55 3e b6 95 5b 39 2c 36 30 50 cd 80 6b 5d 0d ad 1e a5 b1 68 07 bb ec 04 17 c1 cd a9 02 28 a4 57 e2 16 cb 54 9d b3 61 33 e8 7c 6f eb 70 2a 86 7b b1 1c 0d 0c 3a a8 ce fc e8 40 f2 eb 07 1a e6 e0 a7 41 9d aa 8a 16 09 50 5f ea 4f 6a 3b d4 80 66 85 6c d7 49 cd 65 bb 10 dd 20 80 e7 2d d8 8d af 42 04 95 8d ec 8a 9d Data Ascii: JvW^?.ghySY8yj9[q79.P6=79.nV\\Nens=\|3 _r\|kJyQN'~+;\UidU>[9,60Pk]h(WTa3\|op*{:@AP_Oj;flIe -B
2025-01-06 08:42:18 UTC	1369	IN	Data Raw: 49 c3 67 73 38 e1 47 c2 1f 0f 3e 4e c5 bb 99 f8 53 89 8f b3 f1 6e 2e fe dc 2b 05 a7 e4 91 fa cf 1c 5d 04 94 56 5e 59 a4 13 45 a6 c7 36 95 7d ad dd 39 d8 5d 31 65 98 8d 6b a5 a5 5c c0 d6 6d d7 74 ca cb 5a b9 44 bd 80 ae 99 38 03 4e d2 88 cf 7b 80 7b 81 88 ea 66 51 d9 84 2a b1 a4 8c 6b 25 6d fc 7f d0 8b de 59 b2 c0 e4 1b 4c 95 ef 8f 3d 58 49 67 6f ec a7 aa cb 46 67 fd 82 7e 62 e9 41 54 1b a7 e4 a3 fe b5 0e 54 80 08 48 f9 29 c5 f8 b4 0a 9f ce 4f 4a f0 37 7c 95 15 4d f0 0c 0f 7e 30 3f 39 06 53 d2 bc e5 a9 ce de f6 51 e6 13 6f 1c 0c 74 8f 65 54 93 c0 e8 38 1b 91 fc 8d c5 34 3a 17 80 40 2e 3a 50 72 8f d5 fc e8 7f 31 6e 86 66 9b 33 a6 e2 bc eb 15 ea 2f 21 13 de d3 32 2f 5f 2b 7a 3a 82 06 30 73 a0 8e 9c 37 a9 55 57 6a cb c0 48 f3 9c cf 01 64 08 7b 8f 03 fe f1 ea Data Ascii: Igs8G>NSn.+]V^YE6}9]1ek\mtZD8N{{fQ*k%mYL=XIgoFg~bATTH)OJ7\|M~0?9SQoteT84:@.:Pr1nf3/!2/_+z:0s7UWjHd{
2025-01-06 08:42:18 UTC	1369	IN	Data Raw: d7 c2 01 c4 42 01 24 fa 51 1e e2 1b fd d8 87 80 57 d1 de d2 26 19 03 08 0c 74 2a cd 68 a3 db ac 5a c6 03 0c c9 0e b3 bb 34 2d bc 65 f7 bd 6e 5c ed 67 4b 13 f3 c3 e4 6e 8b 6a c9 e8 96 35 ea f3 02 03 7b 21 6d ab 00 54 fb cc 90 52 b5 ce ae 18 a2 0b 2e 6b 52 30 60 08 da 38 bc dc 17 51 b5 34 2f 35 0a e3 8d f0 7a a1 05 6a 94 1b f3 1a bf 7f 0b d9 43 d1 56 b8 62 1d 42 e5 b8 f5 68 4b 89 ca 18 f6 f2 26 f2 51 93 f8 7e 8f 8d 6c 1e b7 cd 5e 40 f1 d0 b6 a3 66 56 63 51 43 f6 32 d3 82 ec 64 4f 44 5c f1 c1 31 cd 52 5e cb e3 7b dd b3 35 79 e3 cf d9 be 6c 52 cc 97 4d 42 5f 36 07 5b f9 70 82 2f 9b 66 97 c1 2d 47 3c a8 a5 83 34 1d 8a 3a e1 20 a1 cc 3a 61 fe db c2 43 a5 e9 a2 41 85 34 49 a9 49 6d 2d d4 1a 5a b5 d1 b9 4c 69 29 da b1 56 e8 87 54 2b 5c 4c 0c 70 13 ea 75 cf 6a 95 Data Ascii: B$QW&t*hZ4-en\gKnj5{!mTR.kR0`8Q4/5zjCVbBhK&Q~l^@fVcQC2dOD\1R^{5ylRMB_6[p/f-G<4: :aCA4IIm-ZLi)VT+\Lpuj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49771	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:42:26 UTC	149	OUT	POST /v1/event-stat?Type=ErrorInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 728
2025-01-06 08:42:26 UTC	728	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 0d 0a 20 20 22 4d 61 63 68 69 6e 65 49 64 22 3a 20 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 0d 0a 20 20 22 49 6e 73 74 61 6c 6c 49 64 22 3a 20 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 0d 0a 20 20 22 56 65 72 73 69 6f 6e 22 3a 20 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 0d 0a 20 20 22 4f 73 56 65 72 73 69 6f 6e 22 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 0d 0a 20 20 22 4f 73 42 69 74 22 3a 20 22 36 34 22 2c 0d 0a 20 20 22 50 61 72 74 6e 65 72 49 64 22 3a 20 22 49 4e 32 34 30 34 30 32 22 2c 0d 0a 20 20 22 43 61 6d 70 61 69 67 Data Ascii: {"Data": { "MachineId": "fdd42ee1-88e9-3143-7f4f-be2c09611698", "InstallId": "6cf17893-cdb5-4488-afe0-2ac226fa3ae3", "Version": "13.900.0.1080", "OsVersion": "Microsoft Windows 10 Pro", "OsBit": "64", "PartnerId": "IN240402", "Campaig
2025-01-06 08:42:26 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:42:26 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda6a2a7d607d0b-EWR
2025-01-06 08:42:26 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:42:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49772	104.18.26.149	443	5040	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

Timestamp	Bytes transferred	Direction	Data
2025-01-06 08:42:26 UTC	152	OUT	POST /v1/event-stat-wc?Type=ErrorInstall&ProductID=wc&EventVersion=1 HTTP/1.1 Content-Type: application/json Host: flwadw.com Content-Length: 674
2025-01-06 08:42:26 UTC	674	OUT	Data Raw: 7b 22 44 61 74 61 22 3a 20 7b 22 4d 61 63 68 69 6e 65 49 64 22 3a 22 66 64 64 34 32 65 65 31 2d 38 38 65 39 2d 33 31 34 33 2d 37 66 34 66 2d 62 65 32 63 30 39 36 31 31 36 39 38 22 2c 22 49 6e 73 74 61 6c 6c 49 64 22 3a 22 36 63 66 31 37 38 39 33 2d 63 64 62 35 2d 34 34 38 38 2d 61 66 65 30 2d 32 61 63 32 32 36 66 61 33 61 65 33 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 31 33 2e 39 30 30 2e 30 2e 31 30 38 30 22 2c 22 4f 73 56 65 72 73 69 6f 6e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 57 69 6e 64 6f 77 73 20 31 30 20 50 72 6f 22 2c 22 4f 73 42 69 74 22 3a 22 36 34 22 2c 22 50 61 72 74 6e 65 72 49 44 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 50 61 72 74 6e 65 72 49 64 22 3a 22 49 4e 32 34 30 34 30 32 22 2c 22 43 61 6d 70 61 69 67 6e 49 44 22 3a 22 32 31 37 39 34 Data Ascii: {"Data": {"MachineId":"fdd42ee1-88e9-3143-7f4f-be2c09611698","InstallId":"6cf17893-cdb5-4488-afe0-2ac226fa3ae3","Version":"13.900.0.1080","OsVersion":"Microsoft Windows 10 Pro","OsBit":"64","PartnerID":"IN240402","PartnerId":"IN240402","CampaignID":"21794
2025-01-06 08:42:27 UTC	479	IN	HTTP/1.1 200 OK Date: Mon, 06 Jan 2025 08:42:27 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Access-Control-Allow-Origin Access-Control-Expose-Headers: Content-Length,Content-Range CF-Cache-Status: DYNAMIC Server: cloudflare CF-RAY: 8fda6a2e9c2d32dc-EWR
2025-01-06 08:42:27 UTC	35	IN	Data Raw: 31 64 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 45 76 65 6e 74 20 70 65 72 73 69 73 74 65 64 22 7d 0d 0a Data Ascii: 1d{"message":"Event persisted"}
2025-01-06 08:42:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Target ID:	0
Start time:	03:41:32
Start date:	06/01/2025
Path:	C:\Users\user\Desktop\Setup.exe
Wow64 process (32bit):	true
Commandline:	"C:\Users\user\Desktop\Setup.exe"
Imagebase:	0x400000
File size:	545'344 bytes
MD5 hash:	2902E39C85DD5DE70D317957A8DD1683
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	03:41:33
Start date:	06/01/2025
Path:	C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe
Wow64 process (32bit):	true
Commandline:	.\WebCompanion-Installer.exe --savename=Setup.exe --partner=IN240402 --nonadmin --direct --tych --campaign=21794599196 --version=13.900.0.1080
Imagebase:	0x920000
File size:	438'936 bytes
MD5 hash:	A27F9713DB1688D03D2082BFA1827803
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_GenericDownloader_1, Description: Yara detected Generic Downloader, Source: C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe, Author: Joe Security
Antivirus matches:	Detection: 21%, ReversingLabs
Reputation:	moderate
Has exited:	false

Show Windows behavior

Execution Graph

Execution Coverage:	16.4%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	1.8%
Total number of Nodes:	2000
Total number of Limit Nodes:	16

Executed Functions

Function 004148D4 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 81
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetVersion.KERNEL32 ref: 004148FA

Part of subcall function 004157C8: HeapCreate.KERNELBASE(00000000,00001000,00000000,00414932,00000001), ref: 004157D9
Part of subcall function 004157C8: HeapDestroy.KERNEL32 ref: 00415818

GetCommandLineA.KERNEL32 ref: 0041495A
GetStartupInfoA.KERNEL32(?), ref: 00414985
GetModuleHandleA.KERNEL32(00000000,00000000,?,0000000A), ref: 004149A8

Part of subcall function 00414A01: ExitProcess.KERNEL32 ref: 00414A1E

Strings

`&, xrefs: 00414974
@%W, xrefs: 00414960

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Heap$CommandCreateDestroyExitHandleInfoLineModuleProcessStartupVersion
String ID: @%W$`&
API String ID: 2057626494-1721853529
Opcode ID: d0b0bc6d91067fd433c2cc4b1856fc531dfd5f25a3beb9f48f66dbad23e013fe
Instruction ID: fb65514f2d73941f5fb5fe300876562abb5c146ee9b99336205dd39c2cb12ef3
Opcode Fuzzy Hash: d0b0bc6d91067fd433c2cc4b1856fc531dfd5f25a3beb9f48f66dbad23e013fe
Instruction Fuzzy Hash: BD219EB19407159FDB14EFB6DC46AEE7BB8EF44704F10412FF910AB291DB3C89818A58

Function 00405434 Relevance: 3.0, APIs: 2, Instructions: 44
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00405414: FindClose.KERNELBASE(?,000000FF,00405445,000000FF), ref: 0040541F

FindFirstFileW.KERNELBASE(?,?,000000FF), ref: 00405497

Part of subcall function 00403B85: __EH_prolog.LIBCMT ref: 00403B8A

FindFirstFileA.KERNEL32(?,?,000000FF), ref: 00405467

Part of subcall function 0040551C: __EH_prolog.LIBCMT ref: 00405521

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Find$FileFirstH_prolog$Close
String ID:
API String ID: 3335342080-0
Opcode ID: 01ff4a9bc94c78cd279a0d863a54892268cf469c718bfc53d66ce16def007dff
Instruction ID: 44fa9ff84b7e7cb6f1e8d7f9ea47a8a098aa0700a3472251c04f15a334366322
Opcode Fuzzy Hash: 01ff4a9bc94c78cd279a0d863a54892268cf469c718bfc53d66ce16def007dff
Instruction Fuzzy Hash: 33014830401505ABCF20AF64DC456EE7779DF51329F20827AE855672D1D73C9A85CF98

Function 00401014 Relevance: 48.0, APIs: 8, Strings: 19, Instructions: 715
windowsynchronizationCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00401A7B: GetVersionExA.KERNEL32(?), ref: 00401A95

GetCommandLineW.KERNEL32(00000003,00000003,00000003,00000003,?,00000000), ref: 0040108B

Part of subcall function 004038D7: __EH_prolog.LIBCMT ref: 004038DC

Part of subcall function 0040460B: __EH_prolog.LIBCMT ref: 00404610
Part of subcall function 0040460B: GetModuleFileNameA.KERNEL32(00400000,?,00000105,00000000,00000000), ref: 00404649

Part of subcall function 0040237B: __EH_prolog.LIBCMT ref: 00402380

Part of subcall function 00402340: __EH_prolog.LIBCMT ref: 00402345

Part of subcall function 00403DE4: __EH_prolog.LIBCMT ref: 00403DE9

MessageBoxW.USER32(00000000,?,?,00000010), ref: 004015DE
ShellExecuteExA.SHELL32(0000003C,?,00000001,?,?,00000003,?,00000003,00420240,;!@InstallEnd@!,?,00000003,00000000,00000002,00420278,00000003), ref: 004016D5
MessageBoxW.USER32(00000000,?,?,00000024), ref: 004012FF

Part of subcall function 00410EC0: MessageBoxW.USER32(00000000,?,7-Zip,00000010), ref: 00410EC9

Part of subcall function 00402EFE: __EH_prolog.LIBCMT ref: 00402F03

CloseHandle.KERNEL32(?,?,00000000), ref: 004019A8
WaitForSingleObject.KERNEL32(?,000000FF,?,00000000), ref: 004019C7
CloseHandle.KERNEL32(?,?,00000000), ref: 004019CE

Strings

Title, xrefs: 0040120B
RunProgram, xrefs: 0040139A
, xrefs: 004016DB
ExecuteFile, xrefs: 004013DA
Config failed, xrefs: 004011F7
Can't load config info, xrefs: 00401185
Can not load codecs, xrefs: 00401529
;!@Install@!UTF-8!, xrefs: 00401172
Directory, xrefs: 004012A2
Can not open file, xrefs: 004016ED
setup.exe, xrefs: 004017B9
%%T\, xrefs: 00401803
;!@InstallEnd@!, xrefs: 0040116D
D, xrefs: 00401886
ExecuteParameters, xrefs: 0040141A
Can not find setup.exe, xrefs: 004017DB
%%T, xrefs: 00401832
Can not create temp folder archive, xrefs: 004014DD
<, xrefs: 0040166A

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog$Message$CloseHandle$CommandExecuteFileLineModuleNameObjectShellSingleVersionWait
String ID: $%%T$%%T\$;!@Install@!UTF-8!$;!@InstallEnd@!$<$Can not create temp folder archive$Can not find setup.exe$Can not load codecs$Can not open file$Can't load config info$Config failed$D$Directory$ExecuteFile$ExecuteParameters$RunProgram$Title$setup.exe
API String ID: 785510900-2114487665
Opcode ID: 8fd5f8ab937932ae6757a318f5051f0329dcea0d0da6af97c6c1f875a1e9e091
Instruction ID: f92d1a5b025e5f1856d93d01be2b226abe75c3e6546c85d9ed47549f0c040395
Opcode Fuzzy Hash: 8fd5f8ab937932ae6757a318f5051f0329dcea0d0da6af97c6c1f875a1e9e091
Instruction Fuzzy Hash: 485228719002199ACF25EFA5DC82AEDBB75AF04308F1040BFE156721F2DA395B86CF58

Function 0040AB05 Relevance: 14.2, APIs: 9, Instructions: 682
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 0040AB0A

Part of subcall function 0040D5A3: __EH_prolog.LIBCMT ref: 0040D5A8

Part of subcall function 004130E0: InitializeCriticalSection.KERNEL32(?,?,?,00000000,00000000), ref: 0041310E

DeleteCriticalSection.KERNEL32(?), ref: 0040AD3E
DeleteCriticalSection.KERNEL32(?), ref: 0040AFCB
DeleteCriticalSection.KERNEL32(?), ref: 0040B036
DeleteCriticalSection.KERNEL32(?), ref: 0040B093
DeleteCriticalSection.KERNEL32(?), ref: 0040B1A2
DeleteCriticalSection.KERNEL32(?), ref: 0040B1FC
DeleteCriticalSection.KERNEL32(?,?,?,00000004,00000004), ref: 0040B271
DeleteCriticalSection.KERNEL32(?), ref: 0040B303

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalSection$Delete$H_prolog$Initialize
String ID:
API String ID: 3452124646-0
Opcode ID: 53ff4eaa71f930fd4966fc49476664da3d82c19ee4ae63da8a12ea1bfaad2ad0
Instruction ID: 4c9a54a47b38b58bbaef36bcc828af5c6ca02983ed7c574d3216c54edcd042c8
Opcode Fuzzy Hash: 53ff4eaa71f930fd4966fc49476664da3d82c19ee4ae63da8a12ea1bfaad2ad0
Instruction Fuzzy Hash: FC627E7090024ADFDB14DFA5C944BDEBBB4FF14308F1080AEE805B7291DB789A49DB99

Function 004051B7 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 102
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

GetCurrentThreadId.KERNEL32 ref: 004051C5
GetTickCount.KERNEL32 ref: 004051D0
GetCurrentProcessId.KERNEL32(?,00000000,?,?,00405334,?,00000000,?,00000003,00000003,00000000,00000000,00000003,?,00000000), ref: 004051DB
GetTickCount.KERNEL32 ref: 00405240
SetLastError.KERNEL32(000000B7,00000000,?,00000000,?,?,00405334,?,00000000,?,00000003), ref: 00405273
GetLastError.KERNEL32(00000000,?,00000000,?,?,00405334,?,00000000,?,00000003), ref: 00405299

Part of subcall function 004049F4: CreateDirectoryA.KERNEL32(?,00000000,00000000,00000000,?,00000000,?,?,00405334,?,00000000,?,00000003), ref: 00404A13

Strings

d, xrefs: 004052AE
.tmp, xrefs: 00405257

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CountCurrentErrorLastTick$CreateDirectoryProcessThread
String ID: .tmp$d
API String ID: 3074393274-2797371523
Opcode ID: 2fda1539db0041318063c64b288010cc5c4c3aedaa5e381c7d8f696092406eab
Instruction ID: 4fab17955b769304b7d1cf71853489b42ead9ac2cf2e2055059d54e7646dac87
Opcode Fuzzy Hash: 2fda1539db0041318063c64b288010cc5c4c3aedaa5e381c7d8f696092406eab
Instruction Fuzzy Hash: CC31C1326506009BDB10ABA098897EF7760EFA5315F14807FE902BB2D2D77C9842CF99

Function 00404908 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 36
filetimeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetLastError.KERNEL32(00000078,.@,00000000,00402AB0,00000000,?,?,?,?), ref: 00404918
CreateFileW.KERNELBASE(?,40000000,00000003,00000000,00000003,02000000,00000000,?,.@,00000000,00402AB0,00000000,?,?,?,?), ref: 00404934
SetFileTime.KERNELBASE(00000000,00000000,?,?,?,40000000,00000003,00000000,00000003,02000000,00000000,?,.@,00000000,00402AB0,00000000), ref: 0040494B
CloseHandle.KERNEL32(00000000,?,40000000,00000003,00000000,00000003,02000000,00000000,?,.@,00000000,00402AB0,00000000,?,?,?), ref: 00404957

Strings

.@, xrefs: 00404911

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: File$CloseCreateErrorHandleLastTime
String ID: .@
API String ID: 2291555494-2582305824
Opcode ID: 134b82ee1bee937397c61f831c6e8a998fcbb54d8f51f8998ece3d2421389dbd
Instruction ID: b13e78268552c33248838deebc4f257ca571263cc4fefdaa9dfe176c52576776
Opcode Fuzzy Hash: 134b82ee1bee937397c61f831c6e8a998fcbb54d8f51f8998ece3d2421389dbd
Instruction Fuzzy Hash: 66F0E2B12812107BE2201B74BC48F9B6E5CDBCA715F108135B661A21E0C3284D19D7B8

Function 004083AB Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 328
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 004083B0

Strings

Unknown error, xrefs: 00408671, 00408676
X3B, xrefs: 004086A4

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID: Unknown error$X3B
API String ID: 3519838083-1496835351
Opcode ID: 47f253f86f2cbe6f5ea7b7729e7e95f0c02779c145a6591478a86d185b5344b5
Instruction ID: 10ffca09dccd2053a4a89f972bfe6bbc607f2b880b0d523777cfa28ffc571443
Opcode Fuzzy Hash: 47f253f86f2cbe6f5ea7b7729e7e95f0c02779c145a6591478a86d185b5344b5
Instruction Fuzzy Hash: 89D16070900219EFCF05DFA4C984ADEBB74BF48304F14846EE846BB2D1DB78AA45CB95

Function 00405620 Relevance: 4.6, APIs: 3, Instructions: 130
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00405625

Part of subcall function 00405434: FindFirstFileA.KERNEL32(?,?,000000FF), ref: 00405467

GetLastError.KERNEL32(?,?,00000000,?,00000001), ref: 00405653

Part of subcall function 00405414: FindClose.KERNELBASE(?,000000FF,00405445,000000FF), ref: 0040541F

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Find$CloseErrorFileFirstH_prologLast
String ID:
API String ID: 364955512-0
Opcode ID: e39f0d4d85096f3cd882782c1d04852b930387ce9b142e76bb949cb0f7f9728b
Instruction ID: 04b13d9487752735ca5a27f2fc382c225ef0a6c39b2ce108fc8834fd1c85259b
Opcode Fuzzy Hash: e39f0d4d85096f3cd882782c1d04852b930387ce9b142e76bb949cb0f7f9728b
Instruction Fuzzy Hash: F0418E36900519AACF14FBA5D942AEFBB75EF14308F10403AE412772E1DB795E41DEA8

Function 0040280E Relevance: 3.9, APIs: 1, Strings: 1, Instructions: 384
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00402813

Part of subcall function 00402D81: EnterCriticalSection.KERNEL32(?,?,?,00409336), ref: 00402D86
Part of subcall function 00402D81: LeaveCriticalSection.KERNEL32(?,?,?,?,00409336), ref: 00402D90

Strings

.@, xrefs: 00402A17, 00402C0B, 00402C67

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalSection$EnterH_prologLeave
String ID: .@
API String ID: 367238759-2582305824
Opcode ID: 577924c8c0bac586da650f1e85d0a83bbc87ffed532ab8f3eca2ba2db10ea84e
Instruction ID: fb4838387da9abac6519c3a0e173b295c4de01f89ec6b6ed0d4ee3fc8d60aaac
Opcode Fuzzy Hash: 577924c8c0bac586da650f1e85d0a83bbc87ffed532ab8f3eca2ba2db10ea84e
Instruction Fuzzy Hash: F3F1DF70900248DFCF14EFA5C985ADEBBB4AF54308F10807EE446B72E1DB785A85DB19

Function 004030FC Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 134
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00403101

Part of subcall function 00405620: __EH_prolog.LIBCMT ref: 00405625

Part of subcall function 00404A3E: __EH_prolog.LIBCMT ref: 00404A43

Part of subcall function 004092E6: __EH_prolog.LIBCMT ref: 004092EB

Strings

Default, xrefs: 00403213

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID: Default
API String ID: 3519838083-753088835
Opcode ID: 0fc91ddac6c1b16fe72a6cc7b41e2781a7216c9bd00a9ca8bd5645336c638fb0
Instruction ID: 203c82e13c85383a660d5cb73dbb10af46e9aa8c77eacbcc0267a4e11568a844
Opcode Fuzzy Hash: 0fc91ddac6c1b16fe72a6cc7b41e2781a7216c9bd00a9ca8bd5645336c638fb0
Instruction Fuzzy Hash: E4514E75900209EFDB14EFA5D8819EEBBB8FF18308F00456EE556772D1DB38AA06CB14

Function 00404A3E Relevance: 3.2, APIs: 2, Instructions: 166
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 00404A43
GetLastError.KERNEL32(?,?,?,00000000), ref: 00404ACB

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ErrorH_prologLast
String ID:
API String ID: 1057991267-0
Opcode ID: cf2054507fd1ee53753d2eae408e5b803be4a538542d8802e2091fe77905cd97
Instruction ID: 397979b183d08822f23b565ee303c4952bc02ec102e27be1c48eee89bea9c2ad
Opcode Fuzzy Hash: cf2054507fd1ee53753d2eae408e5b803be4a538542d8802e2091fe77905cd97
Instruction Fuzzy Hash: 1E5105719441099ACF10EBA5C942AFEBB75AF91308F11017FE602731E1DB3DAE46CB99

Function 00408755 Relevance: 3.1, APIs: 2, Instructions: 85
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

__EH_prolog.LIBCMT ref: 0040875A
GetLastError.KERNEL32(?,00000000,?,?,00000000,?,?,0040893F,?,?,00000000,004149B4,?,?,?,00000000), ref: 004087E8

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ErrorH_prologLast
String ID:
API String ID: 1057991267-0
Opcode ID: 9241e159634e285d8ed2c067ddd4a586d7e54c47a3761db9d9a9d26607b46551
Instruction ID: 0128b321cd566d1ceb50e896689a501b942dab3b414a73cd3b5e456030195100
Opcode Fuzzy Hash: 9241e159634e285d8ed2c067ddd4a586d7e54c47a3761db9d9a9d26607b46551
Instruction Fuzzy Hash: EE317C719012499FCB10DF95CE849AEBBB0FF44314B24817FE496B7292CB388D40DB69

Function 0041468E Relevance: 3.0, APIs: 2, Instructions: 45
threadCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00416CCC: HeapAlloc.KERNEL32(00000008,?,00000000,00000000,00000001,00415318,00000001,00000074,?,?,00000000,00000001), ref: 00416DC2

CreateThread.KERNELBASE(00000000,00000003,004146F9,00000000,00000000,?), ref: 004146CF
GetLastError.KERNEL32(?,?,?,00413009,00000000,00000000,004032CA,?,00000000,00000000,?,00402FAB,?,00000000,?), ref: 004146D9

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AllocCreateErrorHeapLastThread
String ID:
API String ID: 3580101977-0
Opcode ID: 0374611688ca75c4551dea276e5d424cbadff3ac534dbe24837146ca9d20d13e
Instruction ID: 928dc59a5e1d7113ba94efa25a55b36d47ae035f635b84aed830f8a2a3c61c12
Opcode Fuzzy Hash: 0374611688ca75c4551dea276e5d424cbadff3ac534dbe24837146ca9d20d13e
Instruction Fuzzy Hash: D6F02D362006156BCB209F66EC019DB3BA5EF81375F10402EF958C2290DF3DC8914BAC

Function 00405892 Relevance: 3.0, APIs: 2, Instructions: 45
fileCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

Part of subcall function 00405905: CloseHandle.KERNELBASE(00000000,000000FF,004058A0,?,?,00000000), ref: 00405910

CreateFileW.KERNELBASE(00000000,?,?,00000000,00000000,00000000,00000000,00000000,?,?,00000000), ref: 004058EF

Part of subcall function 00403B85: __EH_prolog.LIBCMT ref: 00403B8A

CreateFileA.KERNEL32(?,?,?,00000000,00000000,00000000,00000000,00000000,?,?,00000000), ref: 004058CB

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CreateFile$CloseH_prologHandle
String ID:
API String ID: 449569272-0
Opcode ID: 34b674e9a04a5ff3e8c8923f5916708bcc46c4f31befc859c171c75614de22e6
Instruction ID: 7cb04d8d1853a58e30318ad4c29bda14cf4b58fee7e46fc4002fe1391b6e6e2b
Opcode Fuzzy Hash: 34b674e9a04a5ff3e8c8923f5916708bcc46c4f31befc859c171c75614de22e6
Instruction Fuzzy Hash: 4F01287240020AFFCF11AFA4DC45C9B7F6AEF08364B10853AF991661A1D73699A1EF94

Function 00404965 Relevance: 3.0, APIs: 2, Instructions: 31
COMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

SetFileAttributesW.KERNELBASE(?,00000000,?,00000003,?,00000000), ref: 0040499C

Part of subcall function 00403B85: __EH_prolog.LIBCMT ref: 00403B8A

SetFileAttributesA.KERNEL32(?,00000000,?,00000003,?,00000000), ref: 00404985

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AttributesFile$H_prolog
String ID:
API String ID: 3790360811-0
Opcode ID: 5366c93646a32060bc4a1fe11ea500c12b8b92d1211a98e2b8e7846322785de3
Instruction ID: f078d443d6654451da1bdd33dee3a4941b810ca2709c1c0422ffd448cadfd8b3
Opcode Fuzzy Hash: 5366c93646a32060bc4a1fe11ea500c12b8b92d1211a98e2b8e7846322785de3
Instruction Fuzzy Hash: 12E0E5B19002106BCB302B749C08AD73F6CCB82314B108177E816B72D0DA388E06C6D9

Function 004049F4 Relevance: 3.0, APIs: 2, Instructions: 31COMMON

Download Yara Rule

APIs

CreateDirectoryW.KERNELBASE(00000000,00000000,00000000,?,00000000,?,?,00405334,?,00000000,?,00000003), ref: 00404A2C

Part of subcall function 00403B85: __EH_prolog.LIBCMT ref: 00403B8A

CreateDirectoryA.KERNEL32(?,00000000,00000000,00000000,?,00000000,?,?,00405334,?,00000000,?,00000003), ref: 00404A13

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CreateDirectory$H_prolog
String ID:
API String ID: 2325068607-0
Opcode ID: a1e0d02f5bfc64bfc09281de4819c2c8931d1b3daee1640bd6a36795e0d5f738
Instruction ID: e8b418caba4fa0c83fd0f6cce2293bab18ef6c4fa53c548cc4c0ebfda5fe1645
Opcode Fuzzy Hash: a1e0d02f5bfc64bfc09281de4819c2c8931d1b3daee1640bd6a36795e0d5f738
Instruction Fuzzy Hash: 3CE0E570B002006BDB206B64AC05B977B68CB41709F104176E902F71D0DA78DE01DA9C

Function 004157C8 Relevance: 3.0, APIs: 2, Instructions: 30memoryCOMMON

Download Yara Rule

APIs

HeapCreate.KERNELBASE(00000000,00001000,00000000,00414932,00000001), ref: 004157D9

Part of subcall function 00415680: GetVersionExA.KERNEL32 ref: 0041569F

HeapDestroy.KERNEL32 ref: 00415818

Part of subcall function 00415825: HeapAlloc.KERNEL32(00000000,00000140,00415801,000003F8), ref: 00415832

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Heap$AllocCreateDestroyVersion
String ID:
API String ID: 2507506473-0
Opcode ID: 0d18dfc85a1640e6673d81f03e6c6359104a03ea7de3319d0e450716895a192f
Instruction ID: ed3d0d0d9fb025b00032fbfed5580f0a7fafafb3549905f7ec75d8b7e0a93aa3
Opcode Fuzzy Hash: 0d18dfc85a1640e6673d81f03e6c6359104a03ea7de3319d0e450716895a192f
Instruction Fuzzy Hash: 6CF06530A54B01EEDF207B706C867EA2B90EB84795F60483BF401D81A0EB7884D1D659

Function 00405970 Relevance: 3.0, APIs: 2, Instructions: 30COMMON

Download Yara Rule

APIs

SetFilePointer.KERNELBASE(?,?,?,?), ref: 0040598B
GetLastError.KERNEL32(?,?,?,?), ref: 00405999

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ErrorFileLastPointer
String ID:
API String ID: 2976181284-0
Opcode ID: 4eb004f5f0e538f15da8fb4a4b1192dc0e26d9ca4b62000b247bbe798b79ae76
Instruction ID: b27308c8a3af6e3091502473baf333c9532b4c6e1f366657fcb3ad1a7c3590d9
Opcode Fuzzy Hash: 4eb004f5f0e538f15da8fb4a4b1192dc0e26d9ca4b62000b247bbe798b79ae76
Instruction Fuzzy Hash: 93F0B7B4500208EFDF04CF94D9458AE7BB5EF49364B208169F815E7390D7359E00DFA9

Function 00404F2C Relevance: 3.0, APIs: 2, Instructions: 27COMMON

Download Yara Rule

APIs

SetCurrentDirectoryW.KERNELBASE(?,?,00000000), ref: 00404F62

Part of subcall function 00403B85: __EH_prolog.LIBCMT ref: 00403B8A

SetCurrentDirectoryA.KERNEL32(00000000,00000000,?,00000000), ref: 00404F48

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CurrentDirectory$H_prolog
String ID:
API String ID: 3531555294-0
Opcode ID: 37bd0973ac103fd303293487a19168a5ccebfcf95a8c4f288a103cb7951a30b5
Instruction ID: 9edf083e53dd0555a3085cbe496080ff7240eda39e21aa363a26468641b3ea5b
Opcode Fuzzy Hash: 37bd0973ac103fd303293487a19168a5ccebfcf95a8c4f288a103cb7951a30b5
Instruction Fuzzy Hash: 75E02630B400093FDF112F78EC4A9AA3BB89B40309F10427AB403E20E1EF38CA48CA48

Function 0040B98F Relevance: 2.0, APIs: 1, Instructions: 515COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040B994

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 6c23f50496e65b3ca560bc6ad6661ef703fabc81de4c7ebfafbc0beace10094d
Instruction ID: 4fbed39282daa38b1d3be95d0829f5567439209fdd6a1d56e89862dfcbe45c3a
Opcode Fuzzy Hash: 6c23f50496e65b3ca560bc6ad6661ef703fabc81de4c7ebfafbc0beace10094d
Instruction Fuzzy Hash: 05324B70904249DFDB10DFA8C584BDEBBB0AF58304F1441AEE845B7382DB78AE45CB99

Function 0040EB99 Relevance: 2.0, APIs: 1, Instructions: 500COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040EB9E

Part of subcall function 0040E770: __EH_prolog.LIBCMT ref: 0040E775

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 93af7643a127ff2c8fcf7066a9c121e1979c0be22eb581a0e33d5eb75e035ebc
Instruction ID: 765616d13d330a71392781af4293cea344630bd2be9376268a28767dce44cac6
Opcode Fuzzy Hash: 93af7643a127ff2c8fcf7066a9c121e1979c0be22eb581a0e33d5eb75e035ebc
Instruction Fuzzy Hash: F6325C70900249DFCB24DFA5C880BEEBBB5BF55308F14847ED549B7282DB386A89CB55

Function 0040888F Relevance: 1.9, APIs: 1, Instructions: 374COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00408894

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: f8f61f009d3daf8c2db6a732b574bcd6eafb3dea196858b7c2c201f5376d76a6
Instruction ID: dff2ad87a4df39db6f8fa6ff6a697358cee08fb6a23258ae47e5232e80a59da3
Opcode Fuzzy Hash: f8f61f009d3daf8c2db6a732b574bcd6eafb3dea196858b7c2c201f5376d76a6
Instruction Fuzzy Hash: FFE16E70904249DFDF10DFA4C988AAEBBB4AF48314F2444AEE556F7391CB389E45CB25

Function 0040E7F4 Relevance: 1.8, APIs: 1, Instructions: 255COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040E7F9

Part of subcall function 0040F836: __EH_prolog.LIBCMT ref: 0040F83B

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 498aaecf194758b2187a7f377388585577334c9b398a12de9558ebeea3154d22
Instruction ID: 639e188e3e769c4c76ba7ddc7be71c767d86a570cac8f7036ff280b2304c1e48
Opcode Fuzzy Hash: 498aaecf194758b2187a7f377388585577334c9b398a12de9558ebeea3154d22
Instruction Fuzzy Hash: 5DC13670900259DFDB14DFA5C985BDEBBB4BF14308F1480AEE945B7282CB786A48CF65

Function 0040F449 Relevance: 1.7, APIs: 1, Instructions: 207COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040F44E

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 7053a18d867c794380ddb73d5154a26bfb4cc56ca4d452b1cbce9de2fd1904e6
Instruction ID: 37dc011919f3b1358f9a833e213d0996983958fb9ee029613f358e4c9ba25a45
Opcode Fuzzy Hash: 7053a18d867c794380ddb73d5154a26bfb4cc56ca4d452b1cbce9de2fd1904e6
Instruction Fuzzy Hash: 3C815C70E00605ABCB24DFA5C881AEEFBB1BF48304F14453EE445B3791D739A949CB99

Function 00408D5E Relevance: 1.7, APIs: 1, Instructions: 151COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00408D63

Part of subcall function 00408F0B: __EH_prolog.LIBCMT ref: 00408F10

Part of subcall function 00402635: __EH_prolog.LIBCMT ref: 0040263A

Part of subcall function 00403981: __EH_prolog.LIBCMT ref: 00403986

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: fe4f4b855b35ad50f10ad9ecf2bf615057988214f71ae465a5f778489ccae84a
Instruction ID: 2e5fef73c4a961ecd91826de13bda49669b7ee5ae1afd1ab178ba291f64b6413
Opcode Fuzzy Hash: fe4f4b855b35ad50f10ad9ecf2bf615057988214f71ae465a5f778489ccae84a
Instruction Fuzzy Hash: E5516D7190060AEFCF11DFA5C984A9EBBB4BF08314F10462EE556B72D1CB789A45CFA4

Function 0040DB62 Relevance: 1.6, APIs: 1, Instructions: 146COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040DB67

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 6102bc3ab49ae424949eee4761875b821dd30f392df23a536a372274e60046df
Instruction ID: 67e57bbcfb5e62c28ba97e2c762051c7e2fb602a8ee489b014dcb5d1e96c76cd
Opcode Fuzzy Hash: 6102bc3ab49ae424949eee4761875b821dd30f392df23a536a372274e60046df
Instruction Fuzzy Hash: DA419EB1E042059BEB14DF99C985ABEB7B5FF48304F14453EE402B7381D7B8A945CBA8

Function 0040CD84 Relevance: 1.6, APIs: 1, Instructions: 143COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040CD89

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 305c79b04e93cb02db0d94eb430663c97d837b050eba01e1428f85ec3b32050d
Instruction ID: 716710645470f9cf712b82a1641bf3e3a23618a4fc30be00c3c641d866b01c52
Opcode Fuzzy Hash: 305c79b04e93cb02db0d94eb430663c97d837b050eba01e1428f85ec3b32050d
Instruction Fuzzy Hash: 3151C531804146DFCB15CB68C4D4AEE7771EF48348F14827BE8167B2D2D6399A06DBEA

Function 00401B11 Relevance: 1.6, APIs: 1, Instructions: 132COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00401B16

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 4a7b8dc75b00dab3078b6f2c0b685c16519ae0cc3006f02a661cb725d39e4b70
Instruction ID: dc66995ee082b2e59fd72de07b50a9d1ecefa8465c91578acc64d6d85ae5b981
Opcode Fuzzy Hash: 4a7b8dc75b00dab3078b6f2c0b685c16519ae0cc3006f02a661cb725d39e4b70
Instruction Fuzzy Hash: 7A51D071C042499FDF21DFA4C940BEEBBB4AF05394F14416AE851732E2E7789A41CB68

Function 00402EFE Relevance: 1.6, APIs: 1, Instructions: 116COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00402F03

Part of subcall function 0040335F: __EH_prolog.LIBCMT ref: 00403364

Part of subcall function 004034CC: __EH_prolog.LIBCMT ref: 004034D1

Part of subcall function 00403086: __EH_prolog.LIBCMT ref: 0040308B
Part of subcall function 00403086: ShowWindow.USER32(004149B4,00000001,000001F4,00000000,?,?,00000000,00000003,00000000,00000000), ref: 004030E4

Part of subcall function 00412FB0: CloseHandle.KERNEL32(00000000,00000000,0040301E,?,?,00000000,00000003,?,00000000,?,?,00000003,00000000,00000000), ref: 00412FBA
Part of subcall function 00412FB0: GetLastError.KERNEL32(?,00000003,00000000,00000000), ref: 00412FC4

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog$CloseErrorHandleLastShowWindow
String ID:
API String ID: 2740091781-0
Opcode ID: 2da83f7b0348b558eb037d8fcbbe5e82633db5724e115f0790e5db2222500163
Instruction ID: 576321bfec054c9ee934bf83a6d4a944d332aa9064831fab6676e01313dc7821
Opcode Fuzzy Hash: 2da83f7b0348b558eb037d8fcbbe5e82633db5724e115f0790e5db2222500163
Instruction Fuzzy Hash: FF419C71900248DBCB11EFA5C991AEDBBB4AF04304F1080BFE90AB72D2DA785B45CB59

Function 0040C557 Relevance: 1.6, APIs: 1, Instructions: 96COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040C55C

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 039900a8d840d8f65cf18cf377fd5bff5d9e595a8fad608146d0eb9be483e555
Instruction ID: 41554ca9dc53ee1e5d6d797d633c48513fe02739bc2a4d97afccdd4c6a3ff44e
Opcode Fuzzy Hash: 039900a8d840d8f65cf18cf377fd5bff5d9e595a8fad608146d0eb9be483e555
Instruction Fuzzy Hash: 89416C71A00645DFCB24CF68C48486ABBF1FF48314B244AAED096AB791C731ED46CF91

Function 0040CF82 Relevance: 1.6, APIs: 1, Instructions: 89COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040CF87

Part of subcall function 0040F6E0: __EH_prolog.LIBCMT ref: 0040F6E5

Part of subcall function 0040D0A6: __EH_prolog.LIBCMT ref: 0040D0AB

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 247e6e783af1532b670e604df5ee4666ee67329ca8b2db34e45a1f618534d241
Instruction ID: 59bb91874275df73172cd70bf395014d1b371f9bee4586dc4e729df687399cc5
Opcode Fuzzy Hash: 247e6e783af1532b670e604df5ee4666ee67329ca8b2db34e45a1f618534d241
Instruction Fuzzy Hash: 87319630D01248DFCB11DFA9C548BEDBBB5AF15308F14406EE8457B381C7789A49DB66

Function 004061BF Relevance: 1.6, APIs: 1, Instructions: 83COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 004061C4

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 0a32dfb97eb38f68acb4646e97dd4d13ceed46f781b2d933bb6fe13a2a73ca49
Instruction ID: a24cbab5944e5cd80d4d0b45cab95027a2511e7323fd1c0fe5e5f9bfcab47c11
Opcode Fuzzy Hash: 0a32dfb97eb38f68acb4646e97dd4d13ceed46f781b2d933bb6fe13a2a73ca49
Instruction Fuzzy Hash: 97218F71A05246DBCB24FFA5C44046FB7A1AB4130472285BFE053772C1C738AE61CB6A

Function 00413C73 Relevance: 1.6, APIs: 1, Instructions: 80memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlAllocateHeap.NTDLL(00000000,-0000000F,00000000,?,00000000,00000000,00000000), ref: 00413D5A

Part of subcall function 004154DA: InitializeCriticalSection.KERNEL32(00000000,00000000,?,?,00416D82,00000009,00000000,00000000,00000001,00415318,00000001,00000074,?,?,00000000,00000001), ref: 00415517
Part of subcall function 004154DA: EnterCriticalSection.KERNEL32(?,?,?,00416D82,00000009,00000000,00000000,00000001,00415318,00000001,00000074,?,?,00000000,00000001), ref: 00415532

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalSection$AllocateEnterHeapInitialize
String ID:
API String ID: 1616793339-0
Opcode ID: cdeed90e400f99c9328ec8b59033d7a90e074e0a5ab5361bfbc3574a04fde8a1
Instruction ID: 026ee179866774db734838c78619ddc809868a86b22b68076f663e2312d1f49b
Opcode Fuzzy Hash: cdeed90e400f99c9328ec8b59033d7a90e074e0a5ab5361bfbc3574a04fde8a1
Instruction Fuzzy Hash: D4219772A00605EBDB10DF69EC42BDA7764FB00765F20411BF421EB6D0D77CAAC28A9C

Function 00413D6F Relevance: 1.6, APIs: 1, Instructions: 75memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

RtlFreeHeap.NTDLL(00000000,00000000,00000000,?,00000000,?,00416D82,00000009,00000000,00000000,00000001,00415318,00000001,00000074), ref: 00413E43

Part of subcall function 004154DA: InitializeCriticalSection.KERNEL32(00000000,00000000,?,?,00416D82,00000009,00000000,00000000,00000001,00415318,00000001,00000074,?,?,00000000,00000001), ref: 00415517
Part of subcall function 004154DA: EnterCriticalSection.KERNEL32(?,?,?,00416D82,00000009,00000000,00000000,00000001,00415318,00000001,00000074,?,?,00000000,00000001), ref: 00415532

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalSection$EnterFreeHeapInitialize
String ID:
API String ID: 641406236-0
Opcode ID: 841176424f551508ca039d1f5d574a0052902f767b8dc575c65ddda1a9f22b4e
Instruction ID: 5a14261a50f2f4ae8fe925cd7ff68077a924e970bbdc1eb83d0c2eed9fb11c58
Opcode Fuzzy Hash: 841176424f551508ca039d1f5d574a0052902f767b8dc575c65ddda1a9f22b4e
Instruction Fuzzy Hash: 2421C272901705FADB10AF96DC02BDE7BB8EB04725F24012BF414B21C0D77C9AC08AA9

Function 004052CF Relevance: 1.6, APIs: 1, Instructions: 58COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 004052D4

Part of subcall function 004050EE: __EH_prolog.LIBCMT ref: 004050F3
Part of subcall function 004050EE: GetTempPathA.KERNEL32(00000105,?,00000000,?,00000000), ref: 00405127

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog$PathTemp
String ID:
API String ID: 3652545363-0
Opcode ID: 1ef5fa40e20091595c8a07c7add8e04f0ea87ba7b14c6b9ab7bd2a47fc7370d7
Instruction ID: 884fa5787797a708672a5e156f09df22a5f972d3b51e26f7068c24b8b673b68a
Opcode Fuzzy Hash: 1ef5fa40e20091595c8a07c7add8e04f0ea87ba7b14c6b9ab7bd2a47fc7370d7
Instruction Fuzzy Hash: 5211A3759401059ACF00EFA5C552AEFBBB8EF95348F14402FE841732D1C7B90A49DE54

Function 00409DFC Relevance: 1.6, APIs: 1, Instructions: 51COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00409E01

Part of subcall function 004099F1: __EH_prolog.LIBCMT ref: 004099F6

Part of subcall function 00409A39: __EH_prolog.LIBCMT ref: 00409A3E

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: e2be988a2ed4eac1d18d94ffb3dcbee280352d40f72ce7d9b7b55f505c73744e
Instruction ID: 728224cdcdeea9a50de84ff331f734dd83e0a6071a74e90d77f9a4778d081c57
Opcode Fuzzy Hash: e2be988a2ed4eac1d18d94ffb3dcbee280352d40f72ce7d9b7b55f505c73744e
Instruction Fuzzy Hash: 931182B0A01254DADB09EBAAC1153DDFBF59FA1318F54415F9552732C2CBF82B0487A6

Function 00409070 Relevance: 1.5, APIs: 1, Instructions: 47COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00409075

Part of subcall function 00402635: __EH_prolog.LIBCMT ref: 0040263A

Part of subcall function 00405620: __EH_prolog.LIBCMT ref: 00405625

Part of subcall function 00413B0D: RaiseException.KERNEL32(00000003,00000000,00000003,?,00000003,?,00000003,00000000,00000000,00401055,00000003,?,00000000), ref: 00413B3B

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog$ExceptionRaise
String ID:
API String ID: 2062786585-0
Opcode ID: 17dae63e629c91cb1e915b62325b494edd8ae92648c1e9e6482c4593510b450f
Instruction ID: c87fc69b1ce411278b5c4cd36917e57d7785db396d8ca4da128de4c157d2198f
Opcode Fuzzy Hash: 17dae63e629c91cb1e915b62325b494edd8ae92648c1e9e6482c4593510b450f
Instruction Fuzzy Hash: 1601D2B5A402049ECB10EF26C451ADEBBB1FF84314F10852FE896A32E1CB796649CB54

Function 004027A7 Relevance: 1.5, APIs: 1, Instructions: 35COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 004027AC

Part of subcall function 004049F4: CreateDirectoryA.KERNEL32(?,00000000,00000000,00000000,?,00000000,?,?,00405334,?,00000000,?,00000003), ref: 00404A13

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CreateDirectoryH_prolog
String ID:
API String ID: 3554458247-0
Opcode ID: 1d6ed87279fcce4dfaa36ce39d8da3d177537eb6a1ece7d61f11b0fb4062048b
Instruction ID: aa96bd448e9fa33173a2259148c0e22656dcd3e9b7c7d25cba760d9f6e75f00f
Opcode Fuzzy Hash: 1d6ed87279fcce4dfaa36ce39d8da3d177537eb6a1ece7d61f11b0fb4062048b
Instruction Fuzzy Hash: 55F03C729005069BCB05EB5AC8429EEBBB5EF94308F10403FE152775E2DA786986DB94

Function 00406297 Relevance: 1.5, APIs: 1, Instructions: 29COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040629C

Part of subcall function 004061BF: __EH_prolog.LIBCMT ref: 004061C4

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 6c2e6a82ad44a3596cf000a5615c5b739901b0aaac1cec813de11ba17f646bcd
Instruction ID: d002f29cd99a7d9c36b9a014c837f136803fcb54798139eb5382dd41199f51d8
Opcode Fuzzy Hash: 6c2e6a82ad44a3596cf000a5615c5b739901b0aaac1cec813de11ba17f646bcd
Instruction Fuzzy Hash: 2BF03A72A00218EFDB15DF94CC01BEEB779FB48315F10816AB422E72D0C7798A10CB14

Function 0040C96C Relevance: 1.5, APIs: 1, Instructions: 29COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040C971

Part of subcall function 0040C9E3: __EH_prolog.LIBCMT ref: 0040C9E8

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 97d13476a1578dbbb8b7321e23e8bd518515a52fd3c7649a69e8943f484a5e8b
Instruction ID: 180fbe891bab88941c19a906eef3a01802dada044b7360aafa1ebd8752043cfb
Opcode Fuzzy Hash: 97d13476a1578dbbb8b7321e23e8bd518515a52fd3c7649a69e8943f484a5e8b
Instruction Fuzzy Hash: 66F0FCB0911640DEC719EB74D1153DDFBB4AF55308F50419E9956736C2CFB81708C765

Function 0040F7B7 Relevance: 1.5, APIs: 1, Instructions: 25COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040F7BC

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 878411d95e43fbc0e8f99baadd22453587100e877feed7db7451d64bbab71619
Instruction ID: ac64c31c834abe54e412618b162bf05c7167bd146dfe5a37d1803cc4d2d3be92
Opcode Fuzzy Hash: 878411d95e43fbc0e8f99baadd22453587100e877feed7db7451d64bbab71619
Instruction Fuzzy Hash: 94E012B1A00155ABCB58EF69D80669DBAA5AB09318F10863FB026F36C1DB784A418B59

Function 00405BFB Relevance: 1.5, APIs: 1, Instructions: 24memoryCOMMON

Download Yara Rule

APIs

SysAllocString.OLEAUT32(?), ref: 00405C13

Part of subcall function 00413B0D: RaiseException.KERNEL32(00000003,00000000,00000003,?,00000003,?,00000003,00000000,00000000,00401055,00000003,?,00000000), ref: 00413B3B

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AllocExceptionRaiseString
String ID:
API String ID: 1415472724-0
Opcode ID: 585828f0663470c28d012fa7c31560623ec32af21cf032640c5ea50ac41654d0
Instruction ID: bf266c775eafc0cd132ea201270a7534faa964ceb55315cc87c56e89072e7831
Opcode Fuzzy Hash: 585828f0663470c28d012fa7c31560623ec32af21cf032640c5ea50ac41654d0
Instruction Fuzzy Hash: B7E06D32200708A7CB20AF65D84198B7BE8FF00385B10C43FF949DA240E779E9808BD8

Function 00405800 Relevance: 1.5, APIs: 1, Instructions: 23COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00405805

Part of subcall function 00405620: __EH_prolog.LIBCMT ref: 00405625

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: d031f65d966fd76414b5e485b8cf5b0e5999cd66b44c505832369a9b765ef076
Instruction ID: a0f610f1b5e032532ed1cec3649959bf66a41b4e8af70f58d5593db508bcf515
Opcode Fuzzy Hash: d031f65d966fd76414b5e485b8cf5b0e5999cd66b44c505832369a9b765ef076
Instruction Fuzzy Hash: 46E04FB3D410049ACB05EB65E9527EDB378EF61319F50407FE412735D18B381F09CA58

Function 00405B29 Relevance: 1.5, APIs: 1, Instructions: 22fileCOMMON

Download Yara Rule

APIs

WriteFile.KERNELBASE(?,?,?,?,00000000), ref: 00405B4C

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FileWrite
String ID:
API String ID: 3934441357-0
Opcode ID: f685ec6030a7cae57bc9182c2f64f11e19c4f82e6ad9756b6e5eb0af141a467c
Instruction ID: fda623b9c22c7fd134ddab0a411968f0e63156441233f4ee367e8c40c556ab77
Opcode Fuzzy Hash: f685ec6030a7cae57bc9182c2f64f11e19c4f82e6ad9756b6e5eb0af141a467c
Instruction Fuzzy Hash: 17E0E575640208FBCB11CFA5C801B8E7BF9EB08354F20C169F914AA260D739EA11DF54

Function 0040C931 Relevance: 1.5, APIs: 1, Instructions: 21COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040C936

Part of subcall function 0040C96C: __EH_prolog.LIBCMT ref: 0040C971

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 2f93a48584fc243b76bceec8380402125645ced17a7c1bf7a60211c0ce45116c
Instruction ID: 8adf79bcf0a25fb823e60414124b99f072840e3085735b9c49c9779a3d641231
Opcode Fuzzy Hash: 2f93a48584fc243b76bceec8380402125645ced17a7c1bf7a60211c0ce45116c
Instruction Fuzzy Hash: 6EE01A71811620EBC724EF58C4456DEB7B4EF08725F00875EA4E6B36D1C7B8AE40CB94

Function 004147B4 Relevance: 1.5, APIs: 1, Instructions: 20threadCOMMON

Download Yara Rule

APIs

ExitThread.KERNEL32 ref: 004147E9

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ExitThread
String ID:
API String ID: 2158977761-0
Opcode ID: 6c939c18724e7789034020813005a1b29b75e21fb5f5d6c1b381c2503cc8d902
Instruction ID: 835638d51d7e690d80ddf8f11569568d1c7a5f433119f1d0283a2071334468ba
Opcode Fuzzy Hash: 6c939c18724e7789034020813005a1b29b75e21fb5f5d6c1b381c2503cc8d902
Instruction Fuzzy Hash: CDE08C32900925AADB223BA1DC06AEE3620AF81394F00002BF8146A5A0DBA88CD186D9

Function 0040F6E0 Relevance: 1.5, APIs: 1, Instructions: 18COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040F6E5

Part of subcall function 0040F449: __EH_prolog.LIBCMT ref: 0040F44E

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: 0c00a6b9b995e6d122d0d1e5645fdc19a4d57d2469026a55dc4bfd6035115874
Instruction ID: 32d4a89d334c2aba7f1f5d27adfa0c04a02a885b7174eb98eed18e47b0b867f7
Opcode Fuzzy Hash: 0c00a6b9b995e6d122d0d1e5645fdc19a4d57d2469026a55dc4bfd6035115874
Instruction Fuzzy Hash: 1DD012B2515104FBD7109F45D842BDEBBB8EB51369F10813BF00171540D37D5644966A

Function 00405A1D Relevance: 1.5, APIs: 1, Instructions: 18fileCOMMON

Download Yara Rule

APIs

ReadFile.KERNELBASE(000000FF,00000000,?,?,00000000,000000FF,?,00405A68,00000000,?,00000000,?,00405A8E,00000000,?,00000000), ref: 00405A33

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FileRead
String ID:
API String ID: 2738559852-0
Opcode ID: 7899785fd51540d5028ce756fcdedcbfaef9db2fe3ec3db1f53401f618f66a8a
Instruction ID: 33e006b7c7266c94de2827aaddd493f3c8d551b448fa911b85e4ce9a1db514e9
Opcode Fuzzy Hash: 7899785fd51540d5028ce756fcdedcbfaef9db2fe3ec3db1f53401f618f66a8a
Instruction Fuzzy Hash: A4E0EC75200208FBCB01CF91CC05FCE7BB9FB49754F208058E90596160C375AA14EB54

Function 004147BF Relevance: 1.5, APIs: 1, Instructions: 17threadCOMMON

Download Yara Rule

APIs

ExitThread.KERNEL32 ref: 004147E9

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ExitThread
String ID:
API String ID: 2158977761-0
Opcode ID: 24773d02a99502e401f88b35345ffc50176b794b148236fecf9e645f2ac90187
Instruction ID: b4e95b568d212fcbc8e7df7edbfd3446e029e3f46d4ca6baaecf21535c38ed65
Opcode Fuzzy Hash: 24773d02a99502e401f88b35345ffc50176b794b148236fecf9e645f2ac90187
Instruction Fuzzy Hash: 2AD0A732600E25AAD6223771DC467EF2244AF81795B04012BF818895A0DFA8CDC145DD

Function 00405414 Relevance: 1.5, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

FindClose.KERNELBASE(?,000000FF,00405445,000000FF), ref: 0040541F

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CloseFind
String ID:
API String ID: 1863332320-0
Opcode ID: f0ce2bef5821c107b9489e8e4dd061de71a9af92eaf728c2451e2811c290832d
Instruction ID: ad963fc5273d8b9d86916b47fb17bcd605870b12c06d71a74b716dd917e87850
Opcode Fuzzy Hash: f0ce2bef5821c107b9489e8e4dd061de71a9af92eaf728c2451e2811c290832d
Instruction Fuzzy Hash: D4D0123151453157CA641E7C7848AD333D99A1637537157AAF4B4D32E0D3749CC34A98

Function 00405AFC Relevance: 1.5, APIs: 1, Instructions: 9timeCOMMON

Download Yara Rule

APIs

SetFileTime.KERNELBASE(?,?,?,?,00405B26,00000000,00000000,?,00402E13,?), ref: 00405B0A

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FileTime
String ID:
API String ID: 1425588814-0
Opcode ID: 2b6a10e293fa4a8bd52839064a41e39e160aca85d3804aec240939be71bd967c
Instruction ID: 4beff7ba357006865f39a04876becaa9faf69e640e246345c6c1d8862761ec95
Opcode Fuzzy Hash: 2b6a10e293fa4a8bd52839064a41e39e160aca85d3804aec240939be71bd967c
Instruction Fuzzy Hash: 29C04C36159106FF8F120F70CC04D1ABFA2EF99311F10C958B165C5070C7328024EB52

Function 00406F81 Relevance: 1.3, APIs: 1, Instructions: 31COMMON

Download Yara Rule

APIs

LeaveCriticalSection.KERNEL32(?,?,?,?), ref: 00406FB2

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalLeaveSection
String ID:
API String ID: 3988221542-0
Opcode ID: f2ff9836336f67d9ff12deaf62cc92e2eac5b33916cf9d308384194b51d8e0a8
Instruction ID: f67714d9ecc1d8948c13ee62ab2841b601ff43f092b08abc37504173b9cf6405
Opcode Fuzzy Hash: f2ff9836336f67d9ff12deaf62cc92e2eac5b33916cf9d308384194b51d8e0a8
Instruction Fuzzy Hash: B7F0BE32A001459FCF119FA0D80898ABF65EF55314B0184ABF9169B251C338C820DF60

Function 00412FF0 Relevance: 1.3, APIs: 1, Instructions: 23COMMON

Download Yara Rule

APIs

Part of subcall function 0041468E: CreateThread.KERNELBASE(00000000,00000003,004146F9,00000000,00000000,?), ref: 004146CF
Part of subcall function 0041468E: GetLastError.KERNEL32(?,?,?,00413009,00000000,00000000,004032CA,?,00000000,00000000,?,00402FAB,?,00000000,?), ref: 004146D9

GetLastError.KERNEL32(?,?,00000003,00000000,00000000), ref: 00413018

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ErrorLast$CreateThread
String ID:
API String ID: 665435222-0
Opcode ID: fdfffcc17890bcc66e85f81167f5a4f4e376ab203a2f001e3d39f9f51099ce04
Instruction ID: 8241f09584fde1b7b47d6c8a5a56a0c389c2bf5d01a37efb599b640c9bda9e89
Opcode Fuzzy Hash: fdfffcc17890bcc66e85f81167f5a4f4e376ab203a2f001e3d39f9f51099ce04
Instruction Fuzzy Hash: 4EE086B22042126AE310DF509C05FE76ADCDB94B05F00443EB944C6184EB64CA40C3A9

Function 00405905 Relevance: 1.3, APIs: 1, Instructions: 16COMMON

Download Yara Rule

APIs

CloseHandle.KERNELBASE(00000000,000000FF,004058A0,?,?,00000000), ref: 00405910

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CloseHandle
String ID:
API String ID: 2962429428-0
Opcode ID: 9cbe10086181c6cf337a739c26a2519d1510d6718cc7d35307e3d92904545fb4
Instruction ID: c924a9121967eb2c43d42ee71539138ee39fbcc7c8c6d5ba34c486a20a6e0004
Opcode Fuzzy Hash: 9cbe10086181c6cf337a739c26a2519d1510d6718cc7d35307e3d92904545fb4
Instruction Fuzzy Hash: 93D0127151456197CE742E7C78445C337D8DA463303311B6BF4B0D32E0D3748D835A98

Function 00410F40 Relevance: 1.3, APIs: 1, Instructions: 10memoryCOMMON

Download Yara Rule

APIs

VirtualAlloc.KERNELBASE(00000000,00020000,00001000,00000004,004103C8), ref: 00410F51

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AllocVirtual
String ID:
API String ID: 4275171209-0
Opcode ID: 91e70fcb83806e64083a323eb2e3944731c0f93bc5a264736d7e7e867113384b
Instruction ID: 07720a170ef6d50c918e2da5ca2fe5f7ddfb2e687cae5d42b3df39ad5892c3a5
Opcode Fuzzy Hash: 91e70fcb83806e64083a323eb2e3944731c0f93bc5a264736d7e7e867113384b
Instruction Fuzzy Hash: DDB012B039138075FF7843208C1FFE71200A340B87F0080A8BB05D81C4E7D064C0501C

Function 00410F60 Relevance: 1.3, APIs: 1, Instructions: 7COMMON

Download Yara Rule

APIs

VirtualFree.KERNELBASE(?,00000000,00008000,0040664A,?,00406624), ref: 00410F6C

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FreeVirtual
String ID:
API String ID: 1263568516-0
Opcode ID: 1327e01bd96d07ee7a5a75ed87afd8ac78764046635013dfe708143c48cadece
Instruction ID: a132bef15ba7b425f1065e5a097c2bb543b957559febc4b94616fea76008790a
Opcode Fuzzy Hash: 1327e01bd96d07ee7a5a75ed87afd8ac78764046635013dfe708143c48cadece
Instruction Fuzzy Hash: 3BB0123424120031ED7807200C1AB5711005701701F10C1183102642C087D4B440450C

Non-executed Functions

Function 004180F0 Relevance: 14.0, APIs: 4, Strings: 4, Instructions: 50libraryloaderCOMMONLIBRARYCODE

Download Yara Rule

APIs

LoadLibraryA.KERNEL32(user32.dll,?,00000000,00000000,0041772A,?,Microsoft Visual C++ Runtime Library,00012010,?,0041BD34,?,0041BD84,?,?,?,Runtime Error!Program: ), ref: 00418102
GetProcAddress.KERNEL32(00000000,MessageBoxA), ref: 0041811A
GetProcAddress.KERNEL32(00000000,GetActiveWindow), ref: 0041812B
GetProcAddress.KERNEL32(00000000,GetLastActivePopup), ref: 00418138

Strings

GetActiveWindow, xrefs: 00418125
GetLastActivePopup, xrefs: 0041812D
MessageBoxA, xrefs: 00418114
user32.dll, xrefs: 004180FD

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AddressProc$LibraryLoad
String ID: GetActiveWindow$GetLastActivePopup$MessageBoxA$user32.dll
API String ID: 2238633743-4044615076
Opcode ID: 595171f737e70550edc5abd38f068ead7bf618b78638dd3ba3c6e0fb0d2712e4
Instruction ID: 415fa372477fd235fe75ca2ef0ffa9dc0df8c28a9075a0eab2fce08d3bc4b09a
Opcode Fuzzy Hash: 595171f737e70550edc5abd38f068ead7bf618b78638dd3ba3c6e0fb0d2712e4
Instruction Fuzzy Hash: F5012572700241BF87219FB5AD849DBBAE9EB49751354443FB504C2220DB7CC9C39B69

Function 0040E38E Relevance: 1.7, APIs: 1, Instructions: 246COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040E393

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID:
API String ID: 3519838083-0
Opcode ID: ef3f0dd97c369c2370b5d413364e2112772f158c67037ae1847bc74799d93c78
Instruction ID: 6f1b27b05ce828494dcdc0ca2a3df983f9883c238a6bb878f092976797e95433
Opcode Fuzzy Hash: ef3f0dd97c369c2370b5d413364e2112772f158c67037ae1847bc74799d93c78
Instruction Fuzzy Hash: 68A1EB70E002099BCB18DF96C8919AEB7B2FF94318F14883FE915A7391D738AD52CB55

Function 0041561A Relevance: 1.5, APIs: 1, Instructions: 4COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32(Function_000155D4), ref: 0041561F

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: c73d5215fbd9f9fa44ce3c8db65af6300706d886bcb472667e49ab47f89b2735
Instruction ID: 5929198a1c1d143ebb6d47ac1dc9c369120d6613942f0ebcbf50c4dd8c3cbf29
Opcode Fuzzy Hash: c73d5215fbd9f9fa44ce3c8db65af6300706d886bcb472667e49ab47f89b2735
Instruction Fuzzy Hash: 57A001B5A41605DA8A209F60A8095C5BE62A689B42B608166A811E5268DFB812419A69

Function 0041562C Relevance: 1.5, APIs: 1, Instructions: 3COMMON

Download Yara Rule

APIs

SetUnhandledExceptionFilter.KERNEL32 ref: 00415631

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ExceptionFilterUnhandled
String ID:
API String ID: 3192549508-0
Opcode ID: 80fdf592cfe35f6ca0a49e156fc06359dfcc477da488757324292bdf2a3d88f1
Instruction ID: 3aa75b883a8314cf8793ebdd48d7cbf343a2d53b1036c531b3b3a2656884bc9f
Opcode Fuzzy Hash: 80fdf592cfe35f6ca0a49e156fc06359dfcc477da488757324292bdf2a3d88f1
Instruction Fuzzy Hash:

Function 00412480 Relevance: .5, Instructions: 481COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27156ca4970ad7a14cafdd4d0f561c0251ce2efe8b7cb58f4bb8e0a1a151ff8a
Instruction ID: f7c307c9948f0502eef9bcc932476d7ce99f20ff48e31f419bd1d6f291c9dace
Opcode Fuzzy Hash: 27156ca4970ad7a14cafdd4d0f561c0251ce2efe8b7cb58f4bb8e0a1a151ff8a
Instruction Fuzzy Hash: BD023A72A042114BC71DCE18C6902B9BBE2FBD5350F110A3FE496D7A84D7B8D8E5CB99

Function 00416076 Relevance: .3, Instructions: 259COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc60ecf50bd115ca0c6ea2745a91e2bccda0b72c85d336beea95e2ba67d1c3a9
Instruction ID: 6f6e9ae2f3605818a2c8e7767e34e4a9399a597c595f09bc79f2493b2d2310b3
Opcode Fuzzy Hash: fc60ecf50bd115ca0c6ea2745a91e2bccda0b72c85d336beea95e2ba67d1c3a9
Instruction Fuzzy Hash: 3EB17C7590120ADFDB15CF04C5D0AE9BBA1FF58318F25C1AEC85A4B382C735EA86CB94

Function 004039C8 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8b1b8b3e4e9aa519cc0883e8f2e9399227ae21cf5f78173f93e12a8e0ced7762
Instruction ID: 7f21fa5966f3e8744179bfb474c2758024c7c669c00a9d4920a80f5d7b425c19
Opcode Fuzzy Hash: 8b1b8b3e4e9aa519cc0883e8f2e9399227ae21cf5f78173f93e12a8e0ced7762
Instruction Fuzzy Hash: D621427E370D0607A71C8B6AAD336B921D1E38430A7C8A03DE64BC53C1EE6DD595C60D

Function 00418CC1 Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a91e830b051fd3563903b3b4c558af91fd9d6843125d3e1887e1db665648e344
Instruction ID: 99a347de7b16eca0cbeab8721e5afb4e5ad46217b84f2e64c48f172e38bf97ef
Opcode Fuzzy Hash: a91e830b051fd3563903b3b4c558af91fd9d6843125d3e1887e1db665648e344
Instruction Fuzzy Hash: 2B21C83290062547C702DE6DF4845A7F391FBD4369F134727ED8467291C629A854D6E0

Function 00418D9B Relevance: .1, Instructions: 70COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d88b4545622fc2f48369f3988b55fed1d0241348448e0d26e09a3dd7181b3030
Instruction ID: 71e75c779d64757812c6fa0593de5e91038406040dd0a6985e9d44633d38c26d
Opcode Fuzzy Hash: d88b4545622fc2f48369f3988b55fed1d0241348448e0d26e09a3dd7181b3030
Instruction Fuzzy Hash: BC2137725105258BC701DF2DF4886B7B3E1FFD4319F638A3BD8818B1C1CA29D881D694

Function 004185ED Relevance: 17.7, APIs: 9, Strings: 1, Instructions: 177COMMON

Download Yara Rule

APIs

LCMapStringW.KERNEL32(00000000,00000100,0041BE00,00000001,00000000,00000000,74DEE860,004256E4,?,?,?,0041848E,?,?,?,00000000), ref: 0041862F
LCMapStringA.KERNEL32(00000000,00000100,0041BDFC,00000001,00000000,00000000,?,?,0041848E,?,?,?,00000000,00000001), ref: 0041864B
LCMapStringA.KERNEL32(?,?,?,0041848E,?,?,74DEE860,004256E4,?,?,?,0041848E,?,?,?,00000000), ref: 00418694
MultiByteToWideChar.KERNEL32(?,VB,?,0041848E,00000000,00000000,74DEE860,004256E4,?,?,?,0041848E,?,?,?,00000000), ref: 004186CC
MultiByteToWideChar.KERNEL32(00000000,00000001,?,0041848E,?,00000000,?,?,0041848E,?), ref: 00418724
LCMapStringW.KERNEL32(?,?,00000000,00000000,00000000,00000000,?,?,0041848E,?), ref: 0041873A
LCMapStringW.KERNEL32(?,?,?,00000000,?,?,?,?,0041848E,?), ref: 0041876D
LCMapStringW.KERNEL32(?,?,?,?,?,00000000,?,?,0041848E,?), ref: 004187D5

Strings

VB, xrefs: 004186BD, 004186C8

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: String$ByteCharMultiWide
String ID: VB
API String ID: 352835431-2416070386
Opcode ID: 003663a998c404720e509784b904756e9dc21287fecc91c3ae78f0538cf30181
Instruction ID: 75fdc42d4ca3b2d5695a32d80f34dcfea13c9c9e1b2be43f5f9a41df7731755a
Opcode Fuzzy Hash: 003663a998c404720e509784b904756e9dc21287fecc91c3ae78f0538cf30181
Instruction Fuzzy Hash: A6515F31900609EFCF218F65CC45EEF7FB5FB48754F20412AF925A12A0D7398991DBA9

Function 004172DF Relevance: 15.9, APIs: 8, Strings: 1, Instructions: 132COMMON

Download Yara Rule

APIs

GetEnvironmentStringsW.KERNEL32(?,00000000,?,?,?,?,0041496A), ref: 004172FA
GetEnvironmentStrings.KERNEL32(?,00000000,?,?,?,?,0041496A), ref: 0041730E
GetEnvironmentStringsW.KERNEL32(?,00000000,?,?,?,?,0041496A), ref: 0041733A
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000001,00000000,00000000,00000000,00000000,?,00000000,?,?,?,?,0041496A), ref: 00417372
WideCharToMultiByte.KERNEL32(00000000,00000000,00000000,00000000,00000000,00000000,00000000,00000000,?,00000000,?,?,?,?,0041496A), ref: 00417394
FreeEnvironmentStringsW.KERNEL32(00000000,?,00000000,?,?,?,?,0041496A), ref: 004173AD
GetEnvironmentStrings.KERNEL32(?,00000000,?,?,?,?,0041496A), ref: 004173C0
FreeEnvironmentStringsA.KERNEL32(00000000), ref: 004173FE

Strings

jIA, xrefs: 004173A8, 0041739A

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: EnvironmentStrings$ByteCharFreeMultiWide
String ID: jIA
API String ID: 1823725401-2590053038
Opcode ID: dcd9eacb03994a91aa73d6441958e3731b9086dbddb026e1bfa459d91ea586b1
Instruction ID: 8edd1d2af646b02ed721f394ba4169bf36ee68eca66066dd640126c456dfff16
Opcode Fuzzy Hash: dcd9eacb03994a91aa73d6441958e3731b9086dbddb026e1bfa459d91ea586b1
Instruction Fuzzy Hash: 7631D47250C219AFD7317F689C888FB7ABCE649354715053BFD66C3201E6288CC1E2AD

Function 00417606 Relevance: 14.1, APIs: 3, Strings: 5, Instructions: 100fileCOMMONLIBRARYCODE

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,?,00000104,?), ref: 00417673
GetStdHandle.KERNEL32(000000F4,0041BD34,00000000,00000000,00000000,?), ref: 00417749
WriteFile.KERNEL32(00000000), ref: 00417750

Strings

Microsoft Visual C++ Runtime Library, xrefs: 0041771F
x*B, xrefs: 00417614
..., xrefs: 004176C5
Runtime Error!Program: , xrefs: 004176D9
<program name unknown>, xrefs: 00417683

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: File$HandleModuleNameWrite
String ID: ...$<program name unknown>$Microsoft Visual C++ Runtime Library$Runtime Error!Program: $x*B
API String ID: 3784150691-2083536112
Opcode ID: 9f3ee68eedca8c04870b7c4ba6519361572a149120d3a6d5458ca0bba870cf42
Instruction ID: d3223577c50248063a34d8f4d7298abe086d5d3d0ee639c6b3bd3f24b9ad2996
Opcode Fuzzy Hash: 9f3ee68eedca8c04870b7c4ba6519361572a149120d3a6d5458ca0bba870cf42
Instruction Fuzzy Hash: 5931D2726002186FDF20DA60DD46FDA377DEF89304F5005ABF544D6181EB78AAC48B5D

Function 0041883C Relevance: 12.4, APIs: 6, Strings: 1, Instructions: 117COMMON

Download Yara Rule

APIs

GetStringTypeW.KERNEL32(00000001,0041BE00,00000001,?,74DEE860,004256E4,?,?,0041848E,?,?,?,00000000,00000001), ref: 0041887B
GetStringTypeA.KERNEL32(00000000,00000001,0041BDFC,00000001,?,?,0041848E,?,?,?,00000000,00000001), ref: 00418895
GetStringTypeA.KERNEL32(?,?,?,?,0041848E,74DEE860,004256E4,?,?,0041848E,?,?,?,00000000,00000001), ref: 004188C9
MultiByteToWideChar.KERNEL32(?,VB,?,?,00000000,00000000,74DEE860,004256E4,?,?,0041848E,?,?,?,00000000,00000001), ref: 00418901
MultiByteToWideChar.KERNEL32(?,00000001,?,?,?,?,?,?,?,?,0041848E,?), ref: 00418957
GetStringTypeW.KERNEL32(?,?,00000000,0041848E,?,?,?,?,?,?,0041848E,?), ref: 00418969

Strings

VB, xrefs: 004188F2, 004188FD

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: StringType$ByteCharMultiWide
String ID: VB
API String ID: 3852931651-2416070386
Opcode ID: f366ae1a1c4feb3856e7e49d67d86268e533ee02966d98845c911f14f75699a6
Instruction ID: 0deb4df31157d4fbbd2276260d368b45192e758527c12e7bc8b96f729eb23429
Opcode Fuzzy Hash: f366ae1a1c4feb3856e7e49d67d86268e533ee02966d98845c911f14f75699a6
Instruction Fuzzy Hash: 85418FB2A00209BFCF209F94DC86EEF7F79EB08754F10452AF915D2250C7389991DB99

Function 00417411 Relevance: 10.6, APIs: 5, Strings: 1, Instructions: 150COMMON

Download Yara Rule

APIs

GetStartupInfoA.KERNEL32(?), ref: 0041746F
GetFileType.KERNEL32(?,?,00000000), ref: 0041751A
GetStdHandle.KERNEL32(-000000F6,?,00000000), ref: 0041757D
GetFileType.KERNEL32(00000000,?,00000000), ref: 0041758B
SetHandleCount.KERNEL32 ref: 004175C2

Strings

$YB, xrefs: 004174A9

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FileHandleType$CountInfoStartup
String ID: $YB
API String ID: 1710529072-867103119
Opcode ID: 0f20f78b1d243ceb825b791af9b59c2038ed572102f9f62c4ccf998fd163e942
Instruction ID: 9157860cf2e7af3a35f89051d0ae9de0bf945cd889ae2d4a6076f2c4651d7c80
Opcode Fuzzy Hash: 0f20f78b1d243ceb825b791af9b59c2038ed572102f9f62c4ccf998fd163e942
Instruction Fuzzy Hash: B75135716086019FC720CF28D8897B63BB1EB05338F64466EC566CB6E0DB38C986C75D

Function 00415680 Relevance: 8.9, APIs: 3, Strings: 2, Instructions: 115COMMON

Download Yara Rule

APIs

GetVersionExA.KERNEL32 ref: 0041569F
GetEnvironmentVariableA.KERNEL32(__MSVCRT_HEAP_SELECT,?,00001090), ref: 004156D4
GetModuleFileNameA.KERNEL32(00000000,?,00000104), ref: 00415734

Strings

__MSVCRT_HEAP_SELECT, xrefs: 004156CF
__GLOBAL_HEAP_SELECTED, xrefs: 0041570E

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: EnvironmentFileModuleNameVariableVersion
String ID: __GLOBAL_HEAP_SELECTED$__MSVCRT_HEAP_SELECT
API String ID: 1385375860-4131005785
Opcode ID: 352f7edc9f3896d13c070371f2d33d0b51665e116eb32c5a0d287e401f1eefe3
Instruction ID: 6eb182bd46f731c3af8b1d07a07b8df2d0194a1b299ff80343aa6f034c3c884c
Opcode Fuzzy Hash: 352f7edc9f3896d13c070371f2d33d0b51665e116eb32c5a0d287e401f1eefe3
Instruction Fuzzy Hash: 56312671945648EDEB3186706C87BDF3B788B46704F6400DBD199D52C2E6398ECA8B2D

Function 00403A90 Relevance: 7.6, APIs: 5, Instructions: 57COMMONLIBRARYCODE

Download Yara Rule

APIs

CharUpperW.USER32(00000000,00000000,?,00000000,00000000,?,00403B58), ref: 00403AAB
GetLastError.KERNEL32(?,00000000,00000000,?,00403B58), ref: 00403AB7
WideCharToMultiByte.KERNEL32(00000000,00000000,?,00000001,?,00000004,00000000,00000000,?,00000000,00000000,?,00403B58), ref: 00403AD2
CharUpperA.USER32(?,?,00000000,00000000,?,00403B58), ref: 00403AEB
MultiByteToWideChar.KERNEL32(00000000,00000000,?,00000000,?,00000001,?,00000000,00000000,?,00403B58), ref: 00403AFE

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Char$ByteMultiUpperWide$ErrorLast
String ID:
API String ID: 3939315453-0
Opcode ID: 7c2300f256f82e2aee6372cd28c35fbf20af8ddddc15953858da8d33bcd8cfd2
Instruction ID: dd72d820dddc2be4d64e736f5eaa813d5c8cd4bb6d440344005d5656a272e87c
Opcode Fuzzy Hash: 7c2300f256f82e2aee6372cd28c35fbf20af8ddddc15953858da8d33bcd8cfd2
Instruction Fuzzy Hash: D60144B64002187ADB10ABE49C89DEBBE7CEB04259F014472F952E2281E2796E4487A8

Function 004152F3 Relevance: 7.5, APIs: 5, Instructions: 38threadCOMMON

Download Yara Rule

APIs

GetLastError.KERNEL32(00000103,7FFFFFFF,00416CBF,0041798E,00000000,?,?,00000000,00000001), ref: 004152F5
TlsGetValue.KERNEL32(?,?,00000000,00000001), ref: 00415303
SetLastError.KERNEL32(00000000,?,?,00000000,00000001), ref: 0041534F

Part of subcall function 00416CCC: HeapAlloc.KERNEL32(00000008,?,00000000,00000000,00000001,00415318,00000001,00000074,?,?,00000000,00000001), ref: 00416DC2

TlsSetValue.KERNEL32(00000000,?,?,00000000,00000001), ref: 00415327
GetCurrentThreadId.KERNEL32 ref: 00415338

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: ErrorLastValue$AllocCurrentHeapThread
String ID:
API String ID: 2020098873-0
Opcode ID: 9020ed6c5573c52789434ca8060b3935b73b18465b1892a80f2ba475462c6b54
Instruction ID: c348f308811c55cc6791f5f2c72cac7d5a6c02788d8c3db17f30136ca92006f7
Opcode Fuzzy Hash: 9020ed6c5573c52789434ca8060b3935b73b18465b1892a80f2ba475462c6b54
Instruction Fuzzy Hash: B4F09632600615ABC6312B70AC096DB3A51EB857E1B15413AF951972A0DB78888197DD

Function 0041843D Relevance: 7.0, APIs: 3, Strings: 1, Instructions: 44COMMON

Download Yara Rule

APIs

InterlockedIncrement.KERNEL32(004256E4), ref: 00418463
InterlockedDecrement.KERNEL32(004256E4), ref: 00418478

Strings

VB, xrefs: 0041845C

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Interlocked$DecrementIncrement
String ID: VB
API String ID: 2172605799-2416070386
Opcode ID: 3f0e7dfc381ab69d5717ddb5ba06b4fa70db5411652d110c580bb33579a080f3
Instruction ID: b2465ecea32c92352f716010131fb348419f683e9d2febfe3e70f5b1b578e6df
Opcode Fuzzy Hash: 3f0e7dfc381ab69d5717ddb5ba06b4fa70db5411652d110c580bb33579a080f3
Instruction Fuzzy Hash: 35F0C232201612EBD720AF56ECC19CF6755EB81326F50843FF00989190DF7899C2995E

Function 0041435F Relevance: 6.5, APIs: 5, Instructions: 278COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d56ffb8a6685455f091880630799685eddd8ac587d3428563be9e88dd716d36c
Instruction ID: 1ac5c9ddcf095474d6e2a383ff06e8771fc838f6ee07df02b13506851481717d
Opcode Fuzzy Hash: d56ffb8a6685455f091880630799685eddd8ac587d3428563be9e88dd716d36c
Instruction Fuzzy Hash: C891F671D01618ABCF21AB69CC41ADE7BB9EB857A4F240127F814B6290D73D8DC18A6C

Function 0041636C Relevance: 6.4, APIs: 5, Instructions: 102memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

HeapAlloc.KERNEL32(00000000,00002020,00420838,00420838,?,?,00416838,00000000,00000010,00000000,00000009,00000009,?,00413D1F,00000010,00000000), ref: 0041638D
VirtualAlloc.KERNEL32(00000000,00400000,00002000,00000004,?,?,00416838,00000000,00000010,00000000,00000009,00000009,?,00413D1F,00000010,00000000), ref: 004163B1
VirtualAlloc.KERNEL32(00000000,00010000,00001000,00000004,?,?,00416838,00000000,00000010,00000000,00000009,00000009,?,00413D1F,00000010,00000000), ref: 004163CB
VirtualFree.KERNEL32(00000000,00000000,00008000,?,?,00416838,00000000,00000010,00000000,00000009,00000009,?,00413D1F,00000010,00000000,?), ref: 0041648C
HeapFree.KERNEL32(00000000,00000000,?,?,00416838,00000000,00000010,00000000,00000009,00000009,?,00413D1F,00000010,00000000,?,00000000), ref: 004164A3

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AllocVirtual$FreeHeap
String ID:
API String ID: 714016831-0
Opcode ID: 61edb7c5b2a57b73fa0373c8b0061bfd64d3e4def081ef99dbe098b98f3bc666
Instruction ID: 1d273cd761051d77879f543994291e2c1f364a84a1ace75b4c6a1ba38ea4645d
Opcode Fuzzy Hash: 61edb7c5b2a57b73fa0373c8b0061bfd64d3e4def081ef99dbe098b98f3bc666
Instruction Fuzzy Hash: 1D310370640711EFD3309F24DC85BA6B7E4EB84764F12823AE56997791E778E881CB8C

Function 00409504 Relevance: 6.1, APIs: 4, Instructions: 98COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 00409509

Part of subcall function 0040935A: EnterCriticalSection.KERNEL32(?,?,?,00409680), ref: 0040935F
Part of subcall function 0040935A: LeaveCriticalSection.KERNEL32(?,?,?,00409680), ref: 00409369

EnterCriticalSection.KERNEL32(?), ref: 00409536
LeaveCriticalSection.KERNEL32(?), ref: 00409552
__aulldiv.LIBCMT ref: 004095A1

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalSection$EnterLeave$H_prolog__aulldiv
String ID:
API String ID: 3848147900-0
Opcode ID: a31f7f313dfc0da48c948196a335c5e8fea939b4dae7cffcd2385e59b1d35c73
Instruction ID: 81a485ad15cb22f282f6c018201ee4179c2b1d1cd2674c5f201a60282c37c453
Opcode Fuzzy Hash: a31f7f313dfc0da48c948196a335c5e8fea939b4dae7cffcd2385e59b1d35c73
Instruction Fuzzy Hash: C6315076A00215AFCB11EF65C8819EFBBB5FF88704F00442AE51673692D779AD41CB64

Function 004047A8 Relevance: 6.1, APIs: 4, Instructions: 55windowCOMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 004047AD
FormatMessageA.KERNEL32(00001300,00000000,?,00000000,?,00000000,00000000,?,00000000), ref: 004047D1
FormatMessageW.KERNEL32(00001300,00000000,?,00000000,?,00000000,00000000,?,00000000), ref: 00404814
LocalFree.KERNEL32(?,?,?,00000000,?,00000000,00000000,?,00000000), ref: 0040482F

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FormatMessage$FreeH_prologLocal
String ID:
API String ID: 3392428314-0
Opcode ID: d8114c00c851820dfd69355ab4a5a7d10c3f97c7ff5c1a94d174072509a20bce
Instruction ID: b23ee79e455563f0a2b187c1bc8aea4849c6785c5b1f5abfa42b55bee9ed31b8
Opcode Fuzzy Hash: d8114c00c851820dfd69355ab4a5a7d10c3f97c7ff5c1a94d174072509a20bce
Instruction Fuzzy Hash: 451170B5A00159AFDF01BFA59C419FFBB7DEF44349F00847AE112721E2DB391A01DA68

Function 00409374 Relevance: 6.0, APIs: 4, Instructions: 37windowtimeCOMMON

Download Yara Rule

APIs

Part of subcall function 00413030: SetEvent.KERNEL32(00000000,0040756D), ref: 00413033

GetDlgItem.USER32(?,000003E8), ref: 00409397
LoadIconA.USER32(00000000), ref: 004093B1
SendMessageA.USER32(?,00000080,00000001,00000000), ref: 004093C2
SetTimer.USER32(?,00000003,00000064,00000000), ref: 004093D1

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: EventIconItemLoadMessageSendTimer
String ID:
API String ID: 2758541657-0
Opcode ID: 426d8240eb7a06a459b3f470407d996c0274358d2b71b1374ad8138c79f04d47
Instruction ID: 34d2fc59b34559bed7d893ef409eb69d6d7528a9cba69d030baf66432b50efa3
Opcode Fuzzy Hash: 426d8240eb7a06a459b3f470407d996c0274358d2b71b1374ad8138c79f04d47
Instruction Fuzzy Hash: 4D015A30100B00AFD3319F21DD5AB66BBA1FB04721F008A2DF5A7959F0CB75B942CB48

Function 0040D5A3 Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 185COMMON

Download Yara Rule

APIs

__EH_prolog.LIBCMT ref: 0040D5A8

Strings

, xrefs: 0040D75F
, xrefs: 0040D787

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: H_prolog
String ID: $
API String ID: 3519838083-227171996
Opcode ID: 74feb26567ea79c8fd9d5f3f589634721b0a9a4a518abdc39c0b6b7ccedab932
Instruction ID: 116f94ee193b6a60a58d4aec76a07daa8eefdeb27c95ac76265691768f75313a
Opcode Fuzzy Hash: 74feb26567ea79c8fd9d5f3f589634721b0a9a4a518abdc39c0b6b7ccedab932
Instruction Fuzzy Hash: CB712431D0020A9FCB24DF99D981AAEB7B1FF48314F20467ED416B7691D734AA8ACF54

Function 00417E5D Relevance: 5.4, APIs: 1, Strings: 2, Instructions: 124COMMON

Download Yara Rule

APIs

GetCPInfo.KERNEL32(?,00000000), ref: 00417E71

Strings

, xrefs: 00417E96
, xrefs: 00417EBA

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: Info
String ID: $
API String ID: 1807457897-3032137957
Opcode ID: be8999de8ad5c30073bbd0379d60ad0f54c653f5d04d814f41e486670cb2e0db
Instruction ID: 669041dcfce0968cbe3c51124f50cac4b21f3f9a56807733dc4743f672ff05a2
Opcode Fuzzy Hash: be8999de8ad5c30073bbd0379d60ad0f54c653f5d04d814f41e486670cb2e0db
Instruction Fuzzy Hash: 65417C312482585AEB219714CC49FFB7FF9DB02714F5404E6D149C7153C2794AC6C7BA

Function 00417092 Relevance: 5.3, APIs: 1, Strings: 2, Instructions: 62COMMON

Download Yara Rule

APIs

GetModuleFileNameA.KERNEL32(00000000,C:\Users\user\Desktop\Setup.exe,00000104,?,00000000,?,?,?,?,00414974), ref: 004170B5

Strings

C:\Users\user\Desktop\Setup.exe, xrefs: 004170A9, 004170B3, 004170D8, 0041710E
@%W, xrefs: 004170BB

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: FileModuleName
String ID: @%W$C:\Users\user\Desktop\Setup.exe
API String ID: 514040917-3979853436
Opcode ID: 84d053b036df48e784d9c40d8f72a4f01e20f52c816047791c4f4213c32035a1
Instruction ID: bf09e70cde018ed4875ba2e87c80884ade2fb8340569e7ccc03294431e74d33e
Opcode Fuzzy Hash: 84d053b036df48e784d9c40d8f72a4f01e20f52c816047791c4f4213c32035a1
Instruction Fuzzy Hash: 591151B6A00219BFC721EF94DCC1CDBBBBCEB08758B5100ABF50597201EA745F4587A8

Function 00415ECA Relevance: 5.1, APIs: 4, Instructions: 53memoryCOMMONLIBRARYCODE

Download Yara Rule

APIs

HeapReAlloc.KERNEL32(00000000,00000050,00000000,00000000,00415C92,00000000,00000000,00000000,00413CC1,00000000,00000000,?,00000000,00000000,00000000), ref: 00415EF2
HeapAlloc.KERNEL32(00000008,000041C4,00000000,00000000,00415C92,00000000,00000000,00000000,00413CC1,00000000,00000000,?,00000000,00000000,00000000), ref: 00415F26
VirtualAlloc.KERNEL32(00000000,00100000,00002000,00000004), ref: 00415F40
HeapFree.KERNEL32(00000000,?), ref: 00415F57

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: AllocHeap$FreeVirtual
String ID:
API String ID: 3499195154-0
Opcode ID: 712f9e2f9eec85a92a3a672498402ffd9fd7e765c5a6c8233a1a124cbc29739c
Instruction ID: 8f6381cf99308f7e34b2c2e49534b1224184cafd179dea44f4322364d011a6a4
Opcode Fuzzy Hash: 712f9e2f9eec85a92a3a672498402ffd9fd7e765c5a6c8233a1a124cbc29739c
Instruction Fuzzy Hash: A6114C31300A01EFC7308F59EC86DA6BBB5FB85760791462AF156D69B0D3719887CF58

Function 004154B1 Relevance: 5.0, APIs: 4, Instructions: 12COMMON

Download Yara Rule

APIs

InitializeCriticalSection.KERNEL32(?,00415292,?,00414944), ref: 004154BE
InitializeCriticalSection.KERNEL32(?,00415292,?,00414944), ref: 004154C6
InitializeCriticalSection.KERNEL32(?,00415292,?,00414944), ref: 004154CE
InitializeCriticalSection.KERNEL32(?,00415292,?,00414944), ref: 004154D6

Memory Dump Source

Source File: 00000000.00000002.3510886327.0000000000401000.00000020.00000001.01000000.00000003.sdmp, Offset: 00400000, based on PE: true

Associated: 00000000.00000002.3510868827.0000000000400000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510908892.000000000041B000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510926536.0000000000420000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510944992.0000000000422000.00000008.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510965673.0000000000423000.00000004.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.3510985567.0000000000427000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_400000_Setup.jbxd

Similarity

API ID: CriticalInitializeSection
String ID:
API String ID: 32694325-0
Opcode ID: ec7037d00a0fc94f488d53f3a91d2e26ae03bdd42e29aafad6c46e686e3ec5a2
Instruction ID: a8e831e61b8b61633fe4a4176da74b0e9d16ee726bcd83620c475df078586321
Opcode Fuzzy Hash: ec7037d00a0fc94f488d53f3a91d2e26ae03bdd42e29aafad6c46e686e3ec5a2
Instruction Fuzzy Hash: 0AC00231A11138ABCF312B55FC048463FA6EB852A03518072A1045203186612C12EFD8

Analysis Process: WebCompanion-Installer.exePID: 5040, Parent PID: 5808COMMON

Executed Functions

Function 06AE7120 Relevance: 1.7, Strings: 1, Instructions: 436COMMON

Download Yara Rule

Strings

\;^q, xrefs: 06AE7167

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: \;^q
API String ID: 0-2342212615
Opcode ID: b72fb20e0043f1a384d91293f3c6ebcd9b4c7cbb72f8114146267a48c475fbce
Instruction ID: 12b2c8ae7c3f4e076dd87bf0a171b4c266f29f51cc645a5a81b3a0b46e3a3694
Opcode Fuzzy Hash: b72fb20e0043f1a384d91293f3c6ebcd9b4c7cbb72f8114146267a48c475fbce
Instruction Fuzzy Hash: BE122930D1071ACFEB60EF64C844798B7B2FF95300F11869AD9497B251EB74AA89CF91

Function 06B99E60 Relevance: 1.5, Strings: 1, Instructions: 281COMMON

Download Yara Rule

Strings

\Vam, xrefs: 06B9A117

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: \Vam
API String ID: 0-2269870599
Opcode ID: 66d4689a8ec9a9b53ac2e55fdbc93885b0d7c3fcc87e8302585b1b9b5a9f4302
Instruction ID: ae4e6e5864536ee62e21ca2dfdc16fb594ce2381b6be74477feec2333d4c1d0f
Opcode Fuzzy Hash: 66d4689a8ec9a9b53ac2e55fdbc93885b0d7c3fcc87e8302585b1b9b5a9f4302
Instruction Fuzzy Hash: B0B15DB0E002198FDF54CFA9C8857AEBBF2EF89304F148579E415E7294EB749885CB91

Function 02AEF0D0 Relevance: .7, Instructions: 749COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 768c815e22d6a26b35dc00b4b26eb95dbd6c2564ced5283d3a26ff7e354fcb4c
Instruction ID: 3a352df2452b4ba7494152db18e38e34b6bfa1fd739540ef6325ea6b1d9f9ca9
Opcode Fuzzy Hash: 768c815e22d6a26b35dc00b4b26eb95dbd6c2564ced5283d3a26ff7e354fcb4c
Instruction Fuzzy Hash: 8062EB34A002188FDB15DF64D995B6DBBB2FF88301F1084A9E90AAB395DF359D86CF50

Function 060A0F90 Relevance: .6, Instructions: 617COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7190c4384fddf2c5a83a44d3b451fc63f0cc7759cfc3e941fc8be3a45540f315
Instruction ID: a521a8db33f519bd6c27597cb1d5d83f075f49030377ee5b778f422b80e7a51f
Opcode Fuzzy Hash: 7190c4384fddf2c5a83a44d3b451fc63f0cc7759cfc3e941fc8be3a45540f315
Instruction Fuzzy Hash: 12424970F002149FDBA4DFA8D9987ADBBF2FF88340F148169D50AA7391DB78A945CB41

Function 02AE0DE0 Relevance: .6, Instructions: 607COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd180cd1cce36b1d377c0c2d80869fcec62705712ba95f8c2bcf1b84a8afaa48
Instruction ID: 4631546c4f016e58d075b71daedb6777bd6c6379d24859c9e656f6391a69aa43
Opcode Fuzzy Hash: fd180cd1cce36b1d377c0c2d80869fcec62705712ba95f8c2bcf1b84a8afaa48
Instruction Fuzzy Hash: 7E425734A002188FCB54EB78D85876D77BAFB88305F108569E41AEB3A8DF74AD46CF51

Function 06B9B1B0 Relevance: .3, Instructions: 320COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 55648f85409296d8a8e0eedd1edf2e80c9e929bffae38fa79bf9d8691d8f2a85
Instruction ID: c23693fcf66bfa707bc28b15554502e0c5d7a758f08be3f18d586de0ad139fc7
Opcode Fuzzy Hash: 55648f85409296d8a8e0eedd1edf2e80c9e929bffae38fa79bf9d8691d8f2a85
Instruction Fuzzy Hash: 50B17F70B002099FDB489B7999547BFBAEBEFC8240F188469E506D73A4DE35DC46C760

Function 06B9A730 Relevance: .3, Instructions: 266COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f2af737b4c5b812ed797b3624bebee92ffac50f0d137a667a42f972b24fd584
Instruction ID: a9622433e78ed1e91e3e7b0bbe0b33c6e3c0e6187a114f3d718497e1a107e306
Opcode Fuzzy Hash: 6f2af737b4c5b812ed797b3624bebee92ffac50f0d137a667a42f972b24fd584
Instruction Fuzzy Hash: 02B18CB0E002098FDF54CFA9C9817AEBBF2FF88314F149579D815A7294EB749846CB91

Function 06AE0438 Relevance: 21.0, Strings: 16, Instructions: 1010COMMON

Download Yara Rule

Strings

c^q, xrefs: 06AE0A1D
4c^q, xrefs: 06AE14F2
$&_q, xrefs: 06AE0984
$^q, xrefs: 06AE15F9
c^q, xrefs: 06AE146D
`q, xrefs: 06AE0654
4'^q, xrefs: 06AE0DAC
`q, xrefs: 06AE0588
$^q, xrefs: 06AE0B9A
4'^q, xrefs: 06AE1577
(_^q, xrefs: 06AE0AEF
4c^q, xrefs: 06AE0951
4'^q, xrefs: 06AE0CA5
4'^q, xrefs: 06AE0D27
|-_q, xrefs: 06AE04BC
@b^q, xrefs: 06AE0C0C

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: `q$$&_q$(_^q$4'^q$4'^q$4'^q$4'^q$4c^q$4c^q$@b^q$|-_q$$^q$$^q$c^q$c^q$`q
API String ID: 0-3238858861
Opcode ID: 297ec15a8556d7d5dd6c6dbd43ad14806e7976dbbf856cefae5a3aa9d64b3bf0
Instruction ID: f3359c9ecb13febb13931b0503fd94f37566c4e9fe6230841b117f7d041911c9
Opcode Fuzzy Hash: 297ec15a8556d7d5dd6c6dbd43ad14806e7976dbbf856cefae5a3aa9d64b3bf0
Instruction Fuzzy Hash: EFB2E574A41228CFDB65AF64C944ADDBBB2FF89300F1044E9D50A6B3A4DB359E85CF81

Function 06AE0448 Relevance: 21.0, Strings: 16, Instructions: 1000COMMON

Download Yara Rule

Strings

c^q, xrefs: 06AE0A1D
4c^q, xrefs: 06AE14F2
$&_q, xrefs: 06AE0984
$^q, xrefs: 06AE15F9
c^q, xrefs: 06AE146D
`q, xrefs: 06AE0654
4'^q, xrefs: 06AE0DAC
`q, xrefs: 06AE0588
$^q, xrefs: 06AE0B9A
4'^q, xrefs: 06AE1577
(_^q, xrefs: 06AE0AEF
4c^q, xrefs: 06AE0951
4'^q, xrefs: 06AE0CA5
4'^q, xrefs: 06AE0D27
|-_q, xrefs: 06AE04BC
@b^q, xrefs: 06AE0C0C

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: `q$$&_q$(_^q$4'^q$4'^q$4'^q$4'^q$4c^q$4c^q$@b^q$|-_q$$^q$$^q$c^q$c^q$`q
API String ID: 0-3238858861
Opcode ID: 920d224ecfd142f0291c3020f0c7cf5d1b5671522861d8dcf184e03452529016
Instruction ID: f3302f0bd15f879602b6dfad7fb63ab297eee5669ea9373d5a05165b344e86af
Opcode Fuzzy Hash: 920d224ecfd142f0291c3020f0c7cf5d1b5671522861d8dcf184e03452529016
Instruction Fuzzy Hash: 76B2E574A41228CFDB65AF64C944ADDBBB2FF89300F1045E9D50A6B3A4DB359E85CF80

Function 06AE9E20 Relevance: 7.7, Strings: 6, Instructions: 223COMMON

Download Yara Rule

Strings

$^q, xrefs: 06AE9FFA
$^q, xrefs: 06AE9EDB
$^q, xrefs: 06AE9FEE
$^q, xrefs: 06AE9ECF
$^q, xrefs: 06AE9F04
4'^q, xrefs: 06AE9F13

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q$$^q$$^q$$^q$$^q$$^q
API String ID: 0-3616224387
Opcode ID: 3eb86fe17570437fcc649c18490da90fe9b8aa9b1de4f6d2770883eed451424c
Instruction ID: 7b7e2f9049b79bafa778bb94a67739e52b8bbaf60d74b1ac66eca63bf2e7b726
Opcode Fuzzy Hash: 3eb86fe17570437fcc649c18490da90fe9b8aa9b1de4f6d2770883eed451424c
Instruction Fuzzy Hash: 5D717D317502199FDB59AF68D85492A7BFAFF88600B10445AF606CF3A5CF76CC46CBA0

Function 06AE3220 Relevance: 6.6, Strings: 5, Instructions: 327COMMON

Download Yara Rule

Strings

\;^q, xrefs: 06AE3358
(bq, xrefs: 06AE35A2
\;^q, xrefs: 06AE334C
\;^q, xrefs: 06AE331E
(bq, xrefs: 06AE3501

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$(bq$\;^q$\;^q$\;^q
API String ID: 0-308958514
Opcode ID: e59126d390f059914e6446f37d4e25236ff5ff08866578d2c9b065a232164126
Instruction ID: 7b7234d05a3271c16bdd7d12df04ff195429b80e04c6056875b1165d756e6420
Opcode Fuzzy Hash: e59126d390f059914e6446f37d4e25236ff5ff08866578d2c9b065a232164126
Instruction Fuzzy Hash: 9EB1B130B442198FDB54AB6DC554A6EFBFAAF88350B14846AE806DB3A4DE36DC418790

Function 058CA039 Relevance: 5.1, Strings: 4, Instructions: 105COMMON

Download Yara Rule

Strings

$^q, xrefs: 058CA131
$^q, xrefs: 058CA0F8
$^q, xrefs: 058CA0EC
$^q, xrefs: 058CA125

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: $^q$$^q$$^q$$^q
API String ID: 0-2125118731
Opcode ID: 3768440b244e9c1e6aeaa1c264cee56184bb1098dd260856e61464b0d38b7f19
Instruction ID: f5d6a3431f3f7efb0d92ae9265d18b2ff00eb2645b5323928fdea3734290c17f
Opcode Fuzzy Hash: 3768440b244e9c1e6aeaa1c264cee56184bb1098dd260856e61464b0d38b7f19
Instruction Fuzzy Hash: 55411E70A0020DCFDB18EF65C954BAEBBB2BF88304F5485AAD806EB255DB75DC41CB51

Function 06B90040 Relevance: 4.2, Strings: 3, Instructions: 485COMMON

Download Yara Rule

Strings

, xrefs: 06B9013F
, xrefs: 06B9015E
Hbq, xrefs: 06B90A33

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: $$Hbq
API String ID: 0-767690520
Opcode ID: f5cc2750cba2c1e41671d0241280f0facb2dfd75927cced9c06fd5a0f22d6a7d
Instruction ID: aa13efeac7daf81406cf5ca11dc7c29a157c60d726664ad043c379e848bb25d3
Opcode Fuzzy Hash: f5cc2750cba2c1e41671d0241280f0facb2dfd75927cced9c06fd5a0f22d6a7d
Instruction Fuzzy Hash: DE32E4B4D05204CFDB55DF44C688AADBBF2EB04315F16D0A9D4166F2A2D37AD889CFA0

Function 06AEC558 Relevance: 4.2, Strings: 3, Instructions: 424COMMON

Download Yara Rule

Strings

(bq, xrefs: 06AEC944
(bq, xrefs: 06AEC877
(bq, xrefs: 06AEC8A3

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$(bq$(bq
API String ID: 0-2716923250
Opcode ID: f6f2b076db487e50ea1cd8f4f25a865c69e3dad73a45e909a10ebfb0babd8317
Instruction ID: d029c73ffb4a5d677558552aba4bc3ad657eacb25f366c86b9c38220fbac81e4
Opcode Fuzzy Hash: f6f2b076db487e50ea1cd8f4f25a865c69e3dad73a45e909a10ebfb0babd8317
Instruction Fuzzy Hash: 83026E35A001189FDB44EF68D954AAEBBF2FF88310F108569E916AB3A5CB31DC45CF91

Function 06B90006 Relevance: 4.2, Strings: 3, Instructions: 415COMMON

Download Yara Rule

Strings

, xrefs: 06B9013F
, xrefs: 06B9015E
.dll, xrefs: 06B90006

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: $$.dll
API String ID: 0-2683726162
Opcode ID: f405a894ea6fde78d660ae05060523e926dd2de1fc0b85e6f29a39c17a0b23d8
Instruction ID: 40ed3513693d922cc6edfad269db37a23b99c8f299eae9f98d1f485ff5e877fd
Opcode Fuzzy Hash: f405a894ea6fde78d660ae05060523e926dd2de1fc0b85e6f29a39c17a0b23d8
Instruction Fuzzy Hash: 9F22D2B4D05204CFDB41DF44C688E69BBF2EB05359F16C0A9D4166F2A2D37AD949CFA0

Function 02AEB098 Relevance: 4.1, Strings: 3, Instructions: 319COMMON

Download Yara Rule

Strings

PH^q, xrefs: 02AEB11A
PH^q, xrefs: 02AEB18C
Hbq, xrefs: 02AEB404

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: Hbq$PH^q$PH^q
API String ID: 0-1943764995
Opcode ID: 283e2691493d3fdabd8010d52f336db4a0396f0c1f0423356a0efa0b5fa9e776
Instruction ID: de87227c1dcd999c8a5ef9833e1bd18756719ecaa25944b51eafcb65976779f6
Opcode Fuzzy Hash: 283e2691493d3fdabd8010d52f336db4a0396f0c1f0423356a0efa0b5fa9e776
Instruction Fuzzy Hash: B4C17D347002098FDB05DB78D998A6EBBB2FF88304F158569D906EB395DF349C46CBA1

Function 06AE5DF0 Relevance: 4.0, Strings: 3, Instructions: 205COMMON

Download Yara Rule

Strings

##, xrefs: 06AE5EEA
(Acq, xrefs: 06AE5F6B
C", xrefs: 06AE5E56

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (Acq$##$C"
API String ID: 0-1020493742
Opcode ID: b0c1b248be846d64f8d82459dffd8d06cb15f6a23950d6c5d8721ebace689350
Instruction ID: c7b6d0623fe1b0b9d9193943e0c00111aff008d468f1a643cf1bd9fdc31af680
Opcode Fuzzy Hash: b0c1b248be846d64f8d82459dffd8d06cb15f6a23950d6c5d8721ebace689350
Instruction Fuzzy Hash: CA71AC31F003199FCB55EFA5C55069EBBF2BF88304F208529D406AF385DB71994ACB90

Function 06AE5D60 Relevance: 3.9, Strings: 3, Instructions: 192COMMON

Download Yara Rule

Strings

##, xrefs: 06AE5EEA
(Acq, xrefs: 06AE5F6B
C", xrefs: 06AE5E56

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (Acq$##$C"
API String ID: 0-1020493742
Opcode ID: 7f75d7bf08d3ea164ed380948e712b3018352c0ed3cb027435e0ce482a507640
Instruction ID: 2f48e5ca4c417f8d1170bc597429959104e2a0182a2397d567b4aa2e864c4a1f
Opcode Fuzzy Hash: 7f75d7bf08d3ea164ed380948e712b3018352c0ed3cb027435e0ce482a507640
Instruction Fuzzy Hash: 7961F531E153649FDB05EF78D86069EBFF2AF86304F24806AD0459F256DB74984ACBD0

Function 06B9BF10 Relevance: 3.9, Strings: 3, Instructions: 168COMMON

Download Yara Rule

Strings

Hbq, xrefs: 06B9C04D
Hbq, xrefs: 06B9BFF5
(bq, xrefs: 06B9BFC9

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$Hbq$Hbq
API String ID: 0-2817990774
Opcode ID: d201f9544f5b92cf4150a4476741715dcd7e162418696a80a34c636aa8db7f33
Instruction ID: 7b6a28ddf9c61c2fccb870d5c8cdc306db39313aa02aa6129409e8517cfadb35
Opcode Fuzzy Hash: d201f9544f5b92cf4150a4476741715dcd7e162418696a80a34c636aa8db7f33
Instruction Fuzzy Hash: 7151D2B5B002159FCB44DF68D850AAF7BA6EF84350B1080BAE5069B391DB31DD46CFA1

Function 06AE17F0 Relevance: 3.0, Strings: 2, Instructions: 459COMMON

Download Yara Rule

Strings

(bq, xrefs: 06AE1804
d, xrefs: 06AE1A45

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$d
API String ID: 0-3334038649
Opcode ID: 6c3e46256965ee6e47dc86aa9ad0fd414195dfa6904c2aeca15a848c2403246a
Instruction ID: 1183a4c5d030a4c4a45c3cd98892b6a9913e3e7c9d18661c39d0d459aaa8fa6b
Opcode Fuzzy Hash: 6c3e46256965ee6e47dc86aa9ad0fd414195dfa6904c2aeca15a848c2403246a
Instruction Fuzzy Hash: 92026934A006158FC754DF19C5809AABBF2FF89314B25C669E46ADB366DB30FC46CB90

Function 06B92570 Relevance: 2.9, Strings: 2, Instructions: 437COMMON

Download Yara Rule

Strings

(bq, xrefs: 06B92888
(bq, xrefs: 06B929D0

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$(bq
API String ID: 0-4224401849
Opcode ID: e8d376951bcd5bd75cf95d1bd496c1969ff2463b14bf4d0ee8a8fbc09fbe9181
Instruction ID: 9e8a317475229c747e83d55b7423a8829bffc89ea4300efc954cd87ab5ef5943
Opcode Fuzzy Hash: e8d376951bcd5bd75cf95d1bd496c1969ff2463b14bf4d0ee8a8fbc09fbe9181
Instruction Fuzzy Hash: 50F1A075B002049FDB54DF68D854AAEBBA2FF89310F14847AE906DB391CB35E945CBA0

Function 06B96FF0 Relevance: 2.8, Strings: 2, Instructions: 279COMMON

Download Yara Rule

Strings

4c^q, xrefs: 06B972E8
<, xrefs: 06B97137

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4c^q$<
API String ID: 0-1356664402
Opcode ID: 2fadf701dc3b4c4696a33f68d6730b8fbc91b8fa025688566b42841ab39da05d
Instruction ID: 8e69b63680e111702574e357214176cd6ad630ec9d2811ad581624fc7f1892f9
Opcode Fuzzy Hash: 2fadf701dc3b4c4696a33f68d6730b8fbc91b8fa025688566b42841ab39da05d
Instruction Fuzzy Hash: A1911571B283608FDF658A69D8907BA7BE5EB42300F1444F7F445CB692DA35D880C3B1

Function 02AEB05D Relevance: 2.7, Strings: 2, Instructions: 206COMMON

Download Yara Rule

Strings

PH^q, xrefs: 02AEB11A
PH^q, xrefs: 02AEB18C

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: PH^q$PH^q
API String ID: 0-1598597984
Opcode ID: ebde6f40b5ebd170cbfeaa5c9a462ce936a116f8993e7c80b07cf6e8b7a58e50
Instruction ID: 27aeb91dc500d18ded69eaa2cad5834abccc2c44147bacfc73359ee822f3d280
Opcode Fuzzy Hash: ebde6f40b5ebd170cbfeaa5c9a462ce936a116f8993e7c80b07cf6e8b7a58e50
Instruction Fuzzy Hash: 2E814074A002058FDF05DF68C998AAEBBB2FF89304F1585A5D805EB366DB34DC46CB61

Function 02AEB047 Relevance: 2.7, Strings: 2, Instructions: 184COMMON

Download Yara Rule

Strings

PH^q, xrefs: 02AEB11A
PH^q, xrefs: 02AEB18C

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: PH^q$PH^q
API String ID: 0-1598597984
Opcode ID: f755ce95f056a1ce7363fe2c04d89f5e2fa38ba803457788ac8c667ef49836db
Instruction ID: 4e4167b3b96e20282c8a297bfe6ddfc03d02e01e1b24a1e16f6254d92de40ec3
Opcode Fuzzy Hash: f755ce95f056a1ce7363fe2c04d89f5e2fa38ba803457788ac8c667ef49836db
Instruction Fuzzy Hash: 6D71FD34A002098FDB04DB68C598AAEFBB2FF88314F1585A5D806EB365DB35DD46CB61

Function 06B9A49C Relevance: 2.7, Strings: 2, Instructions: 183COMMON

Download Yara Rule

Strings

\Vam, xrefs: 06B9A517
\Vam, xrefs: 06B9A66A

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: \Vam$\Vam
API String ID: 0-3938659207
Opcode ID: 0589a942610d40ff949d3a5d1f545873de47c21027644efb4d53ca39e66a73d2
Instruction ID: 2e5e516228dcd9cd370df180f95a0621558541a1e0237b84c77b14b17d560e92
Opcode Fuzzy Hash: 0589a942610d40ff949d3a5d1f545873de47c21027644efb4d53ca39e66a73d2
Instruction Fuzzy Hash: F47148B0E002099FDF50CFA9C88479EBBF2EF88354F148169E419A7254EB749846CFA1

Function 06B9A4A8 Relevance: 2.7, Strings: 2, Instructions: 180COMMON

Download Yara Rule

Strings

\Vam, xrefs: 06B9A517
\Vam, xrefs: 06B9A66A

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: \Vam$\Vam
API String ID: 0-3938659207
Opcode ID: 6e0d054f205a7bf053061e9279d3e4ebc098f6a8791de5a52e4b40245fcb08a2
Instruction ID: 698fd67cad857c2e497677530406d4d9b1b8fc971b55d542656da3bf8e32456d
Opcode Fuzzy Hash: 6e0d054f205a7bf053061e9279d3e4ebc098f6a8791de5a52e4b40245fcb08a2
Instruction Fuzzy Hash: 8F713AB0E002199FDF54CFA9C88479EBBF2FF88314F148569E419A7254EB749846CFA1

Function 06B92AD1 Relevance: 2.7, Strings: 2, Instructions: 174COMMON

Download Yara Rule

Strings

,bq, xrefs: 06B92AF8
4'^q, xrefs: 06B92C34

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: ,bq$4'^q
API String ID: 0-1386295989
Opcode ID: f8d6ca7b27b49c51224e49d887050c35af08df22dbbaebbb6e323971398fe8ea
Instruction ID: d4896842490196250e5c8ffc146d201631ecbbcd5a6dd5abfa08ee59fee2aaae
Opcode Fuzzy Hash: f8d6ca7b27b49c51224e49d887050c35af08df22dbbaebbb6e323971398fe8ea
Instruction Fuzzy Hash: 5351A071F001058FCB44DF69C4506AEBBF6EFC8350B1180AAE506DB3A9DA31DD01C7A1

Function 02AEA180 Relevance: 2.7, Strings: 2, Instructions: 161COMMON

Download Yara Rule

Strings

(bq, xrefs: 02AEA28D
Hbq, xrefs: 02AEA1F4

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$Hbq
API String ID: 0-4081012451
Opcode ID: 051ffdb852717218b15c6ed532163010b9beb56b57f5c96ab3039a80d9d26ee4
Instruction ID: 4072ff5bf144e9710ba0f6db441d2fc9c1e0828232589c26b0b080cf147c12a0
Opcode Fuzzy Hash: 051ffdb852717218b15c6ed532163010b9beb56b57f5c96ab3039a80d9d26ee4
Instruction Fuzzy Hash: D551F335B002448BDB269B78D4547AE7BB7AFC8311F18446AE906D7382DF348C86C791

Function 06B9B760 Relevance: 2.6, Strings: 2, Instructions: 117COMMON

Download Yara Rule

Strings

(bq, xrefs: 06B9B7FA
(bq, xrefs: 06B9B826

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$(bq
API String ID: 0-4224401849
Opcode ID: de8fbc4bc2da741496dfab4cc7dd526ab5f445212b7552ee4507ae804f22cb78
Instruction ID: bc4c1706a9c2e578de450b65d377ab6a7da8afb541b31a4ffcf21c5e37dd1eb5
Opcode Fuzzy Hash: de8fbc4bc2da741496dfab4cc7dd526ab5f445212b7552ee4507ae804f22cb78
Instruction Fuzzy Hash: 19312371B042145FDB85AB68D8547AF7BB6EF85350F1440BDE102AB3C1CE799D08C7A1

Function 06AE2120 Relevance: 2.6, Strings: 2, Instructions: 109COMMON

Download Yara Rule

Strings

4'^q, xrefs: 06AE2139
(bq, xrefs: 06AE2190

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$4'^q
API String ID: 0-3799531831
Opcode ID: fbd079a566759cbd7dbe97befa7c12bc73984033ce59725de95c2ac810227aa0
Instruction ID: 8df0a946a8700404e0d841ae999f750f5a720fda26b9e1f3a226eb35805ee9cf
Opcode Fuzzy Hash: fbd079a566759cbd7dbe97befa7c12bc73984033ce59725de95c2ac810227aa0
Instruction Fuzzy Hash: 463142313003018FC715AB79C844A5EBBA7EFC2321714862EEA068F355DF34DE0A87A1

Function 058CD158 Relevance: 2.6, Strings: 2, Instructions: 104COMMON

Download Yara Rule

Strings

(bq, xrefs: 058CD1B8
4'^q, xrefs: 058CD161

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$4'^q
API String ID: 0-3799531831
Opcode ID: 887b52559e627110c433ac4797a8c5b2efa3f31794ab6a94b0a3bde70a32dca4
Instruction ID: 12df0c969cd641f9e6435af05a9a4a39e672ada6bac84b1d58f9ee0e8381fbae
Opcode Fuzzy Hash: 887b52559e627110c433ac4797a8c5b2efa3f31794ab6a94b0a3bde70a32dca4
Instruction Fuzzy Hash: 2A310D313007508FC715AB69D848A6EBBA7FFC4261B14853DE906CB394DF34ED0A8791

Function 058CF957 Relevance: 2.6, Strings: 2, Instructions: 96COMMON

Download Yara Rule

Strings

(bq, xrefs: 058CF9C7
4'^q, xrefs: 058CF971

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$4'^q
API String ID: 0-3799531831
Opcode ID: 0952ee8bd2b06b927511c5d536accc81d8bad21f8a4018a65151334207e9bb0a
Instruction ID: a29526083d6cdb4fb032202b242d0c567d9bac7bd2fb59bcd97af700e4551b46
Opcode Fuzzy Hash: 0952ee8bd2b06b927511c5d536accc81d8bad21f8a4018a65151334207e9bb0a
Instruction Fuzzy Hash: EB2105303043505FD7069B3998549AF7BABEFC625131481AAF54ACF3A2DF30CC0A8762

Function 058CFC40 Relevance: 2.6, Strings: 2, Instructions: 57COMMON

Download Yara Rule

Strings

,bq, xrefs: 058CFC64
(bq, xrefs: 058CFC7E

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$,bq
API String ID: 0-1616511919
Opcode ID: 732580b40ac25967237e5465dd0b8c8308f1424f64a21b285ea1a271c90de734
Instruction ID: 2ac42eb46440b4e102c3ec66fa2345c7f753f070781c9a2dd8b12d7215ab1be2
Opcode Fuzzy Hash: 732580b40ac25967237e5465dd0b8c8308f1424f64a21b285ea1a271c90de734
Instruction Fuzzy Hash: 9901F9327151244FD724AF7D880429D37D6AF45291B0900E7DD06C7391DE39DC058791

Function 06B94144 Relevance: 2.5, Strings: 2, Instructions: 21COMMON

Download Yara Rule

Strings

$^q, xrefs: 06B94154
$^q, xrefs: 06B94148

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: $^q$$^q
API String ID: 0-355816377
Opcode ID: 884c8a220118ce1342c014d654a84065c9bbfad52454e6cbf70d81d4b30570fa
Instruction ID: dff0f32478b390c3500babcb8acbae04c5458347455e4ead5f7ecfdbc311e647
Opcode Fuzzy Hash: 884c8a220118ce1342c014d654a84065c9bbfad52454e6cbf70d81d4b30570fa
Instruction Fuzzy Hash: AEE08C72F100388F9B688A19A80446ABFE5EBA5A1432040BBC1018B328CA318C2A87E0

Function 02AE4A68 Relevance: 2.0, Instructions: 1978COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9d90694b151f68d750ed9a3d6775176157d7a0599b1e004f3372396c3091e770
Instruction ID: 6f74a104a5aeb9d4b2489cc6b07b81b19175607ffb7aa39bddfe0f7a47442c89
Opcode Fuzzy Hash: 9d90694b151f68d750ed9a3d6775176157d7a0599b1e004f3372396c3091e770
Instruction Fuzzy Hash: FF23327A902204DFCF667F61CA28759B732FB5A346B20846BDD12A7764CB7A8D41DF00

Function 02AE4A58 Relevance: 2.0, Instructions: 1975COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 82079723ce091fc176c12c2bab6c261c746b7cff85445735e166ff10077f36ad
Instruction ID: de7319389928c92c2253f7ad7debff73d3c054b8e4159dec9e1aeb1207588b55
Opcode Fuzzy Hash: 82079723ce091fc176c12c2bab6c261c746b7cff85445735e166ff10077f36ad
Instruction Fuzzy Hash: D223327A902204DFCF667F61CA28759B732FB5A346B20846BDD1267764CB7A8D42DF00

Function 06B912C8 Relevance: 1.6, Strings: 1, Instructions: 392COMMON

Download Yara Rule

Strings

(bq, xrefs: 06B9171C

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 7b121ffbad1505d56ebce8a32ad6c566c8a877123ca60edd4fd50d23559c0fca
Instruction ID: d02ff66bcd2d928acace74d28dadda27218ba1196ef69700061dd98e93afed26
Opcode Fuzzy Hash: 7b121ffbad1505d56ebce8a32ad6c566c8a877123ca60edd4fd50d23559c0fca
Instruction Fuzzy Hash: A7F147B4E0035A8FDF15DFA8C484B9DBBB2EF49304F1581A5D409AB295DB34ED85CBA0

Function 06AE90DE Relevance: 1.6, Strings: 1, Instructions: 355COMMON

Download Yara Rule

Strings

(bq, xrefs: 06AE94A7

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 64e4e8e9b83dc3cbf7477b95827e0d7bee715672e9dba88dde48dc52f4ad0015
Instruction ID: 1fa745195b83e7e6270a71c6880851a52608bcb83e054aedd3287241439027c9
Opcode Fuzzy Hash: 64e4e8e9b83dc3cbf7477b95827e0d7bee715672e9dba88dde48dc52f4ad0015
Instruction Fuzzy Hash: DCD19E347143108FEB94AB29C49876FB7B6EB84301F10486AE507CB795DB75EC868B92

Function 058CE4A0 Relevance: 1.6, Strings: 1, Instructions: 326COMMON

Download Yara Rule

Strings

(bq, xrefs: 058CE833

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 321059bb58e3652dcb898d1b6af18d055114ee55030c2273064536f72c725bcf
Instruction ID: 83d523e885edf6ecfc5172857824f65c016a6831a132236467f260a935d6c090
Opcode Fuzzy Hash: 321059bb58e3652dcb898d1b6af18d055114ee55030c2273064536f72c725bcf
Instruction Fuzzy Hash: 1CD17A34A002598FDB16CFA9C884AADBBF6FF49300F1481A9E845EB395DB74ED45CB50

Function 02AE178E Relevance: 1.6, Strings: 1, Instructions: 303COMMON

Download Yara Rule

Strings

fcq, xrefs: 02AE17B6

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: fcq
API String ID: 0-2768158334
Opcode ID: b96c626a5a5e22d073838fc71d4e89272a4797ebe345daf1975109ff5880b119
Instruction ID: 24847b86910207c7d85d421927fcec64e892c033e8182f09a1845064207df47b
Opcode Fuzzy Hash: b96c626a5a5e22d073838fc71d4e89272a4797ebe345daf1975109ff5880b119
Instruction Fuzzy Hash: 3CB1F370B052619FDF159F34845436EBBF2AF85308F1884AAC48A9B356DF34CC46CB92

Function 06B99E54 Relevance: 1.5, Strings: 1, Instructions: 278COMMON

Download Yara Rule

Strings

\Vam, xrefs: 06B9A117

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: \Vam
API String ID: 0-2269870599
Opcode ID: 569f064545bab238013ce1a827544c36f90d0004c538f092798c301ce89cbd68
Instruction ID: 4900b20ffd769eb905b453ba4bc731ae179e19231b5c4bf9ae98d25cc8d698d4
Opcode Fuzzy Hash: 569f064545bab238013ce1a827544c36f90d0004c538f092798c301ce89cbd68
Instruction Fuzzy Hash: 69B15CB0E002198FDF90CFA8C8857EDBBF1EF49714F148179E419A7294EB749885CBA1

Function 06AED8E0 Relevance: 1.5, Strings: 1, Instructions: 238COMMON

Download Yara Rule

Strings

(bq, xrefs: 06AEDAED

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 0478f8afa9d6352063a944264b47c2505993766f2ef6fadff127164df3aabc15
Instruction ID: aef157059991662d7144eed4c4054a18669f7f4a438009809862d034ecbd77f2
Opcode Fuzzy Hash: 0478f8afa9d6352063a944264b47c2505993766f2ef6fadff127164df3aabc15
Instruction Fuzzy Hash: 3D91B031A002099FDB55EF69C880AAFBBF6FF88300F14816AE915DB351DB309945CBA1

Function 06AEF918 Relevance: 1.4, Strings: 1, Instructions: 165COMMON

Download Yara Rule

Strings

(bq, xrefs: 06AEF968

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: d77c46ac8c391cd707ddbe63411e3d371d6c2e92aaae1499ccf43551d9e32994
Instruction ID: 522d6dc523f34ffa9f49b7a274275c3741e1f3266650245779b76d25a7fc472a
Opcode Fuzzy Hash: d77c46ac8c391cd707ddbe63411e3d371d6c2e92aaae1499ccf43551d9e32994
Instruction Fuzzy Hash: 59512231B013409FCB1ABB38D80825E7BF6EFC260931548A9D446CB396EE34DC0ACB52

Function 02AE9F30 Relevance: 1.4, Strings: 1, Instructions: 160COMMON

Download Yara Rule

Strings

(bq, xrefs: 02AEA0B8

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 8d11f2f648956c1950916aa0e24f4cc878bc8168a914b64ebee71e3016b3db93
Instruction ID: 1d7689ee0a54bfd340524d7984fce1c41fdc1134257f0d98365d95700c299827
Opcode Fuzzy Hash: 8d11f2f648956c1950916aa0e24f4cc878bc8168a914b64ebee71e3016b3db93
Instruction Fuzzy Hash: 5E513E75B002059FDB14DF69C584AAEBBF6AF88314F158069E806EB392DF74EC46CB50

Function 02AECD58 Relevance: 1.4, Strings: 1, Instructions: 153COMMON

Download Yara Rule

Strings

4'^q, xrefs: 02AECEB7

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: 6f0c9e5549b58f178246f7b46a3fa9630905321f46481430e96989129054f3e3
Instruction ID: 9902faca5926a87d5d0ccc49897b8885bfad86bd326c096c59ba7f6c85b813ef
Opcode Fuzzy Hash: 6f0c9e5549b58f178246f7b46a3fa9630905321f46481430e96989129054f3e3
Instruction Fuzzy Hash: AF41E1317043004FD719AB79D89472EBBA7EBC5264F0584BAD906CB391EF76DC868790

Function 06AE6498 Relevance: 1.4, Strings: 1, Instructions: 149COMMON

Download Yara Rule

Strings

(bq, xrefs: 06AE658D

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: a70841c5dcb284e0261099d371efdb7bbe1b92a76ef49682d5d41db5fe9626d5
Instruction ID: 76d06cf48382dfb78b647c4d32d53fe7aebb3e1dd26fc75c5aaf816910d5c039
Opcode Fuzzy Hash: a70841c5dcb284e0261099d371efdb7bbe1b92a76ef49682d5d41db5fe9626d5
Instruction Fuzzy Hash: 6041D531F102058FCB54EF59C454AAEBBF5EF9A250B14846AE80AEB395DF31DD01CBA1

Function 06AEF509 Relevance: 1.4, Strings: 1, Instructions: 148COMMON

Download Yara Rule

Strings

(bq, xrefs: 06AEF5E9

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 13b22115e558d897e39acfea113e5cf15610d7b3df0da3b85679d95721f5eaac
Instruction ID: cd7f3a49b8ca2d86a713c6ab27076e9b5bfd623ea0d575cae10319d1587be6f9
Opcode Fuzzy Hash: 13b22115e558d897e39acfea113e5cf15610d7b3df0da3b85679d95721f5eaac
Instruction Fuzzy Hash: C8511635F00219DFDB45DF64C850AAEBBB2FF89300F14816AE905AB351CB71AD46CB91

Function 02AE87A0 Relevance: 1.4, Strings: 1, Instructions: 138COMMON

Download Yara Rule

Strings

(bq, xrefs: 02AE87FE

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 0ffe5719646a61c50cdecfa7866c4907422be93a7ae58e6f76c015b483f3dc62
Instruction ID: 0efdb5456799dd21fd2a84c34818cef5143973fbf0810eebdf9d61e96692ddc4
Opcode Fuzzy Hash: 0ffe5719646a61c50cdecfa7866c4907422be93a7ae58e6f76c015b483f3dc62
Instruction Fuzzy Hash: 1B4154317083408FC7129B7C989561A7FE69FC539071944BAE856CB392EE38CC468790

Function 06B9D810 Relevance: 1.4, Strings: 1, Instructions: 134COMMON

Download Yara Rule

Strings

4c^q, xrefs: 06B9D86B

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4c^q
API String ID: 0-396817635
Opcode ID: 1f54713a9128e80eda9fd010b054c14eafc48d1f8e699056f4345e82f90de703
Instruction ID: 1122e234a741e5b9cf1abcd3aaf6e2961b29bda80cd51f2991b2fb88c43f5575
Opcode Fuzzy Hash: 1f54713a9128e80eda9fd010b054c14eafc48d1f8e699056f4345e82f90de703
Instruction Fuzzy Hash: 9741C1B4B002549FEF88AF36DD50B7A7AEAAF88700F144069E505DB396DA79DC01CB71

Function 06B91F00 Relevance: 1.4, Strings: 1, Instructions: 133COMMON

Download Yara Rule

Strings

(bq, xrefs: 06B91FBD

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 35a7df9044b55a4a5959eb791f0b3c1553982dfc7a55025e02bc3033e3b6c4fc
Instruction ID: d383a21a6450fb9b9a26e4626428e058c3e7d0fb33916268e7190e15052163ab
Opcode Fuzzy Hash: 35a7df9044b55a4a5959eb791f0b3c1553982dfc7a55025e02bc3033e3b6c4fc
Instruction Fuzzy Hash: FF41E235B10218DFCF549F64D854AAEBBB2FF88300F10806AE906E73A1CB359D45CBA1

Function 06B9D800 Relevance: 1.4, Strings: 1, Instructions: 130COMMON

Download Yara Rule

Strings

4c^q, xrefs: 06B9D86B

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4c^q
API String ID: 0-396817635
Opcode ID: d3c8363e015ed99dcd9d94cb7d4c8cad112f6f766367a5cb169b44d418b2f83f
Instruction ID: 11405b71927f96c9c5a16c3128da370653b770e7329390858de79b0187e3cd5b
Opcode Fuzzy Hash: d3c8363e015ed99dcd9d94cb7d4c8cad112f6f766367a5cb169b44d418b2f83f
Instruction Fuzzy Hash: 3241E3B0B006019FEB58DF36D895BAABBE9EF44304F0480A9E445DB292DB35D901CB71

Function 06AE3DC8 Relevance: 1.4, Strings: 1, Instructions: 125COMMON

Download Yara Rule

Strings

(bq, xrefs: 06AE3EEF

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 7c52e4293328c3ee547d05bba1ec43de6b4f81ef700f02ed22a875c5847b8a1c
Instruction ID: b59d190af0ce9f86b2b768bc74ea1dc807ed9cea7f4e6ccaca298eef85f58a37
Opcode Fuzzy Hash: 7c52e4293328c3ee547d05bba1ec43de6b4f81ef700f02ed22a875c5847b8a1c
Instruction Fuzzy Hash: CD41B431304B418FD755DB39D454A66BBF7BF8670070885A9E086CF7A2DA35EC05CB90

Function 06AE17E0 Relevance: 1.4, Strings: 1, Instructions: 120COMMON

Download Yara Rule

Strings

(bq, xrefs: 06AE1804

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 231e2098812c92a8cc9e4fdaaaa769cc92140a571e63a71d24659bb67945bcc5
Instruction ID: 331c4a8d8781b8b32fe514073859d36eafcd885f00245d09a312e7b3fad49b9f
Opcode Fuzzy Hash: 231e2098812c92a8cc9e4fdaaaa769cc92140a571e63a71d24659bb67945bcc5
Instruction Fuzzy Hash: BB417934A006198FDB54EF29C4849AAF7F2FF89314B59C569E85AAB351CB34EC41CF90

Function 06AE17BF Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

(bq, xrefs: 06AE1804

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 02939ae1dc37f2df819693f0ec4356f8725ea04cb42100d4ae3a49d96f328b02
Instruction ID: f8582a418eb9705b35fc89e6a3bf7df6f8d3aef099b5709e984a0efb6db43d04
Opcode Fuzzy Hash: 02939ae1dc37f2df819693f0ec4356f8725ea04cb42100d4ae3a49d96f328b02
Instruction Fuzzy Hash: 72418A35A006158FCB54EF19C484AAAF7F2FF89314B19C56AE85AAB351CB34EC42CF50

Function 06AE6338 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

(bq, xrefs: 06AE6383

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: d854a3404c40719a464e36037786ebe535f5d36f3fa459f53b8412cb2023977b
Instruction ID: 396b0a3faaa1652e42caee6b293c3e3b46f06d47997d109a863d8a647f138dca
Opcode Fuzzy Hash: d854a3404c40719a464e36037786ebe535f5d36f3fa459f53b8412cb2023977b
Instruction Fuzzy Hash: 2D3124317002155FE748AB2DD854A6FBBE6EFC5204725857AE406CB392EE31CC0687A0

Function 058CEF38 Relevance: 1.4, Strings: 1, Instructions: 116COMMON

Download Yara Rule

Strings

(bq, xrefs: 058CF05E

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: c067dd5d8607b8b9f880a6f5f4b3f803f37d85242a38c9267aeba0d4cd3f570f
Instruction ID: db1fcb4203d51412a6d9ced3ea473b28738da76689c53305e3098d70af817b00
Opcode Fuzzy Hash: c067dd5d8607b8b9f880a6f5f4b3f803f37d85242a38c9267aeba0d4cd3f570f
Instruction Fuzzy Hash: 3A41C131B042149FEB19DB68C854BBEBBB7EF84740F0485AEE906EB291CB359C05CB50

Function 06B9179A Relevance: 1.4, Strings: 1, Instructions: 114COMMON

Download Yara Rule

Strings

(bq, xrefs: 06B918B2

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: b4aacf17c13ac34491bfea6376fee0fa175997f854ff22d66fc32579adac88a7
Instruction ID: 0e8cfbe388bc866f36cc683e60bb2f13814a4e08765035cd7ecab4ee989e7940
Opcode Fuzzy Hash: b4aacf17c13ac34491bfea6376fee0fa175997f854ff22d66fc32579adac88a7
Instruction Fuzzy Hash: 7F41B470E0020A8FDB94DF69C884BAEBBF6EF88310F108069E405E7351DB30AD45DBA0

Function 06B9D773 Relevance: 1.4, Strings: 1, Instructions: 114COMMON

Download Yara Rule

Strings

4c^q, xrefs: 06B9D86B

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4c^q
API String ID: 0-396817635
Opcode ID: 8b6302efea3c3eb0e7f1a5d142acd1c043f285e758db365f496731a0e1840c45
Instruction ID: ea0a7d6bd626f5054c991fdbafa2af68363063102c1b8830730fade1afb661d0
Opcode Fuzzy Hash: 8b6302efea3c3eb0e7f1a5d142acd1c043f285e758db365f496731a0e1840c45
Instruction Fuzzy Hash: 594122B0B443425FEB059F319CA9B6A7BE9EF46304F0484AEE491DB1D2DB759802CB31

Function 02AE3CD0 Relevance: 1.4, Strings: 1, Instructions: 109COMMON

Download Yara Rule

Strings

(bq, xrefs: 02AE3DE8

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: bcf524edb57d29400c77b78242e2923fba21fa8dab7fcdc4349812de909a93f4
Instruction ID: b4093670118258479140f4164b66b2cae40232cf90e64106dc4665aa9e47c4e0
Opcode Fuzzy Hash: bcf524edb57d29400c77b78242e2923fba21fa8dab7fcdc4349812de909a93f4
Instruction Fuzzy Hash: BA317E30B043049FEB09AB79889976E7EB6EF88301F144469E507D73D5DF748D868B51

Function 060A0799 Relevance: 1.3, Strings: 1, Instructions: 93COMMON

Download Yara Rule

Strings

(bq, xrefs: 060A0840

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 52fec04126e20270f20c714c1c12ed49e4ef0def15cfb53cd81d94b87b081c7d
Instruction ID: 883916654181ff6f023037e9dc821674d93bfcfba6636f2ecf1fb12a0886d951
Opcode Fuzzy Hash: 52fec04126e20270f20c714c1c12ed49e4ef0def15cfb53cd81d94b87b081c7d
Instruction Fuzzy Hash: 353145302003445FC721EFB9E9056AFBBE2DFC1314F00496ED9969B781CF75A94A8B91

Function 06B92BD0 Relevance: 1.3, Strings: 1, Instructions: 89COMMON

Download Yara Rule

Strings

4'^q, xrefs: 06B92C34

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: 04b51834272b65c1df7a110159513af247e19917215c5205f9e333338586f1ea
Instruction ID: f8d5db6b8402f59d2259c46ebf62edaa6ee503e9b84342741b3a7b44657bf8bb
Opcode Fuzzy Hash: 04b51834272b65c1df7a110159513af247e19917215c5205f9e333338586f1ea
Instruction Fuzzy Hash: D5318F71F101159FCB44DB6CC550A6EBBF6AF8C310B1144A9E405EB369DA34DD428BA0

Function 02AE4381 Relevance: 1.3, Strings: 1, Instructions: 88COMMON

Download Yara Rule

Strings

4'^q, xrefs: 02AE43C2

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: a1c7e6cee387201663d1795d482ebeb73d8abc803b8017dba0209ee9e148d52b
Instruction ID: 1b504657a43aaa0de665a224dedb9feeb99acde1440aa7a23f0018b07b8f4abb
Opcode Fuzzy Hash: a1c7e6cee387201663d1795d482ebeb73d8abc803b8017dba0209ee9e148d52b
Instruction Fuzzy Hash: F031B2342007058FC706AB39D945A5EFBE3EFC4350710892CE1568B7A9DF74E98ACB80

Function 02AE96F8 Relevance: 1.3, Strings: 1, Instructions: 79COMMON

Download Yara Rule

Strings

4'^q, xrefs: 02AE97D4

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: 19c2befcbdefcfaa93af4740673a21a05ee2b9450606983c5a7c5dcaf84b30ae
Instruction ID: 771330acf8b47f422723c773a8d5dfbc4c04dbdd8b35a79b757a8d4ac120f35e
Opcode Fuzzy Hash: 19c2befcbdefcfaa93af4740673a21a05ee2b9450606983c5a7c5dcaf84b30ae
Instruction Fuzzy Hash: D221E2317003018FDB16DF78E98561A7BE6EF843557154A79E819CB385DF30DC4A8B80

Function 058CCA68 Relevance: 1.3, Strings: 1, Instructions: 78COMMON

Download Yara Rule

Strings

(bq, xrefs: 058CCB31

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: d58c4e5b07de139417292f2c8accc64b823b58fda260ad32ababcfba85fe7394
Instruction ID: 1eaf3a70a578183139c1b22020b3fd4396390d4de8070597197b60e552b23898
Opcode Fuzzy Hash: d58c4e5b07de139417292f2c8accc64b823b58fda260ad32ababcfba85fe7394
Instruction Fuzzy Hash: DE21D330B002588FDB159B68C4586AE7FF7AF8A350F1540AAE906EB391CF359D05CB91

Function 06AEF820 Relevance: 1.3, Strings: 1, Instructions: 75COMMON

Download Yara Rule

Strings

LR^q, xrefs: 06AEF84E

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: fc8539163052d97081383ecfe4ffdefb551e66b8c1a032f316dacbcec02abeaf
Instruction ID: 5cfba5fa3db5e74be1790a65aee179ad17d7ba93b40d7cb465b8d319c61c19e7
Opcode Fuzzy Hash: fc8539163052d97081383ecfe4ffdefb551e66b8c1a032f316dacbcec02abeaf
Instruction Fuzzy Hash: 70218334F001089FDB54AF69C855AAEBBF6EF88750F208019E902AB390DE715D41CFA1

Function 06B9BA68 Relevance: 1.3, Strings: 1, Instructions: 73COMMON

Download Yara Rule

Strings

PH^q, xrefs: 06B9BAFE

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: PH^q
API String ID: 0-2549759414
Opcode ID: b33cbf5d7459e7a81db69e54d226cea61d847ea5629e4bbb47fc02871c537ede
Instruction ID: 67b9e03d66e3fb03ef7693687dfda71babf3eaaa5979f245cf643237eb8e5328
Opcode Fuzzy Hash: b33cbf5d7459e7a81db69e54d226cea61d847ea5629e4bbb47fc02871c537ede
Instruction Fuzzy Hash: 052174717001089BCB549B69D958AAFB7FAFF88311F108065E506D7264DE319D45CBA0

Function 06AE2A68 Relevance: 1.3, Strings: 1, Instructions: 70COMMON

Download Yara Rule

Strings

\;^q, xrefs: 06AE2AB0

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: \;^q
API String ID: 0-2342212615
Opcode ID: a5409d6ac503cc3566d6d0258a895ba53195fa812d1d96144ac7c99e9db0c8a5
Instruction ID: c86fc0c2a53947ac2d8b770f714f3e3685fe8dc883286518c05c5a13564dea3c
Opcode Fuzzy Hash: a5409d6ac503cc3566d6d0258a895ba53195fa812d1d96144ac7c99e9db0c8a5
Instruction Fuzzy Hash: 871170327442024F9B64ABAEA494A6BF7DEEFC4664314843BE50ACB758EE71DC094350

Function 06B9B989 Relevance: 1.3, Strings: 1, Instructions: 69COMMON

Download Yara Rule

Strings

(bq, xrefs: 06B9B9CE

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: aae1a9a2f0553b3423cc17702029e36a0c99e0ae9e0fada953e123d39e3cec6c
Instruction ID: 9c831c2ba61d76bb9270a3cecfbd10b6bd9dad0940bf4e352a70f91558e589c7
Opcode Fuzzy Hash: aae1a9a2f0553b3423cc17702029e36a0c99e0ae9e0fada953e123d39e3cec6c
Instruction Fuzzy Hash: 6B1134327092805FC356A73CE81595E7FE6DFC671030940AAE406CB3A2CE249D0587A1

Function 06AEF830 Relevance: 1.3, Strings: 1, Instructions: 65COMMON

Download Yara Rule

Strings

LR^q, xrefs: 06AEF84E

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: LR^q
API String ID: 0-2625958711
Opcode ID: fa2f702e791ebb0d3e7fcf5eb4a870c137af23fdb7b18b403adb1466996ae2b3
Instruction ID: ba9270718e15d6a6356e7409f18582a709751da9c1c09c0812febe0bb187a06a
Opcode Fuzzy Hash: fa2f702e791ebb0d3e7fcf5eb4a870c137af23fdb7b18b403adb1466996ae2b3
Instruction Fuzzy Hash: D1218174F102089FDB54AF69C854AAEBBF6EF88710F10805AE906EB390DA709D40CF91

Function 06B972D0 Relevance: 1.3, Strings: 1, Instructions: 63COMMON

Download Yara Rule

Strings

4c^q, xrefs: 06B972E8

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4c^q
API String ID: 0-396817635
Opcode ID: fdd03a4076ec3716678444e201f1c9fd6299d9c9b4b16baab3ef5339537fb2be
Instruction ID: 7a3ba6750d028386feb8631774c3b01f7349cedd6faa3ba3a4373afc0d8ec846
Opcode Fuzzy Hash: fdd03a4076ec3716678444e201f1c9fd6299d9c9b4b16baab3ef5339537fb2be
Instruction Fuzzy Hash: F811BC70B04205AFDB64EF79AC15BBE7AEAAB88600F044079F505DB290EE74DD01CBB1

Function 058CDE60 Relevance: 1.3, Strings: 1, Instructions: 61COMMON

Download Yara Rule

Strings

(bq, xrefs: 058CDEAF

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq
API String ID: 0-149360118
Opcode ID: 89cce541ca39001dc2a05be660b71e9a3bf239e5c229e49040ad0219aa1c1405
Instruction ID: 2b24bc759587122fb46c2cc85ed9a5b730d57c3ab849d9a81e2089fd18e4798a
Opcode Fuzzy Hash: 89cce541ca39001dc2a05be660b71e9a3bf239e5c229e49040ad0219aa1c1405
Instruction Fuzzy Hash: FB11AB312092A01FD316677D88145AB3FA6EFD2350B0181BEE846CB6A5DF3ACC0BC360

Function 02AE8D30 Relevance: 1.3, Strings: 1, Instructions: 57COMMON

Download Yara Rule

Strings

4'^q, xrefs: 02AE8D39

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: c9bbfca602479b8f25b5d2123192e5575693f1f2fd0ee3c5bc77e80455395f2e
Instruction ID: 4ae79032f7be74491541bf7a5b6e063617150d9c50c39a9cc0e4b3872d1ecddd
Opcode Fuzzy Hash: c9bbfca602479b8f25b5d2123192e5575693f1f2fd0ee3c5bc77e80455395f2e
Instruction Fuzzy Hash: 801101366402208FD3279B78E55914E7FA6EFC4341F144A79E846CB381EF34C886CB81

Function 058CD148 Relevance: 1.3, Strings: 1, Instructions: 43COMMON

Download Yara Rule

Strings

4'^q, xrefs: 058CD161

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: 1ff2d1af0aa051d1a919279464adbef94f5e302f38703e3ca884d15632876ac1
Instruction ID: 01c48586e8a6b4ef6cb9eb7f6dc7bddb768ffa7458658eddb62cd7b43c3e2554
Opcode Fuzzy Hash: 1ff2d1af0aa051d1a919279464adbef94f5e302f38703e3ca884d15632876ac1
Instruction Fuzzy Hash: E30144302007401FC305EB29CC04AABFBA2EFC5310B0489AEE9558B366EF31DC4A8790

Function 02AE8D20 Relevance: 1.3, Strings: 1, Instructions: 30COMMON

Download Yara Rule

Strings

4'^q, xrefs: 02AE8D39

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: 4'^q
API String ID: 0-1614139903
Opcode ID: afd922fe6368cce6e2ce6edefa1c8197e4e592a4b2c0def86054308398df405a
Instruction ID: 68815ae3b7b2a3b1efe84ede6aa8ebb9d57f2149089aa8ddad6ad44fd1cf9a91
Opcode Fuzzy Hash: afd922fe6368cce6e2ce6edefa1c8197e4e592a4b2c0def86054308398df405a
Instruction Fuzzy Hash: 81F024352806108FC31B9B28E55928EBB61EFC4311F14462EE84187395DF3C988E8792

Function 02AE7220 Relevance: 1.3, Strings: 1, Instructions: 29COMMON

Download Yara Rule

Strings

k9Y!0, xrefs: 02AE725F

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: k9Y!0
API String ID: 0-1825060378
Opcode ID: a12dadfd017b7c654ec63330677d51addbb5360ca8b69e064094486e1a50671e
Instruction ID: f7fdf6375580bd16b7e3664ebe6df948c6e6311c71a5bd21f732832b066d60c7
Opcode Fuzzy Hash: a12dadfd017b7c654ec63330677d51addbb5360ca8b69e064094486e1a50671e
Instruction Fuzzy Hash: 59F0E5B381D3800FD3034BBC5C20BC92F718BA2551F8B09D7C080D65D2E9289A094765

Function 02AE7250 Relevance: 1.3, Strings: 1, Instructions: 16COMMON

Download Yara Rule

Strings

k9Y!0, xrefs: 02AE725F

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: k9Y!0
API String ID: 0-1825060378
Opcode ID: ab1e9a040e744925160c0e09f737b72b39e6320042e8f23680e3874d8c227071
Instruction ID: 8732ed3295d66db6eb200b7900710a6d687d3498fa377463a2abdd7affd47023
Opcode Fuzzy Hash: ab1e9a040e744925160c0e09f737b72b39e6320042e8f23680e3874d8c227071
Instruction Fuzzy Hash: 9FD012736443182B5B05EAAD54505DEBFEDDAC4170F01447AD509D7245EE715E8042D9

Function 06B95B58 Relevance: .6, Instructions: 608COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2959ebde28b9860c407f7237a27036bad63d6a31fe966bbc14065c50c46e50b7
Instruction ID: 55a20d6ec49b8dc61df51932789b69067b153383ad60571769e43d7418f779fc
Opcode Fuzzy Hash: 2959ebde28b9860c407f7237a27036bad63d6a31fe966bbc14065c50c46e50b7
Instruction Fuzzy Hash: 1A32AF35B002589FEF55DF68D954AAE7BB2FF88300F148069E9029B3A5DB31DC45CBA1

Function 060A0F80 Relevance: .5, Instructions: 456COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5189c4898fa112538027193eb51b3526925dbe575d0d108d2ec1887e2c2a8245
Instruction ID: 3eece9e50b436988826b2266d2df63ee4452c426f365c1c533a5d97772cc0d55
Opcode Fuzzy Hash: 5189c4898fa112538027193eb51b3526925dbe575d0d108d2ec1887e2c2a8245
Instruction Fuzzy Hash: A5121674E002148FDBA4CFA9E9987BDBBF2FF88345F148169D506A7390DB78A845CB41

Function 02AEE7F8 Relevance: .4, Instructions: 403COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbc6b6aae7cb69a4180b1b37f7625459d09461227f3bc4dbdd83ee18a778af31
Instruction ID: 71dcb150e4880ffe7a2e4bfc4ab5f168b5b02e5f10b401145422fab6bb7569ab
Opcode Fuzzy Hash: bbc6b6aae7cb69a4180b1b37f7625459d09461227f3bc4dbdd83ee18a778af31
Instruction Fuzzy Hash: 2EE168347002048FDB15DF78C998A2ABBF6EF89310B1544A9E906CB3A2DF35DC46CB91

Function 06B912B8 Relevance: .3, Instructions: 348COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4cb8980048af1289540bab3b87c3f8f7d3bd6a58dda5fa1a96caf46d34f794fe
Instruction ID: 15c0b8a17ea620306ff85505ffc2d9dd06fb7453847df499b0433362f7bc3504
Opcode Fuzzy Hash: 4cb8980048af1289540bab3b87c3f8f7d3bd6a58dda5fa1a96caf46d34f794fe
Instruction Fuzzy Hash: 05F135B4E0035A8FDF55CFA8C488B9DBBB2EF49304F1581A5D809AB295D734ED85CB60

Function 02AED9E0 Relevance: .3, Instructions: 348COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a36e998e32f6ee3489d074c6335c9f6ee13e3a28d50b991c35e616778017298d
Instruction ID: 60ef61d2b6576e06c89528262ad2ef5c6396bcc69cce24a7348f7ecbd52b81aa
Opcode Fuzzy Hash: a36e998e32f6ee3489d074c6335c9f6ee13e3a28d50b991c35e616778017298d
Instruction Fuzzy Hash: 64E13A34A00609DFCB14DF64D998A5DBBB2FF88310F148568E8169B3A5DF71EC86CB90

Function 06AEF9A8 Relevance: .3, Instructions: 309COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b45236e9a4662ca35b6f631bb617a01d607b54cee38e35d4adc32dfbb4572d4b
Instruction ID: c5ec8def11a54118a15a3b4e05bc121bbe7a0b77f4782d82cbab92c0b5decdb8
Opcode Fuzzy Hash: b45236e9a4662ca35b6f631bb617a01d607b54cee38e35d4adc32dfbb4572d4b
Instruction Fuzzy Hash: D5B1CF317002019FDB59BB78885862E7BE6EFC5609B2448A9D906CB395EF34EC46CB91

Function 058CE490 Relevance: .3, Instructions: 300COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0570224c55e7ce7c51a4801fc1b7dfa8c5767350691a07d148d7b9ffec11921d
Instruction ID: e57212682ef88e7108f4400752970edf26014c59f2a4b427bb27ed95b5177bd2
Opcode Fuzzy Hash: 0570224c55e7ce7c51a4801fc1b7dfa8c5767350691a07d148d7b9ffec11921d
Instruction Fuzzy Hash: F9D18B34A002598FDB16CFA9C984AADBFF6FF48300F148099E845EB265EB74ED45CB50

Function 02AEF6F9 Relevance: .3, Instructions: 295COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3abefc402345a6a0cc49084590883b59235981e5aaea0512363e14fbfb737250
Instruction ID: 9e427ee1a947a09bd4584d6e418dc038fb258bce0c43750479301684604d9880
Opcode Fuzzy Hash: 3abefc402345a6a0cc49084590883b59235981e5aaea0512363e14fbfb737250
Instruction Fuzzy Hash: F8D10734A00219CFDB15DF64D995B9DBFB2FB88305F1084A9E90AA7290DF729D86CF50

Function 06B9DAC0 Relevance: .3, Instructions: 274COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a8bc9e01ca8497add3e7399cd4f55fd7d457bd0efe6412d776e92cca29c7d53e
Instruction ID: 2e4f4e5428c4859f392d176bf2d671b87064a80c07a1fe4d1329e8bf181a108b
Opcode Fuzzy Hash: a8bc9e01ca8497add3e7399cd4f55fd7d457bd0efe6412d776e92cca29c7d53e
Instruction Fuzzy Hash: 0791B6F4A44A048FEFA48F6BC480B6DB772EF81350F1484F6D5069B755C6749881CBBA

Function 06AE4FD9 Relevance: .3, Instructions: 272COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cf7446ef6b86f529667a6a13a72986a06f8a343b647abe7fb731cef018887262
Instruction ID: 8a4ddfc78c16307d3236843edbf87fa48f7f2207bffd19556c821a4625eb1ab4
Opcode Fuzzy Hash: cf7446ef6b86f529667a6a13a72986a06f8a343b647abe7fb731cef018887262
Instruction Fuzzy Hash: 5FB10774F002099FDB45DFA9D59499EBBF6FF88304B204069E906EB364DB31AD06CB51

Function 06AE4FE8 Relevance: .3, Instructions: 268COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 773c2a29191364b27feefad059bc6083dbaedce54ff63cdf3d638a38f2ea3009
Instruction ID: 8790037d4649ea805027234de974c9d9571338338cbdfd14cac1523d80cdf6a8
Opcode Fuzzy Hash: 773c2a29191364b27feefad059bc6083dbaedce54ff63cdf3d638a38f2ea3009
Instruction Fuzzy Hash: 11B1F874F002099FDB45DFA9D59499EBBF6BF88304B204069E906EB364EB31AD06CB51

Function 06B9A724 Relevance: .3, Instructions: 264COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a0b3f0714644ee452b65e30922bc9c1bc17edfb2c711db0d7f279d1fa08f582e
Instruction ID: 1fdebaccf5fb9ba1047314a395eda77a8e502836675a7c1b21631ec65aff5d7d
Opcode Fuzzy Hash: a0b3f0714644ee452b65e30922bc9c1bc17edfb2c711db0d7f279d1fa08f582e
Instruction Fuzzy Hash: FBB17BB0E002098FDF54CFA9C98179DBBF2FF48314F249579D814A7294EB749886CBA1

Function 02AE8FD8 Relevance: .2, Instructions: 247COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ab5600a18b7a021d4e0688d97fc1e5e01c3213dc0fc2c87d82c2c4a29f283a01
Instruction ID: bc34d4ed12825f189eec6d28f5d673aa6cf16bfd36e6b9cb3fdc5434988bcbf6
Opcode Fuzzy Hash: ab5600a18b7a021d4e0688d97fc1e5e01c3213dc0fc2c87d82c2c4a29f283a01
Instruction Fuzzy Hash: A191B1356002449FDF069FB8D955A9DBFF2EF89200B0880A5E406DB3A2CF35DD46CB80

Function 060A2000 Relevance: .2, Instructions: 247COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c9c515a2d950335041b337926bb6314d32ea855d730bc6f87d0cf0b2d0a66f0
Instruction ID: 34ec85c80c7a4a5370821c48030767df5d6674b6cc7f15c0a64dfc6a16ce5768
Opcode Fuzzy Hash: 5c9c515a2d950335041b337926bb6314d32ea855d730bc6f87d0cf0b2d0a66f0
Instruction Fuzzy Hash: 5941D370A013449FCB02EF68D555BAABBF6FB88304F104969D415CF396DBB19E4A8BD0

Function 058CB2D0 Relevance: .2, Instructions: 242COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9351de23ef32e796783746e24d7001764086562c46071042dc71cb867fc89bd4
Instruction ID: cb7ec76d7603c1718f8e20ede7bdfc82b644cc69cfc228d427e3763cd4a2c974
Opcode Fuzzy Hash: 9351de23ef32e796783746e24d7001764086562c46071042dc71cb867fc89bd4
Instruction Fuzzy Hash: 6C91AB70B04246CFCB01EF38D944AA97BE6EF44309B5848A9D805DF35ADB35EC4ACB90

Function 06B918F0 Relevance: .2, Instructions: 235COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5c25a6199d72e47fa49ab91a5501c9dcf45178fe9296ba3b17999c05650171ba
Instruction ID: dd39592b4e7e50c93143f03bb1e605b7d4b6dd433beba007ef7002adf1e62c7c
Opcode Fuzzy Hash: 5c25a6199d72e47fa49ab91a5501c9dcf45178fe9296ba3b17999c05650171ba
Instruction Fuzzy Hash: 28818FB4A0021BDFDF948F69C94487ABBB6FF88350B1048B9E9169B351DB31DC51DBA0

Function 06B91BC9 Relevance: .2, Instructions: 226COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67e0f7874b60d49f8cd830d7767abe154fbb49d3984477d268118f608f80b01e
Instruction ID: e977a590724504337e98bf4d3afb47f569bedc433601172a6a8f911adb92f1d1
Opcode Fuzzy Hash: 67e0f7874b60d49f8cd830d7767abe154fbb49d3984477d268118f608f80b01e
Instruction Fuzzy Hash: DFA1C175A1011ADFDF45DFA4D984AAEBBB2FF88300F148065E906A7360CB31AC52DB60

Function 06B9DEDE Relevance: .2, Instructions: 215COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1abca56d43da34cf19f2131ce9ecd0c9f7efcb64f95a436c6a0f17d658cc19eb
Instruction ID: bc1246966af8e0d212b034d8a49cc1f7be0b5d565be99a7b48539105c29bae83
Opcode Fuzzy Hash: 1abca56d43da34cf19f2131ce9ecd0c9f7efcb64f95a436c6a0f17d658cc19eb
Instruction Fuzzy Hash: BC817F71A042428FCF05EF78D98059EBBF2FF95204B1588A9C445DB36AEB31ED46CB91

Function 02AE98A0 Relevance: .2, Instructions: 204COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6154180b39f7c49f627788448ddfdba3dab9b7e8038179c529e500bb96a33554
Instruction ID: 06f9479a5cf8452fc3fd927ad538be1afaf896a6a6601c3b1073b483a1805d41
Opcode Fuzzy Hash: 6154180b39f7c49f627788448ddfdba3dab9b7e8038179c529e500bb96a33554
Instruction Fuzzy Hash: 5661AF317053118FEB166B79956936E7AEAEF88285B094478E806C73C5EF78CC82C790

Function 06B9E298 Relevance: .2, Instructions: 198COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72b61ce0743c23b2b54b92a9421598a98bec1476821d07f62c853c1d9cdb573e
Instruction ID: 00f561151b2254aff01cb5b31a2cdaea23d5aeb9b6b7c777568abaf91ffa53c7
Opcode Fuzzy Hash: 72b61ce0743c23b2b54b92a9421598a98bec1476821d07f62c853c1d9cdb573e
Instruction Fuzzy Hash: F6718BB0A002049FDB54DF79D9546AEB7F6AF88300F148479E80AD7394EB35ED42CBA1

Function 06B9E288 Relevance: .2, Instructions: 194COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 23f044386c2977f0efd1cd9d4deda155d7f013921a58e1a53d4a09e9c1f21fa0
Instruction ID: 8be56231032071b2f1ed22f9198de4cad451c26ffcce0547ae5e0238f9cae2fa
Opcode Fuzzy Hash: 23f044386c2977f0efd1cd9d4deda155d7f013921a58e1a53d4a09e9c1f21fa0
Instruction Fuzzy Hash: 0F617BB4A002049FDB54DF79D9446AEBBF6EF88200F148479E80AD7350EB34ED46CBA1

Function 02AED9D0 Relevance: .2, Instructions: 184COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 80ac73a7ef27f84c7c40cff81657f0d475e978d6a1d927bf77412f1929eaffad
Instruction ID: cd292fb85f06bce351786f4882ab984594e599e43fe96be8905f4b6e278be05f
Opcode Fuzzy Hash: 80ac73a7ef27f84c7c40cff81657f0d475e978d6a1d927bf77412f1929eaffad
Instruction Fuzzy Hash: 4181FB74A00609DFCB04DF64D598A5DBBB2FF88314F148558E816AB3A5DB70ED86CF90

Function 06AEC553 Relevance: .2, Instructions: 179COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8776064ac0edb3aff32c488dc4e1101bef81b0ae0591fc3bf85bfb28e71d9b43
Instruction ID: cacef7f3668c1a80bcb9324aec74bb8fefde85fbcb4c3d19b4924404d73cdde9
Opcode Fuzzy Hash: 8776064ac0edb3aff32c488dc4e1101bef81b0ae0591fc3bf85bfb28e71d9b43
Instruction Fuzzy Hash: 71712675A00219DFCB44DF68D994AAEBBB2FF48310F108469E916AB361CB31EC51CF60

Function 06AEA848 Relevance: .2, Instructions: 168COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 130b3d4802ecb57adc6b43fe2d81698d3ee1cd6c9516f1efad024c6ef79b3532
Instruction ID: ff832d3dffd8e3771d57eca005a6ff5d90d2b6567cd2d724722a92ebe9ff4de9
Opcode Fuzzy Hash: 130b3d4802ecb57adc6b43fe2d81698d3ee1cd6c9516f1efad024c6ef79b3532
Instruction Fuzzy Hash: 0051AB357007109FC724AB2AC94492ABBF7EFC4310B11C45EEA4A8B795DB71EC86CB95

Function 058CFA08 Relevance: .2, Instructions: 168COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0d2bc07a328c92453b2ab99858788fc3b7bf8d29ab2a5e73e0efb5abab545ee
Instruction ID: b5221f37761501d0421b4da97e069c37398baa1efbcb8356f0dcec562a03dfdf
Opcode Fuzzy Hash: f0d2bc07a328c92453b2ab99858788fc3b7bf8d29ab2a5e73e0efb5abab545ee
Instruction Fuzzy Hash: E65105347041158FE7089F29D5A892ABBA7BFC961932484EEEA06CB375DF71DC46CB00

Function 058CED3C Relevance: .2, Instructions: 161COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 28cebe81c64bf442ce83f7acd58f21508f4fc1fc30cb6126268eed58eaef2950
Instruction ID: e55ff42cc810da1d45cad3362ab7e6f8fec7b7a95daa799df55060af0f38e501
Opcode Fuzzy Hash: 28cebe81c64bf442ce83f7acd58f21508f4fc1fc30cb6126268eed58eaef2950
Instruction Fuzzy Hash: 8351AE347001249FEB119F69C884B6EBBA6FF88750F2441A9EA06DB3A4CB31DC41CB54

Function 06B921E0 Relevance: .2, Instructions: 160COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6a1459cc603631cbe6d40f1a606d09c88f4653766f2a389d8cddbf750954e367
Instruction ID: b5842ae9d6dea118ccac44d95ec604b63209971697dae44ea23070bb17792b45
Opcode Fuzzy Hash: 6a1459cc603631cbe6d40f1a606d09c88f4653766f2a389d8cddbf750954e367
Instruction Fuzzy Hash: F251B2B1E242009FCF69DF68C49496DBBF6EF8A31071541AAE5069B7B1C730AD45CB60

Function 06AE40C0 Relevance: .2, Instructions: 156COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79286c0c862d825f9e13c6554e6b0a20e01e885c1410b7e19ca63edc9825b294
Instruction ID: 089bad7c10fee2f27a18ae42ecbcba6cde8d4471e5d00b364fa9183cf2fcf482
Opcode Fuzzy Hash: 79286c0c862d825f9e13c6554e6b0a20e01e885c1410b7e19ca63edc9825b294
Instruction Fuzzy Hash: 0F41C5327441148FDB54EBACE880AA977E9EF99320B1540B6F509CF361DA36EC52C7A0

Function 02AED320 Relevance: .2, Instructions: 153COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d3bc95724402117a665f3df8325d5b3a3101b0639ae9aa82ecbdc978e24569c5
Instruction ID: 38d5db3bff0a2428a5dabc5884693534a0f9b74b78eccc3235b005ca8518ae8d
Opcode Fuzzy Hash: d3bc95724402117a665f3df8325d5b3a3101b0639ae9aa82ecbdc978e24569c5
Instruction Fuzzy Hash: A6510D34A10219EFDF18DFA4D994AADBFB6FF88314F144069E816A73A4DF359841CB50

Function 06AE4E70 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: febc673e39ec8cc835f33dba46f7703affd8f54f84fd4a424dfe4da4c1449c9d
Instruction ID: bc819eb3133b559b058ee05f6eb681cb0a8c5e6fe12c3580b6e51a582cc2606d
Opcode Fuzzy Hash: febc673e39ec8cc835f33dba46f7703affd8f54f84fd4a424dfe4da4c1449c9d
Instruction Fuzzy Hash: 9551A471500209DFDB25EF94D844BEEBBFAEF88700F058568E2165B2A1CB34E949CB91

Function 06AE6128 Relevance: .1, Instructions: 143COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 812c8e5f18789bf630e17adb4694ff795a88b08ba399af884d36d192103ccb6e
Instruction ID: 4fe9d188edec93ef7d5a92db14f154c15a36350acd25d2280ecee83bad71feb9
Opcode Fuzzy Hash: 812c8e5f18789bf630e17adb4694ff795a88b08ba399af884d36d192103ccb6e
Instruction Fuzzy Hash: E7519430B002189FDB45ABA9D4546AEBBF3AFC8205F149429E406EB395DF319C068B91

Function 02AEDDA7 Relevance: .1, Instructions: 140COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79e7025886e1c3284536f2a0f87ccf5895c530441d6ede7e90ca9c20f693d8b2
Instruction ID: 15edadd7f7236656bdb0f5a0f3c7c756d286bcb5d479e98c138b4e9318fcac45
Opcode Fuzzy Hash: 79e7025886e1c3284536f2a0f87ccf5895c530441d6ede7e90ca9c20f693d8b2
Instruction Fuzzy Hash: 5E51D534A00609DFDB14DFA4E994A9DBBB2FF88310F158558E906AB360DB31EC82DF50

Function 058CB6B8 Relevance: .1, Instructions: 137COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f7615d6afdb98c632d92912764ea56f243e27ba44db598b7382b2c6f2aaa37ed
Instruction ID: 8f73a008ae14ba3dbe5efc4acfaa9bfec98f2f06daa190d08a9401ad526210df
Opcode Fuzzy Hash: f7615d6afdb98c632d92912764ea56f243e27ba44db598b7382b2c6f2aaa37ed
Instruction Fuzzy Hash: 24513930A00619DFCB14DFA8D559AADBBF2BF48305F608499E806EB3A0DB74DC44CB81

Function 06B9BC88 Relevance: .1, Instructions: 136COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d1f17a6e58d8ce5ded82ecacddfcc9b45fa8be7646f72e9651dad4565ab75bb1
Instruction ID: 5254acd2425eb3a7bac1bd11583687b5edf8543fcd7b1a11db74439530fe5a60
Opcode Fuzzy Hash: d1f17a6e58d8ce5ded82ecacddfcc9b45fa8be7646f72e9651dad4565ab75bb1
Instruction Fuzzy Hash: 86513B307002458FCB45DB68D858A6EBBF6FF89310B1581AAE00ACB3B5DB70DD45CBA1

Function 06AE7768 Relevance: .1, Instructions: 128COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d419ae88e0cfbbb5dac7e7110efca42224df5c5ae5486f0f1fa3cd76146ef308
Instruction ID: d68a967fe3c0b23d46567922774f5d212a8037f82dce79206570763fea9e6174
Opcode Fuzzy Hash: d419ae88e0cfbbb5dac7e7110efca42224df5c5ae5486f0f1fa3cd76146ef308
Instruction Fuzzy Hash: EF417F79B001158FDB90EB69D980AAEF7F9EF88320F118169E909DB351D731ED41CBA1

Function 02AE32A8 Relevance: .1, Instructions: 127COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76b8cd2f2f83d7badb170bfe04e327c36c34e780e3ceab9d95b4014081620c66
Instruction ID: 4a787d05542f186a8ae11d1137130c88eb2a7ed7ba18e4666784cd3635a0f458
Opcode Fuzzy Hash: 76b8cd2f2f83d7badb170bfe04e327c36c34e780e3ceab9d95b4014081620c66
Instruction Fuzzy Hash: 7E41B130A002089FCB15EF79E99566EBAB2EF84301F004828E9029B3A5DF759D499B91

Function 06AE38B0 Relevance: .1, Instructions: 125COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8fa36cc087569b76798819ff934f16d590260acbfc774331828422b6cc26247b
Instruction ID: f02d6c30565f401bbab1c26404ef07b3f945d9803825b602bf3afd8b71835e11
Opcode Fuzzy Hash: 8fa36cc087569b76798819ff934f16d590260acbfc774331828422b6cc26247b
Instruction Fuzzy Hash: 0C418B30700701CFDB51AF69D99496ABBE6FF88200700896DEA478B361DB70EC49CF90

Function 06B9B188 Relevance: .1, Instructions: 122COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3886fb3d504b9df110ebb7ca03a54f54852ad56fe7f5a59b7371e45c7db1a7e4
Instruction ID: bd8b2b7f0617bf90253c8603383460840a989e7c88a46288923bc43457d5bf63
Opcode Fuzzy Hash: 3886fb3d504b9df110ebb7ca03a54f54852ad56fe7f5a59b7371e45c7db1a7e4
Instruction Fuzzy Hash: 97417CB1B042489FDB58DB7AA85477FBAEAEFC8240B188479E506CB295DA34CC45C770

Function 06AEBC08 Relevance: .1, Instructions: 118COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf8c1a20371424ee229e8d4358c0ea510fa55e031e29110d0a26c4aa3624379b
Instruction ID: 08ecc4687c26d32e924659398ba5e383e157eb7a9b68fefd7dda04bfc00d6f91
Opcode Fuzzy Hash: bf8c1a20371424ee229e8d4358c0ea510fa55e031e29110d0a26c4aa3624379b
Instruction Fuzzy Hash: 0E41D735704200DFEB559F25D95CB66BBE2EFC8310F14846AEA468B3A1CB72EC45CB60

Function 060A2938 Relevance: .1, Instructions: 117COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 232a2215688aaab353c7655b7738138bdd3727b0e4e3d821eba828976c1aaa93
Instruction ID: e111a9beb53b0c61d987a64d5d818b2c32c828862baa11209fae0b82bcb054cf
Opcode Fuzzy Hash: 232a2215688aaab353c7655b7738138bdd3727b0e4e3d821eba828976c1aaa93
Instruction Fuzzy Hash: C441A0313403008FC358DB69D98092ABBE6EFC935471889BDE05ACB3A5DB71EC46CB50

Function 058CB13F Relevance: .1, Instructions: 116COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c63b5c027bd497b83dcab4d40b2e2d52620cca56eaf5b5107905b1e6f7f225f3
Instruction ID: 8099c0aa94dd9396dac191d21f9734a6638fa293363b41587041a157ff9b95ad
Opcode Fuzzy Hash: c63b5c027bd497b83dcab4d40b2e2d52620cca56eaf5b5107905b1e6f7f225f3
Instruction Fuzzy Hash: 1041C3357002159FDB44EF79D945A6FBBE6FB88214B14867DE906CB345EB30DC0A8B90

Function 06B95B49 Relevance: .1, Instructions: 115COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16841af8ab6c4ee521d91cfbf4816c66a8df23e393ac35f6d2bc563979310d87
Instruction ID: 12fce94d1ca09e61569e7a08a8e90861b74f49fa31fa5c98970551d2ad43899c
Opcode Fuzzy Hash: 16841af8ab6c4ee521d91cfbf4816c66a8df23e393ac35f6d2bc563979310d87
Instruction Fuzzy Hash: 34417FB1A4020A9FDF66DF68D984AAE7BF6EF44201F0444A9E942D73A1D730DD44CBB1

Function 058CB150 Relevance: .1, Instructions: 111COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 36f6f2f7cde54bbf7c2820aac166ad914c0e2751930127ad93d9fc7290a564e0
Instruction ID: 62b6a44b28d64beb26c0c8d868b43598901c3857c409dea5b0bfa5d8a01d03bb
Opcode Fuzzy Hash: 36f6f2f7cde54bbf7c2820aac166ad914c0e2751930127ad93d9fc7290a564e0
Instruction Fuzzy Hash: F8319F357002149FDB44EF79D945A6FBBE6FB88214B148679E90ACB345EB34DC0A8B90

Function 06AE28F0 Relevance: .1, Instructions: 108COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 81d09a72198913cb76950d7b56740399576d02b600f95388cb40566c066f506b
Instruction ID: 41c5fd1bdf4e002e6ba8dfbedaeb2bc1a41c9d8bc6698d3305c13484b3b8636c
Opcode Fuzzy Hash: 81d09a72198913cb76950d7b56740399576d02b600f95388cb40566c066f506b
Instruction Fuzzy Hash: 41416A30B002099FDB14DFA8C490B9EBBF6AF88710F188069E805BB365DB70ED45CB90

Function 06AE8DA0 Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 244522f2c6742a30c1a69f46ef1ce306e3a406a7e1f0d53d3670a8a2e9c3e7a3
Instruction ID: bb5b7cc553112818234954af588713de015ab115b5c150679548397de22af561
Opcode Fuzzy Hash: 244522f2c6742a30c1a69f46ef1ce306e3a406a7e1f0d53d3670a8a2e9c3e7a3
Instruction Fuzzy Hash: F6314335760024CFCB84EF28D4848A9B7B6FF4AA11B11819AE506DB271DB35EE14CB80

Function 060A2120 Relevance: .1, Instructions: 104COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4498f8f729f22973d0ebae6f64bed430b74bc2bcd12672014bd68b97b1d8261e
Instruction ID: 97f81316ee26363104e172ec46fdbdcd66e74aed8a705f703b86aefe96b5fc85
Opcode Fuzzy Hash: 4498f8f729f22973d0ebae6f64bed430b74bc2bcd12672014bd68b97b1d8261e
Instruction Fuzzy Hash: B2419E74A013449FCB01EF68D905BAEBBF6EB88304F104969D515CF395DBB19E4A8BC0

Function 02AE7060 Relevance: .1, Instructions: 102COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9815f501ad0cd9fb60b01396a75e3f3d3b88b6c17ea53a9fd70ea375025a769
Instruction ID: 9919b0bf9ef103ce1a9acf7a5f8cfda00fe7984a112a72e3e52eff9ac6f6e47c
Opcode Fuzzy Hash: f9815f501ad0cd9fb60b01396a75e3f3d3b88b6c17ea53a9fd70ea375025a769
Instruction Fuzzy Hash: 0131C231B043549FEB05EBB8DC1576EBBB2AB85300F004465E502EB3D9DF388D098B91

Function 058CB6A8 Relevance: .1, Instructions: 98COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f58cee3fd59401c84127a5a15b9ecb5cf800a4ac00c6456b44e4359a100ac116
Instruction ID: 5c388c8ee379109b975b1dbbb6c79a5b907757dace5d4bcbfb37d1e96e44d527
Opcode Fuzzy Hash: f58cee3fd59401c84127a5a15b9ecb5cf800a4ac00c6456b44e4359a100ac116
Instruction Fuzzy Hash: E6316834B00614DFDB14DB68D999EADBBF6BF48216F1480A9E806DB360CB71DC44CB90

Function 06AE2BC9 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a1dc0e3bf78fb45a8729e77bf1b7bb5bfcec06971163f0f6b290c7b0d03d31af
Instruction ID: 0adc88db3a32054cd1b255659453743a2b55e8935207b4f04fbe2f610cb3fe0e
Opcode Fuzzy Hash: a1dc0e3bf78fb45a8729e77bf1b7bb5bfcec06971163f0f6b290c7b0d03d31af
Instruction Fuzzy Hash: 4E31C136B005059FDB60EFADD8407AAF7E9EFC4354B14807AE909CB345DB71EA0587A1

Function 06AE38A0 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 865bc31318485d9745bb8a08cd4992fb80afc98557c43a6cf38ed28c6e25ab1a
Instruction ID: e28e495bf1cc2a5b52902e54f16572178b685577683cde1d9bd74ccf959041dc
Opcode Fuzzy Hash: 865bc31318485d9745bb8a08cd4992fb80afc98557c43a6cf38ed28c6e25ab1a
Instruction Fuzzy Hash: 7E319C34700750CFDB51AF69D99486ABBEAFF8920131085A9EA56CB362DF30EC05CB90

Function 06AE5858 Relevance: .1, Instructions: 97COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 91662376b0f1b29027a899e9f48667fb9358bc7456539c46be095eabb13efc5f
Instruction ID: 3b850a0f02d6dbcdf74645f9a3b429f4af48c8a7cd3081cd263201b867f9afa8
Opcode Fuzzy Hash: 91662376b0f1b29027a899e9f48667fb9358bc7456539c46be095eabb13efc5f
Instruction Fuzzy Hash: 6331BE71F102198FDB54DFA9C89499EBBF2FF89204F104469E401EB390EB71D906CB91

Function 06B97F75 Relevance: .1, Instructions: 96COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d7ef17e20852f80dee4d3c45ef535431ab1d34f447a13538e1be2bb252d5206e
Instruction ID: f64748a93b4497d721e9df6dc8dac737b900edb24ac638f00908e26546e1c292
Opcode Fuzzy Hash: d7ef17e20852f80dee4d3c45ef535431ab1d34f447a13538e1be2bb252d5206e
Instruction Fuzzy Hash: BD41FFB0D01249DFCB14DFA9C884ADEBFB5FF48314F20842AE409AB264DB75A945CB90

Function 06B9E168 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 041afb6eb1a33f567f73e1ff44e4fa75de3861d525fe69a4c1da8de36f94ecf9
Instruction ID: edfa7ffac3b075224e8019d8d84672ac0bb42f72842f6eed1a289a988e8c834d
Opcode Fuzzy Hash: 041afb6eb1a33f567f73e1ff44e4fa75de3861d525fe69a4c1da8de36f94ecf9
Instruction Fuzzy Hash: 3831BF71B012429FDF15FB78994012EB7A2EFCA204714887AC945DB355EE31EC46CFA1

Function 060A0C68 Relevance: .1, Instructions: 92COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 071c85668aceb9d9fbe14df39d829eec56b94451e3e9e033723d467a38b24fff
Instruction ID: aa2e9e048c0b6d378e9cf9cdf0005b1f89c662bd17552e0776011123df43860f
Opcode Fuzzy Hash: 071c85668aceb9d9fbe14df39d829eec56b94451e3e9e033723d467a38b24fff
Instruction Fuzzy Hash: AC31C836F402198BDB40DEECD8445EFBBB1EFC4360F158566E921A7291C6B19905CBD0

Function 06B92561 Relevance: .1, Instructions: 91COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f9bf9afe03d8cc7423aaa9705c123aece5741ed2ee6bd0b7eb737b7b024afa6f
Instruction ID: dc9721007b62814cd9eab56aae1b3c4d93bc6ca4a5f1915cb7b87395a3337946
Opcode Fuzzy Hash: f9bf9afe03d8cc7423aaa9705c123aece5741ed2ee6bd0b7eb737b7b024afa6f
Instruction Fuzzy Hash: B9318B70B00209AFDF60CF25D884AAB7BE6EF89210B049468F846C7261CB34ED55CBA0

Function 06B97F80 Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4c7f2200b1d39e13d1560ba83e5bf9ceb0fe696afa5072ca7f9c84e33546298
Instruction ID: 9ddda0333de878268b0ddebfe9dcb49c339dec7a46b090513fc10d7b7218980e
Opcode Fuzzy Hash: e4c7f2200b1d39e13d1560ba83e5bf9ceb0fe696afa5072ca7f9c84e33546298
Instruction Fuzzy Hash: 1B41CEB1D01249DFDB10DFA9C984ADEBFB5FF48314F208429E809AB264DB75A945CB90

Function 058CEF2A Relevance: .1, Instructions: 90COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 13dd7ea6182e830edce6dd5c40001b950d0f141fb33bd27ed45908c5b6625425
Instruction ID: 9b1cf01e9343f109117a5d857939494f4d86558b08ccfcf4f5aaaecb28bcd172
Opcode Fuzzy Hash: 13dd7ea6182e830edce6dd5c40001b950d0f141fb33bd27ed45908c5b6625425
Instruction Fuzzy Hash: 9B31D130A14214AFEB19DB69C854BBE7FBBEB84710F04859DE902E7290CB719C01CB90

Function 060A0448 Relevance: .1, Instructions: 89COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2437a0348a637ac81b218e4788babac56ee6937a9750f964acf6fe5a6a3e2945
Instruction ID: 3586ed08f05402e050b5224fc00374557333507b85b5f09bf78e308258915cda
Opcode Fuzzy Hash: 2437a0348a637ac81b218e4788babac56ee6937a9750f964acf6fe5a6a3e2945
Instruction Fuzzy Hash: B4315030B402099FDB549BA9C458BAE7AF2AF88754F148429E507AB3A1CEB49C45CB91

Function 06AE6A4F Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7986e5a313610e228a2d8f6ebf7764e028e31d231cada9b68b68156af18c096f
Instruction ID: eb06044d7db78340e4206ef8fc7074c31d90dc39291ce4689477d474bcb38df3
Opcode Fuzzy Hash: 7986e5a313610e228a2d8f6ebf7764e028e31d231cada9b68b68156af18c096f
Instruction Fuzzy Hash: 1431AE317042649FC7559B69D89887EBFFBEFD92013048569F146CB372CA349C0ACB60

Function 06B9E560 Relevance: .1, Instructions: 88COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11cba50bb5c701f4a8d369f3c4ec18f01b853c7e1ee39941a2974b074a199f36
Instruction ID: 920285ec7de45e11d8757ab6222ddcda0eff2bf7ed40e0dca45750624f1b9c0a
Opcode Fuzzy Hash: 11cba50bb5c701f4a8d369f3c4ec18f01b853c7e1ee39941a2974b074a199f36
Instruction Fuzzy Hash: 6521D672B062526FDF152B38590402E7BE7AFC562832848BAC549DB305EE35DC47CB91

Function 06B9DDC7 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0508ca1951c6c965c5380d51513bf90e1abfadbef0abe78a0cdefa245ed1c93f
Instruction ID: b7d68407ff04e6b4f6647646a79d3594feb2081e52af30ca5e083c151d9f66f8
Opcode Fuzzy Hash: 0508ca1951c6c965c5380d51513bf90e1abfadbef0abe78a0cdefa245ed1c93f
Instruction Fuzzy Hash: C731B031A0060A9FCB01EF68D8809AEFBB6FF85304B14C669D408DB345DA34AD46CBE1

Function 02AE77D8 Relevance: .1, Instructions: 87COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4619a0e2125a743ecc2495f725ac45c1c154e87d88d1b9df9dad418fb73c439
Instruction ID: cfdc614a009b1f6f3cb7abfa614bd4adb762428a6f3070c765b735001e5233cd
Opcode Fuzzy Hash: d4619a0e2125a743ecc2495f725ac45c1c154e87d88d1b9df9dad418fb73c439
Instruction Fuzzy Hash: B8318D32D107068ADB11EFB8D840798B771FF95314F25871AE159BB240EB70B9E5CB90

Function 060A0438 Relevance: .1, Instructions: 86COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2f435d8c55cdd8e49854dad946433934b0991ce70aade9d7a38ca84550e82b54
Instruction ID: 1f0622219dcbae40b5657b14574afef55a3eea862be0e9a7701b19a082dcf500
Opcode Fuzzy Hash: 2f435d8c55cdd8e49854dad946433934b0991ce70aade9d7a38ca84550e82b54
Instruction Fuzzy Hash: 4421A271F402099FDB549BB9C454BAE7EE2EB88754F148029E507EB3A1DE74CC45CB90

Function 02AE77E8 Relevance: .1, Instructions: 85COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 46778a6582c2107972ab6f1e0159806626593d8d42b74198c77052057cbff301
Instruction ID: 4728814690a2b8c18180300ebe029303e178d9aa2017a7b17d6de095b6770078
Opcode Fuzzy Hash: 46778a6582c2107972ab6f1e0159806626593d8d42b74198c77052057cbff301
Instruction Fuzzy Hash: 64316D32D007068ADB11AF79D800399F771FF99324F258719E559BB240EB70B9E5CB90

Function 02AEB8B8 Relevance: .1, Instructions: 84COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7399ca699d7f08deeb0e673c53e944278d1ee4e387c8027ffc4f9c1e1220b2cd
Instruction ID: 563de28d3cfabd4fa2d39a067966c736167c262b1490501987a6136a348d831e
Opcode Fuzzy Hash: 7399ca699d7f08deeb0e673c53e944278d1ee4e387c8027ffc4f9c1e1220b2cd
Instruction Fuzzy Hash: AC3171706002059FDF05DF28D988A69BBF2FF84319F158568E4068B395DF75ED8ACBA0

Function 06AE5848 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e4f1ac4c3510ee03c1f757ade1f40c4a4586666b6a02bf603acb45cefc392719
Instruction ID: 8e30d1ad93e8117cdc533ae45cb9c2661a2cf75065ff009838680a77c6463def
Opcode Fuzzy Hash: e4f1ac4c3510ee03c1f757ade1f40c4a4586666b6a02bf603acb45cefc392719
Instruction Fuzzy Hash: 48319C71E1021A9FCB54DFA9D8849DEBBF2FF88214F104169E805EB350EB71E906CB90

Function 00F6F184 Relevance: .1, Instructions: 83COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511078166.0000000000F6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_f6d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: faca338f794b80a608f501bf7c228c9d096eff7942e9ba6839f34c40e008f2de
Instruction ID: 66850e9a2a4bde60c6fcc87ba6eeaa75cd1ba9c3f08d86da4da9bb92369eea1a
Opcode Fuzzy Hash: faca338f794b80a608f501bf7c228c9d096eff7942e9ba6839f34c40e008f2de
Instruction Fuzzy Hash: 1731F876504240EFCF059F54E9C0F16BF66FB88324F2481B9ED094E26AC336D859EBA1

Function 06AE6A60 Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ed44c94f427d7a725fbc09995c019b3383fecdbaed04f97ba565515bbd394cfc
Instruction ID: b04b5d8628ca234f43f259c8475d788ac4b2426515add88c72f252e01c3d00f1
Opcode Fuzzy Hash: ed44c94f427d7a725fbc09995c019b3383fecdbaed04f97ba565515bbd394cfc
Instruction Fuzzy Hash: D221BD317042648FC755DB29C99896EBFFAEFD92057048469F146C77B2CA70EC0ACB50

Function 06AE384E Relevance: .1, Instructions: 82COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4646d220dbf5919bcc5d346e68269ba40e96d2d7a6d525fc89fd91192ccdd734
Instruction ID: f1009a580921336d2724009c12c518a6571ff10590ea65da97f6016eb8e0f3f0
Opcode Fuzzy Hash: 4646d220dbf5919bcc5d346e68269ba40e96d2d7a6d525fc89fd91192ccdd734
Instruction Fuzzy Hash: CD315834700701CFEB54AF69D69486AFBE6FF8960031485A9EA57CB361DB30EC05CB90

Function 06B9DDD8 Relevance: .1, Instructions: 81COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b6f0ab03ecb79edde5c539346b635a33e744fa3991742903ab2a4a63928fd68
Instruction ID: 621a89f97eafa44363581a438b8e9990f4252a3a2cfd654c0de904e9bcdac269
Opcode Fuzzy Hash: 1b6f0ab03ecb79edde5c539346b635a33e744fa3991742903ab2a4a63928fd68
Instruction Fuzzy Hash: 5531BF35A0050A9FCB04EF69D9809AEF7B6FF88304B14C669D4099B349DB30ED46CBE1

Function 02AE4938 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 189c5515293334eb7f50ad791c4455835d99ceccaba65ab69839dc9d3b727c62
Instruction ID: e1376f2e3dc5efc98097b3812914b17be0fa57ccc1e670c60b8a1a98a90c3afc
Opcode Fuzzy Hash: 189c5515293334eb7f50ad791c4455835d99ceccaba65ab69839dc9d3b727c62
Instruction Fuzzy Hash: 3231F931E0030A8BDB11AF78C4502AEF7B5FF88304B10862AD41AB7380EF34A985CBD0

Function 00F6F088 Relevance: .1, Instructions: 80COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511078166.0000000000F6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_f6d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31c1f7acb5afd49965db0bc05aa6682d4abb13211368531505db9cd05a337d8f
Instruction ID: a6655e7f06dc2f9bcb0c3bb761c60f95e08637b48f69dab18eeb2be53df4d23a
Opcode Fuzzy Hash: 31c1f7acb5afd49965db0bc05aa6682d4abb13211368531505db9cd05a337d8f
Instruction Fuzzy Hash: 2621F972504200EFCF059F54E9C0B16BF66FB88364F24C2B9ED094A25AC336D85AEB61

Function 06B9E552 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: cdc14ccc5ea989646fbbd62a66363d244b789390a79d86e207846c3e591454d1
Instruction ID: c706d34671c1088c1934a2be76bac2caea39344fce0b8f0f50bf66468d2c9f3a
Opcode Fuzzy Hash: cdc14ccc5ea989646fbbd62a66363d244b789390a79d86e207846c3e591454d1
Instruction Fuzzy Hash: 6F21C871B062926FDF156B34450011E7FE75FC661432D48AAC589DB315EE34DC47CB92

Function 02AE4929 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64cf4ca3a1d3c6a65e1f2f4c94f680960797015503c7439ad0c4953a15d4fc77
Instruction ID: 9448a70d254eef35e7f23a6b0e490be1b0715d3fabe15da0f23a3bfb028f062a
Opcode Fuzzy Hash: 64cf4ca3a1d3c6a65e1f2f4c94f680960797015503c7439ad0c4953a15d4fc77
Instruction Fuzzy Hash: 6C31CA31E107568BDB11AFB8C4502ADB775FF98305F10862AD456B7381EF74A986CB80

Function 02AE1272 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fd6e1ec88c29b17a64cc55a775da79721520e6483007bfa8fdc6ecf1aa8fdc75
Instruction ID: c3595898992149e2ac3505e8a3e6efd7dfb3153d982e909f8cb68451ded9c7e0
Opcode Fuzzy Hash: fd6e1ec88c29b17a64cc55a775da79721520e6483007bfa8fdc6ecf1aa8fdc75
Instruction Fuzzy Hash: 25312834A00214CFCB14EB78E89865C7BB6FF84305B1049A9E40AEB269EF749D45CF51

Function 058CEF13 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f5febd27342a80d59d5c20ebef053c4de8b3c8cc47c41d8bdb0527f62a2e386d
Instruction ID: a686129ab04ec3c7f362c5bdfd3283fbc6c08d2ae0b8ce0c2779d44d360a38cd
Opcode Fuzzy Hash: f5febd27342a80d59d5c20ebef053c4de8b3c8cc47c41d8bdb0527f62a2e386d
Instruction Fuzzy Hash: FD31BF31A002149FEB15DB68D895BBD7FB6FF48700F148499EA42EB291CB319C04CB50

Function 060A2EE0 Relevance: .1, Instructions: 79COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5536f59cebbd63f814dedc5f8d768a4eb1b1d8660404de7af8b873382753029f
Instruction ID: 37f2148814cd86192078fd3a381e2899e40828f97f2ea4834fb2895ce53290a9
Opcode Fuzzy Hash: 5536f59cebbd63f814dedc5f8d768a4eb1b1d8660404de7af8b873382753029f
Instruction Fuzzy Hash: 6F31A930250A069FCB51EF28EA80A46FBF5FF45314B409B68D1458BB39DB70F9998BD0

Function 02AE7B81 Relevance: .1, Instructions: 78COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c61967f8af337b1eaa9c1046c1baa459b9efb5ff41effc6f1ea5faea1a3d9099
Instruction ID: c6f11095b3172104f3f3e3274d79a793c38c2cb1472d8d926d67993006ae8da7
Opcode Fuzzy Hash: c61967f8af337b1eaa9c1046c1baa459b9efb5ff41effc6f1ea5faea1a3d9099
Instruction Fuzzy Hash: AF21D331B292909FFF1B5F34A85A77A7FBA9B81616F040469F043C62C5DF2A88C2C751

Function 06B94EE9 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fc3efaf68fd86bacd2005cc4be5feb036f8d86f5baee690264f6b71070f1350c
Instruction ID: b280ff770c39d9e8a66ace6a748fb629e03ebcf08ceb6f3a2efe41626d9e75d5
Opcode Fuzzy Hash: fc3efaf68fd86bacd2005cc4be5feb036f8d86f5baee690264f6b71070f1350c
Instruction Fuzzy Hash: 6931E478A50104CFDB54DF68C598A9A7BF1EF48715B2650A8E406AB771CB31EC41CF60

Function 02AEBA41 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 19a74b1173594ae71f9a6af3bf3c8b8bc4e2d82693d7ea175c45234da7ded1cd
Instruction ID: ad5ff495b9b3587b7c61a674cfa30aef5f4f5d1df688424d742511b038087aa2
Opcode Fuzzy Hash: 19a74b1173594ae71f9a6af3bf3c8b8bc4e2d82693d7ea175c45234da7ded1cd
Instruction Fuzzy Hash: A121BB317002028BCF14DE39898076EB7A6AF84248B14882ED90ADB384EF35CC038B61

Function 02AEBA50 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6941144e0808b6d9f05ae76081df39c7794116c0b4dacb0e78a1e57bcd83df0c
Instruction ID: 86f7fe369eaa84869cf25bb0907b4e2df0aeb9c117d92c66ed1cf2db1445db7b
Opcode Fuzzy Hash: 6941144e0808b6d9f05ae76081df39c7794116c0b4dacb0e78a1e57bcd83df0c
Instruction Fuzzy Hash: 83215E307002069BCF14DB79C99066EB7A6EF84258B54882ED90ADB354EF35DD03C7A1

Function 02AE3CC0 Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c0b5a13d98446d7a6ae7705fe5600d3d31d402f71af1bb5871f9a6bfbd352e3
Instruction ID: 9632832dff51707ba79548ff3d3088b62430c7a352ae9a505d30589297519e02
Opcode Fuzzy Hash: 4c0b5a13d98446d7a6ae7705fe5600d3d31d402f71af1bb5871f9a6bfbd352e3
Instruction Fuzzy Hash: A1217C31B102049BEF089B79C899AAE7ABAEF88311F144868F406D7394DF759C468B90

Function 00F5D7EC Relevance: .1, Instructions: 77COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511041317.0000000000F5D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F5D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_f5d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a3ea54a7d4753c014ed35e3f211b7d190fd971c24cabc09ba7bdd22b4154f265
Instruction ID: 5fdc0b170deae28db212aa50abee498c44e204cf439fc5546813b3ba49ac1c48
Opcode Fuzzy Hash: a3ea54a7d4753c014ed35e3f211b7d190fd971c24cabc09ba7bdd22b4154f265
Instruction Fuzzy Hash: EE213872501200DFCF15DF14D9C0B16BF65FB98326F24C569EE094A256C336C81ADB61

Function 06AE4BA1 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d94978029f131dd221460d4a6f1d8abf17a28b13040f3554aeb88991d4874ec
Instruction ID: 0ec041ab0db13f1ee8f2d78e8b5dc9edc3c1ba40a5075808e0e744705237828b
Opcode Fuzzy Hash: 4d94978029f131dd221460d4a6f1d8abf17a28b13040f3554aeb88991d4874ec
Instruction Fuzzy Hash: EA215175F001058FCB55EF69C554AAEBBF6EF88310B11806AD90ADB369DB35EC01CBA1

Function 06B94EF8 Relevance: .1, Instructions: 75COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 927e272cb86667fc2d9c4e310b367939e6f8723b022f879ecacf9e5622def3fd
Instruction ID: 43458cd8fe44e0eb8ea4672e7c218631e997a9fbf876a63946773f7108628bd1
Opcode Fuzzy Hash: 927e272cb86667fc2d9c4e310b367939e6f8723b022f879ecacf9e5622def3fd
Instruction Fuzzy Hash: 7031E474A40204CFDB54DB69C598E9A7BF5EF88715B2550A8E806AB7A1CB31EC41CB60

Function 06AE4BB0 Relevance: .1, Instructions: 74COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5de4eaddaba0b9b56e69318ffd908a48372980752f8416b2d80c85bf9b4566cf
Instruction ID: 3bb471362920ccaee103d5c3b0c9a2083d9d84b18d194f9639b8b8d322642b94
Opcode Fuzzy Hash: 5de4eaddaba0b9b56e69318ffd908a48372980752f8416b2d80c85bf9b4566cf
Instruction Fuzzy Hash: 9A214C75F001158FCB45EB69C590A6EBBFAEF8C310B10806AD90ADB369DB35EC018B90

Function 06B9D9DA Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 15fff230b0b0bb681680f442d8e9cc95d7211caa1d17874c00dcf48b9792e1ff
Instruction ID: 79e1e83bafd5daa255d7e7f645b06d3dcecbe171305894498996a1f3e5c7e0b6
Opcode Fuzzy Hash: 15fff230b0b0bb681680f442d8e9cc95d7211caa1d17874c00dcf48b9792e1ff
Instruction Fuzzy Hash: 52212870600B469FCB51DF29DA80A46FBF1FF443147009A79D0598BA29E770F9598BD0

Function 060A1A28 Relevance: .1, Instructions: 73COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 79a43b2cc11800c8101d98f6c227abb0f704f7fa8d387ba0784aeddf2a5f81c7
Instruction ID: c9da3e5b2655cd77d2cee1ecae61339e5b65278bc3871aa91c2d1d8dd8e7804c
Opcode Fuzzy Hash: 79a43b2cc11800c8101d98f6c227abb0f704f7fa8d387ba0784aeddf2a5f81c7
Instruction Fuzzy Hash: 381131323406605FC355AA7D98108AE3BE7DFCAB9136900B9E409CB7A1CE28DC02C3E5

Function 060A2FF0 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c3d9837c565c9ef81e53e0ab4eb989ced8cded8202a89a2fdcc20babb073d0ef
Instruction ID: 3dae8c697fe7a0e0e02f648f6fab102ba2f70bbd563aa85ce7227c5b74a67eac
Opcode Fuzzy Hash: c3d9837c565c9ef81e53e0ab4eb989ced8cded8202a89a2fdcc20babb073d0ef
Instruction Fuzzy Hash: 401104723403247FEB609A65EC50F9BFB9ADF81BA0F108127FA44DB2D0C6A19C41C3A0

Function 00F6D610 Relevance: .1, Instructions: 72COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511078166.0000000000F6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_f6d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 803c949b71088ea8479867b417616dd66d589eb710512612b05300ec296686bf
Instruction ID: abc39563fb09a9c9233849558adb21fd5d5803ced6de1ef9f8a969969878bbc2
Opcode Fuzzy Hash: 803c949b71088ea8479867b417616dd66d589eb710512612b05300ec296686bf
Instruction Fuzzy Hash: C321F275A04244DFCB04DF14D980B26BBA5EB84324F20C569E80E4F256C33BD856EA61

Function 02AEE880 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 222cb8b480002094adcdc8c9e925f44e1e98f68cb39d7a3731acc44819c9a9a5
Instruction ID: 618ffcde5d987e45914cfbb9c06446ef85ba3899bbcde0ebedf93618f97cccb2
Opcode Fuzzy Hash: 222cb8b480002094adcdc8c9e925f44e1e98f68cb39d7a3731acc44819c9a9a5
Instruction Fuzzy Hash: 8C216235B00205DFDF10DF64C984A6A7BB1FF84364F158469E9169B3A1DB31D942CB50

Function 058CCA58 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9db5a030ba27438c24016537733be3bbd7d5889a1879e387f79ee184f1607a4e
Instruction ID: 133c4630e61cc981943a9137234e2abd121d3e9b6deee172755d7f14394bb654
Opcode Fuzzy Hash: 9db5a030ba27438c24016537733be3bbd7d5889a1879e387f79ee184f1607a4e
Instruction Fuzzy Hash: 3B21C330B002189FDB149BA9C458AEE7FF7AF49210F1440AAE916EB351CB729C45CFA1

Function 060A2EF0 Relevance: .1, Instructions: 71COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d4fc1f4b89ed5bf280f371016f4187ce436e0924e77bc29c88ab0dbf40956d95
Instruction ID: 999e908e3d650f6d7d42726b55ac5e1b3b8b564ae5ab6f5a5e3a4d5db65fc6e6
Opcode Fuzzy Hash: d4fc1f4b89ed5bf280f371016f4187ce436e0924e77bc29c88ab0dbf40956d95
Instruction Fuzzy Hash: 5A318930250A069FCB51EB28EA80A4AFBF5FF44314B009B68D1458BB39DB71F95D8BD0

Function 06B91EF0 Relevance: .1, Instructions: 68COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4c055635c08cd7dcca5508966705f5b5b05c4de2edce108fac0f828918e51abe
Instruction ID: c209b278a12cd9d549e17ea1e84f062d7629fe0ec7654763a5385157e4a9f65b
Opcode Fuzzy Hash: 4c055635c08cd7dcca5508966705f5b5b05c4de2edce108fac0f828918e51abe
Instruction Fuzzy Hash: 8F21FF75A00209DFCB09DF34D854AAEBB72FF88314B10816AE905DB365CB319D41CBA1

Function 06B921D0 Relevance: .1, Instructions: 67COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: decac9ea749f9b31812f56859295efcdc15a3071f8b32ccd8ea5c7431caf14b4
Instruction ID: 8b2b6270e21d3a644fd47a6a6579ae7c75d6d99ea4132c9a814360408764f885
Opcode Fuzzy Hash: decac9ea749f9b31812f56859295efcdc15a3071f8b32ccd8ea5c7431caf14b4
Instruction Fuzzy Hash: C1218CB1E34200AFCEBDCB18C0E8869B7B5EF4661075A55EEE1474BA71C331A944CB60

Function 06AE6488 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6513ed8dddaaa9909d2837403f7fa42952fcd93cf0a4438654b896458e74e9fe
Instruction ID: 82aceb5a62327fffd390dd42e6dde2ddea00c4244507c4da34a5220f244e3939
Opcode Fuzzy Hash: 6513ed8dddaaa9909d2837403f7fa42952fcd93cf0a4438654b896458e74e9fe
Instruction Fuzzy Hash: 35112E30B502058FCB94EF54C568AAEBBF6AF9A245F146859E407EB3A5CB31DC01CB61

Function 06B9546A Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6862dfaf687bcdb20810137a50e74ba4ce10cff853356592a3af619fba076d2f
Instruction ID: 3bae9c514931544e24baded51b512d0a4fb1a34de42d30a763e9b238b78db08d
Opcode Fuzzy Hash: 6862dfaf687bcdb20810137a50e74ba4ce10cff853356592a3af619fba076d2f
Instruction Fuzzy Hash: 9611129260E3E02FE307667C6D7019A7FA59D9321434B04EBD0D5CF2A3D948884E83BB

Function 058CF898 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 76fcf9842bf3179125bb987837c21c06e19b25d2a37c140b58d22475646f8fe6
Instruction ID: 520fa4fd364f7f2e036bf73c90c70a3850d7889a5a9a6e13f856750eaa4c8c15
Opcode Fuzzy Hash: 76fcf9842bf3179125bb987837c21c06e19b25d2a37c140b58d22475646f8fe6
Instruction Fuzzy Hash: FD213934E01309AFCB00EFA8D941AAEBFF2EF49310F104199E946AB355DB349E44CB91

Function 060A3299 Relevance: .1, Instructions: 66COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 579d256f66e67239e8479645e325771f996e0bfb6a1d8760dee8dfcf4565139f
Instruction ID: 1ab0a8b06f561e7e59262e6a323be4ff2744f4b900e918b58e59854fa217aa49
Opcode Fuzzy Hash: 579d256f66e67239e8479645e325771f996e0bfb6a1d8760dee8dfcf4565139f
Instruction Fuzzy Hash: D92167B57017419FC716AB38D40096EBBA3AFC9219725846ED18ACB365CF34AC87CBC5

Function 06B94FCF Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c109390c82716b5d9ab53eaa7e209f87bd8343572078426bd55de19e272eeeb3
Instruction ID: 6568326fc4be1d91e0d356956d036862a988eefa2bf8e33542558050d998f1e9
Opcode Fuzzy Hash: c109390c82716b5d9ab53eaa7e209f87bd8343572078426bd55de19e272eeeb3
Instruction Fuzzy Hash: 97117976B501008FCB94DB2CD59496DBBE2EF8821532580EAE50ACB371DE31DC058B90

Function 060A0C78 Relevance: .1, Instructions: 65COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c2e678e95f122068607bf140acb460b85ee4fce88b52df06377980a73e3d81ce
Instruction ID: 9135d95b9c11655bdfcd311e5f0e3b611072d62d85ee8ebc3bea04a3a4a9e96b
Opcode Fuzzy Hash: c2e678e95f122068607bf140acb460b85ee4fce88b52df06377980a73e3d81ce
Instruction Fuzzy Hash: 6011DD352443808FC316DF3DC894859BBE2EFCA65432908E9E45ACB762CE21EC05CB95

Function 06B97511 Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3a42cc074e30a0183ad7ba1ed3c9c988d4427be829c4c3614eeb34d51a1060f6
Instruction ID: 9652b99df1cedc8a712702e6e966649b84e034208aa6cd58dda6404509a4574d
Opcode Fuzzy Hash: 3a42cc074e30a0183ad7ba1ed3c9c988d4427be829c4c3614eeb34d51a1060f6
Instruction Fuzzy Hash: A911E2B26143508FDFD6AF3499117AA7BE6EB81240B0494F9C40ACF3A5DE25CD02CBE1

Function 00F6F17F Relevance: .1, Instructions: 64COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511078166.0000000000F6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_f6d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7cfb7dd041e002c130cd1539feb2bbdfd134433b7a32c8f6d204d752fbd68790
Instruction ID: 31720dfd266793b53cecbf3de84ca3ec73a7d05312c948fa5d51b19decb26585
Opcode Fuzzy Hash: 7cfb7dd041e002c130cd1539feb2bbdfd134433b7a32c8f6d204d752fbd68790
Instruction Fuzzy Hash: 9E217176404240DFCF068F54D9C4B56BF72FB88324F2481A9ED094A26AC336D866DF91

Function 06B9B750 Relevance: .1, Instructions: 63COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e47ebd0eb9014ccd07aaaf3d8ecf8b4fb45afbedc47fec9b29005e5b1a287dc0
Instruction ID: 436af111843ae8e4bf39f6e898d20e8366e1cd7d473d596a41938617e0684041
Opcode Fuzzy Hash: e47ebd0eb9014ccd07aaaf3d8ecf8b4fb45afbedc47fec9b29005e5b1a287dc0
Instruction Fuzzy Hash: 5311E771A002049FDF649A59E444BEFBBB5EB88351F1411BDE501A7350CB755804CBF5

Function 06B97560 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16c772296ed4dc52a6ebe87ba0e526db5419b983f1f0693d3c0c5be4d3676ddf
Instruction ID: f1fcc12b938ef1009ad38c5b6dbda0aef85cc035180bcc4821ba568ba9031202
Opcode Fuzzy Hash: 16c772296ed4dc52a6ebe87ba0e526db5419b983f1f0693d3c0c5be4d3676ddf
Instruction Fuzzy Hash: E7118BB2B042149FCF95EB38D454A5EBBE6EB88254B1095F9D00ACB364EE31DD42CB91

Function 06B93348 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40e30f28101e28fdb1767917dcf674618f0dead8063ecc43098b5a7f140896f0
Instruction ID: 8d813c0d57a0a02255112698a0b7faf94fbffa5892675f23ffccefbeb8432066
Opcode Fuzzy Hash: 40e30f28101e28fdb1767917dcf674618f0dead8063ecc43098b5a7f140896f0
Instruction Fuzzy Hash: 7B112E767001149FCB159F69D884C9A7BB6FF8D621B1541A6FA05CB365CB32DC12CBA0

Function 06B920A2 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: efc8ab5827b32a3f8be3fb5663f19508429fbe622dcc2a45331e964acbe556ea
Instruction ID: 7d24f409090704f6f4b1a463b0e275ec7940494f9ada6a9ce8c74eafc2cc5310
Opcode Fuzzy Hash: efc8ab5827b32a3f8be3fb5663f19508429fbe622dcc2a45331e964acbe556ea
Instruction Fuzzy Hash: 97119D76A14265AFDF058F64DC409AA3BA6FF89220B048066FA19C72B1C636C921DB60

Function 060A32A8 Relevance: .1, Instructions: 62COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a06a7f8118f5ba7ab390103ea2263725d283d5b072fa9d3ee06c6f17c4ed0973
Instruction ID: 35b8496bc4726c7b0a24015e1a454a8fe1a2062321251b2d518de5d88759996b
Opcode Fuzzy Hash: a06a7f8118f5ba7ab390103ea2263725d283d5b072fa9d3ee06c6f17c4ed0973
Instruction Fuzzy Hash: 791186B46007019FC315AB38C40091EBBA2AFC9259710446DD18A8B364CF30EC86CBC5

Function 00F6F083 Relevance: .1, Instructions: 61COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511078166.0000000000F6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_f6d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4b8d3571c4b9cc2845d5b9732b44ba54f756556ea458328d5f45100f7847987e
Instruction ID: 541cf5c85297ed4ebf35248c147850168e2f67e93728d5bca67e6e434b312bb6
Opcode Fuzzy Hash: 4b8d3571c4b9cc2845d5b9732b44ba54f756556ea458328d5f45100f7847987e
Instruction Fuzzy Hash: DB219F76404240DFCF06CF54D9C4B56BF72FB88324F24C2A9ED080A26AC336D82ADB91

Function 06B9E652 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ffd5cc657b610372596d7063700727a0473f683a3cb6f926fe2e2206de56cb30
Instruction ID: 6523d52d8c5e76ed73e205fb5329fb255ea9726da7b2649484815685b0e582bc
Opcode Fuzzy Hash: ffd5cc657b610372596d7063700727a0473f683a3cb6f926fe2e2206de56cb30
Instruction Fuzzy Hash: 9E116D71E012158FDB18DF68C958BAEB7F2EF88300F24856DD802E7294DB759D02CB61

Function 06B920B0 Relevance: .1, Instructions: 59COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dc5338ec69fe61e4b73d31205c387b5c61f46a459edf1fdbb840d3a389f25f81
Instruction ID: c789ec30651c0610b4210e478dc013bafe3292339108e94aaf3ebcbd1131cc06
Opcode Fuzzy Hash: dc5338ec69fe61e4b73d31205c387b5c61f46a459edf1fdbb840d3a389f25f81
Instruction Fuzzy Hash: 5D119E76710229AFDF058F65DC449BE7BBAFF89220B048066FA15C7261C736C921DBA0

Function 00F5D7E7 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511041317.0000000000F5D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F5D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_f5d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7c8d58dc0dea2b6e01ffeb94055e7b182a7219ccea2c20f3472bf21e95a7b9d
Instruction ID: d23a99da6fb364a065aaa15f0424c74a648edcb77d4ae2d7eb37d824fa1b69c1
Opcode Fuzzy Hash: c7c8d58dc0dea2b6e01ffeb94055e7b182a7219ccea2c20f3472bf21e95a7b9d
Instruction Fuzzy Hash: 5421C072905280DFCF16CF00D9C4B16BF72FB98325F24C6A9DD480A256C33AD41ADB91

Function 060A06D0 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 09e44b9badcb6e6b87208bb547d92a7df093f20e5d00ba00bc795df98b83a54d
Instruction ID: 50beb382be60842ecad2785f23ee20f5f42595f5b1eb4e2d05413429a9dfb7e2
Opcode Fuzzy Hash: 09e44b9badcb6e6b87208bb547d92a7df093f20e5d00ba00bc795df98b83a54d
Instruction Fuzzy Hash: BE112531E403189BDB548FA8D9597EEBEF59F88394F18001AD806E7381CA759885CFA1

Function 060A29E0 Relevance: .1, Instructions: 58COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 75b6bcc6b31eab37c3a6d6fa979613dc9e16bf2a8ff527e09aa6498473ead48d
Instruction ID: 95b1b5bfb2c2d9ff691a1dc3cdc8c0cff349c24c56d617750b60effafb2d0ff3
Opcode Fuzzy Hash: 75b6bcc6b31eab37c3a6d6fa979613dc9e16bf2a8ff527e09aa6498473ead48d
Instruction Fuzzy Hash: 1711E5352093809FC719DB74E8D0E7A3B75EF9A20031841AEE051CF256C675ED46CBA1

Function 06B9CD92 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b105bc5a84c7206c4760a5518757fc2da8086ee1916891b601f96a252f34d533
Instruction ID: c637c3b0bc313af7f6882d800d2d80de6dc1c5384e03a0a7c8c359a861fada46
Opcode Fuzzy Hash: b105bc5a84c7206c4760a5518757fc2da8086ee1916891b601f96a252f34d533
Instruction Fuzzy Hash: 28115B75B101089FDB44DF69C454A9EBBF6AF8C210F15406AE406E7360CB71AD41CFA1

Function 06B97550 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f54f4e58894f6269957b1141dcea27e4f2d79c0581ce9d306f9707851325a76e
Instruction ID: b765033307d7e0ab979f875426abf99da004b0c0b2d4d6a3ffd2ab823bd2d200
Opcode Fuzzy Hash: f54f4e58894f6269957b1141dcea27e4f2d79c0581ce9d306f9707851325a76e
Instruction Fuzzy Hash: 781191B2A452509FDF96AA38942475A7BE2EB45244B1495FAC00ACF354DA31CD06C7E1

Function 02AE0DD0 Relevance: .1, Instructions: 57COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3c787ba67d0e147d3ff5e4b0a4bad2d088732a2577db1a0d1bfed9ceb91811d1
Instruction ID: 7feed7b583c1bcaf70f2a90521fe84d7f7a7a0ed579e8d9474cef60c0d123214
Opcode Fuzzy Hash: 3c787ba67d0e147d3ff5e4b0a4bad2d088732a2577db1a0d1bfed9ceb91811d1
Instruction Fuzzy Hash: 22014E20B0C3942FCB535B7CAC647DE7FA9CF86210F0401AAE585E7393DA64490987A2

Function 06B97428 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4acf0e4c2f9bd1a92f270136e3706e1e813ea4c4a51c0aac970431039ec2388a
Instruction ID: ed6ec7a83b3db7b009908ed06310a812cde9d0f8c88f5068d01f1e27f5c46213
Opcode Fuzzy Hash: 4acf0e4c2f9bd1a92f270136e3706e1e813ea4c4a51c0aac970431039ec2388a
Instruction Fuzzy Hash: 1011BA31241A479FCB51DB29EA80946FBB5FF813147009B29D0458BA3AD770F99D8BD0

Function 058CF8A8 Relevance: .1, Instructions: 56COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 436847f9b8c61e064ee8559652e26f45beac6f1b2e6e015c749ecf7d4a9a918a
Instruction ID: 90693ee7667003afe2962d05f5b410ef501eebe9752269fc07d4a61ee6bd1635
Opcode Fuzzy Hash: 436847f9b8c61e064ee8559652e26f45beac6f1b2e6e015c749ecf7d4a9a918a
Instruction Fuzzy Hash: D321C774E0020D9FCB04EFA8D5859AEBBF2FF88310F504599E946A7354DB34AE44CB91

Function 06AE4078 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35f1ae7ba89fdf9b5e7cd4b64fc08dc5cdb8b5886c80742efc1737c65b7ca3ef
Instruction ID: 16085aab21cfe7d77b984bd5288f486496d1b4a1924ad60fdd997cc1d6e8428e
Opcode Fuzzy Hash: 35f1ae7ba89fdf9b5e7cd4b64fc08dc5cdb8b5886c80742efc1737c65b7ca3ef
Instruction Fuzzy Hash: D7017C727046048FD755EF6DEC94A6BB7EAEBC9201B15417EE40ACB261DF348C0187A2

Function 060A2A20 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 049f64d46b73667df105d34e230869572f910ab5549216147732648e3c038a37
Instruction ID: 3820b1f80889d04b31afcc7133371ae0f7f9ce2a96174e5f33317a412df92016
Opcode Fuzzy Hash: 049f64d46b73667df105d34e230869572f910ab5549216147732648e3c038a37
Instruction Fuzzy Hash: 5211E135300250DFC758DB68D890E2A77B6EF8934471845BDE006CB765CB74EC82CBA0

Function 060A05A6 Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68e138bd23c5816425dfb27279e49648649034ed0dc84c1c9d932e9f12a9fa8e
Instruction ID: 045e2ee610a87c89c147aa8cf2376d65e7f11d30fcb2d6aa9c9462c6a7474f15
Opcode Fuzzy Hash: 68e138bd23c5816425dfb27279e49648649034ed0dc84c1c9d932e9f12a9fa8e
Instruction Fuzzy Hash: 88012131B452284BEB05A66D68502EEBBD69FC4224F04813AEC06EB7C0DF24C84B87D7

Function 00F6D60B Relevance: .1, Instructions: 53COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511078166.0000000000F6D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F6D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_f6d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 48042a67946fd5b471a152cae87ddc5a96e5ad52caa5f07da488830fbc7c129d
Instruction ID: 8090e0fccf11de7dc2fbb378e46c763ba7018e0f55703260e504f0ed435507f3
Opcode Fuzzy Hash: 48042a67946fd5b471a152cae87ddc5a96e5ad52caa5f07da488830fbc7c129d
Instruction Fuzzy Hash: 8A11BB75A04280DFCB01CF10D5C4B15BBB1FB84328F24C6AAD84D4B256C33BD81ADB61

Function 06AE3A98 Relevance: .1, Instructions: 52COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c5efddf7e4b094da4ef2f61c534b45fcb44979f5fcd062ed36c5750566c7f0bd
Instruction ID: 6d85f7d29c8a2fdfdce5ef5e5fb4fa6c9d8110a594f89d04b77660ce5c8e8221
Opcode Fuzzy Hash: c5efddf7e4b094da4ef2f61c534b45fcb44979f5fcd062ed36c5750566c7f0bd
Instruction Fuzzy Hash: E011E0716097928FC3069F26D090462FFB6BEC6200309C6DAC4594F306CA70E989CFE0

Function 02AEB9C0 Relevance: .1, Instructions: 51COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f2f5afb607d18f72d98fe6ea250ec28668f2d18b63d1f4898c4567041294480e
Instruction ID: 1d1e1acf4b87486a3261eba3fa50fe1cd51bec05ed03b6779e2cc53a412e1dbc
Opcode Fuzzy Hash: f2f5afb607d18f72d98fe6ea250ec28668f2d18b63d1f4898c4567041294480e
Instruction Fuzzy Hash: 1001B5357002055FDB44DB6AD884A9ABBAAFF84260B15C56AE805C7375EF30DC0287A0

Function 06B9CDA0 Relevance: .0, Instructions: 50COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e1edf5f2f14dd19df03282e36c2be039b2d85785b0a29cb57b3cd9a113247b44
Instruction ID: be2d4f8d0c42772f4430bd1a7cf9f4392ea28228ed3e85c516090e787723e4a6
Opcode Fuzzy Hash: e1edf5f2f14dd19df03282e36c2be039b2d85785b0a29cb57b3cd9a113247b44
Instruction Fuzzy Hash: B5115774B106089FCB44EF6DC454AAEBBF6AF8C210F10406AE406E73A0CB71AD41CFA1

Function 060A06E0 Relevance: .0, Instructions: 49COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d0b7bd3dd1f43560dadae6bd934fb1bb6d66e2a6e24cef8d86d7f1077756cc99
Instruction ID: a4b14fbd3c2c4d32669748422c298c2dbb627e1d09d51d1897e40a1679d51c97
Opcode Fuzzy Hash: d0b7bd3dd1f43560dadae6bd934fb1bb6d66e2a6e24cef8d86d7f1077756cc99
Instruction Fuzzy Hash: 0D01F531F403189BEB545B98D5197EE7EF59B88794F140029D407E73C0DEB95C85CB90

Function 06AE8F12 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bbe6236fdb65962b74754bca4d8dae51d8b246ef1edc016ae800e703b92b3644
Instruction ID: e730adc4e8bcbcc0e5c39eba2e179aa7ea50651db1ffdc0a186e82f49ccfdc5e
Opcode Fuzzy Hash: bbe6236fdb65962b74754bca4d8dae51d8b246ef1edc016ae800e703b92b3644
Instruction Fuzzy Hash: 4D018F35704A109BE7646B28A9187AA77B7BF40701F040828F103CA680DB3DE945C7D7

Function 06AE2D98 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bf2c741eea09914c7d9f425d2d931f7c74b66088d8eb1ce3fa194aa07443aa02
Instruction ID: b9b4896cc92ff3fcd530e8d430e8d692bdaa8edb53f5e285bf8c63896b45d84a
Opcode Fuzzy Hash: bf2c741eea09914c7d9f425d2d931f7c74b66088d8eb1ce3fa194aa07443aa02
Instruction Fuzzy Hash: D4F0A4363042154F9754E75DE480A6BB7DEDFD82B0315802BF909C7340DE31EC018364

Function 06B9CEB7 Relevance: .0, Instructions: 48COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3526f1ede548dc97ed718480e456e64341511c629a9d4a5a160cbab6ed30ad1e
Instruction ID: 50c6c4b52041826c1e097fc88e2d987aacfb9f9001c8b1f3d2fa3d317c0b1afe
Opcode Fuzzy Hash: 3526f1ede548dc97ed718480e456e64341511c629a9d4a5a160cbab6ed30ad1e
Instruction Fuzzy Hash: FE0184767115109FC7859B29E994C5EBBB5FF9A62131140B6E506CB331DB30EC05CBA0

Function 06AE3AA8 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c3315f8198a6cd91d3aa929cebab3a614b989bf100c044e3f3b458c81af266f8
Instruction ID: c6091893f9535eebd561d88a938d4e3111474a4780978a8d87a54954e875e7fa
Opcode Fuzzy Hash: c3315f8198a6cd91d3aa929cebab3a614b989bf100c044e3f3b458c81af266f8
Instruction Fuzzy Hash: 8B11CC716097928FC306DF2AD090462FFA6BEC6210309CBA9C5594F306CA71E989CFE0

Function 06AEA1A4 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3952d711f94846edde251ccf424e1332adaed64e974962c0e94a22f5aaa9eba5
Instruction ID: 7a080be5e866701cf6fcf48f8f154c96dd023117d6f836ee6b34eb41991a90cb
Opcode Fuzzy Hash: 3952d711f94846edde251ccf424e1332adaed64e974962c0e94a22f5aaa9eba5
Instruction Fuzzy Hash: AA012D31B0411EDFDF55AF84D8849AE7B76EF98345F048412FA119A290D73189A1DBE0

Function 02AEB9D0 Relevance: .0, Instructions: 47COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27570669196e2640c80992ac01cf77542a6b2a78c5262fa6848b7e5839139324
Instruction ID: 5dfaf02d0df885473575a38cb8b381576862e76342de1fd6be00fd870cef5550
Opcode Fuzzy Hash: 27570669196e2640c80992ac01cf77542a6b2a78c5262fa6848b7e5839139324
Instruction Fuzzy Hash: F50186357002059F9B44DF6ED88496ABBEBFFC8264715C526E909C7364DF70DC0287A0

Function 06AE6324 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e0e89b9408bee70e13fc66822b929f20a428e9765831ed46c8765e1fbc036707
Instruction ID: 07cf75c7f0d55903d9b0d81cefcf1f8d5d93787a7d750f974322c55b452b084b
Opcode Fuzzy Hash: e0e89b9408bee70e13fc66822b929f20a428e9765831ed46c8765e1fbc036707
Instruction Fuzzy Hash: 4CF050353053001FD705162E9C60AABBFEFAFCB510325016AF10ACB353CD2A8C0683B1

Function 02AE97F2 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ac5f33eac5805eedee01487b9be96f611769adc1e31d2711b9abbb5cd3b4c539
Instruction ID: 5457976dac1d23d6cd46edbb8e8111cd7ea3822a92bd1cee7f05977adcaa9d1d
Opcode Fuzzy Hash: ac5f33eac5805eedee01487b9be96f611769adc1e31d2711b9abbb5cd3b4c539
Instruction Fuzzy Hash: EC117C35A042199FDB14CB99C988ADEBBF5AF4D310F0940A5E402BB361DB349D40CBA0

Function 02AEDE45 Relevance: .0, Instructions: 46COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4a1f6818892017020e0627eda04e7bf248cf5b0cc8e66b1cc77c8a28854c389
Instruction ID: 0f54a6bbdb82ef027abaacb7688e2bd81dd06c7be0a7039a63e25452c0757c2b
Opcode Fuzzy Hash: f4a1f6818892017020e0627eda04e7bf248cf5b0cc8e66b1cc77c8a28854c389
Instruction Fuzzy Hash: BC0124322047425FC711AB29D89570BBF76EBD2220F49857DD14A8B292DF25F844CBA0

Function 06AE4020 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aab13609ba6f114a2f51791d50411cd64b0a7377514329bf38922dcdd5a9675c
Instruction ID: 3efee88903f6252b4ded9b4ad567d5f2cb0de20965c855aa6bd62fc39c6c478a
Opcode Fuzzy Hash: aab13609ba6f114a2f51791d50411cd64b0a7377514329bf38922dcdd5a9675c
Instruction Fuzzy Hash: DEF090327042244F5754ABAEAC8892FB7EEEFD8561724023BE809C7320DF61DC0187E1

Function 058CC5FA Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 525b5c01c13711bee4bc82cda66655023b4974697b02a3ad2135c707f480dc15
Instruction ID: 0bddb5b8c376cb99df6dc950fb84a5035b0cf8cf7323c0fd3c6a936bdcf9f3a1
Opcode Fuzzy Hash: 525b5c01c13711bee4bc82cda66655023b4974697b02a3ad2135c707f480dc15
Instruction Fuzzy Hash: 4CF0A4717091146FD308CA0DE954E7ABB9AEB88220B1490AEAC1AC7350DB36EC4287A0

Function 00F5DC11 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511041317.0000000000F5D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F5D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_f5d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: aef4fd451c3f11b7c9e0db53dd98bd7921c463d9197ade2608c290f67bfe6c88
Instruction ID: 2b1decd24867f97678f3e85df3a22683009bbef2f74f0631f80ce6d388b1b77d
Opcode Fuzzy Hash: aef4fd451c3f11b7c9e0db53dd98bd7921c463d9197ade2608c290f67bfe6c88
Instruction Fuzzy Hash: 62012B7140A3049AE7204B1ACDC8B67BFD8EF40336F18C429EE094F182C2B8DC44E6B1

Function 060A2A30 Relevance: .0, Instructions: 45COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4d9d62d8dc9df0404b16e5c9b7cb89358d69eb245e7de6b074860198d0314e2
Instruction ID: f9cab24045bf050bed74ef4d9597b83f73c298f9383f4c75792ab3267e7c60eb
Opcode Fuzzy Hash: f4d9d62d8dc9df0404b16e5c9b7cb89358d69eb245e7de6b074860198d0314e2
Instruction Fuzzy Hash: 4D0171353402009FC758EB68D484E2E77EAEBC8354B14447DE406CB365DB75EC86CBA0

Function 06AE49C0 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4f85a439409473b67fa08b22a33f658550d0aec5c1a7aaeb91d5726de68ebb2b
Instruction ID: ec84c968532263d5c1c756c71cce9c429954ac6b3d111478641d9f4881045d42
Opcode Fuzzy Hash: 4f85a439409473b67fa08b22a33f658550d0aec5c1a7aaeb91d5726de68ebb2b
Instruction Fuzzy Hash: 0D01A27190A388AFCB02DB74EE5199DBFB5EF47205B0042E6D44ADB253DE301F0497A2

Function 060A2338 Relevance: .0, Instructions: 44COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 41d1b9b41d68e7acbde64551098eb56bcc6308b8aad477e2b44466f4d8a51a26
Instruction ID: 9a2e7f7e5ccb9f674ffe42a70432653f1f76a37f16a1273bbddea7847e8f7985
Opcode Fuzzy Hash: 41d1b9b41d68e7acbde64551098eb56bcc6308b8aad477e2b44466f4d8a51a26
Instruction Fuzzy Hash: C201F2312407108FC7219F68E54099DFBA1EF81314714493EC0868B611DB78EA05C781

Function 06AE2CD0 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8bc5bd0f9ba9f2c9863d9c6e1c532161edbb96bc2a8cd48e6c27b4e849f75eb3
Instruction ID: 6bc8f8fbf9f8e141534fb11ec51ca0e57a9a927207ea2f72517feb15d891ca21
Opcode Fuzzy Hash: 8bc5bd0f9ba9f2c9863d9c6e1c532161edbb96bc2a8cd48e6c27b4e849f75eb3
Instruction Fuzzy Hash: 1AF0FC32B102254FE79477B8A50C7A97FDAEF883553008466DA0BCB350DE71DD094380

Function 02AE9800 Relevance: .0, Instructions: 43COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 67c9747cdb1c310431f61a7079d8e88bea36c19065023780700dc679eb5e303d
Instruction ID: 008b236e6fa7443a506d02831d36e0031dbb081596cdab4e6c191da01e071c6e
Opcode Fuzzy Hash: 67c9747cdb1c310431f61a7079d8e88bea36c19065023780700dc679eb5e303d
Instruction Fuzzy Hash: F2012D35A042198FDB14CB99C984ADEBBF5BF4C310F1980A5E416B7361CB75AD41CBA0

Function 06B9E738 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 31320f831a652b182e501db71ae6cbf10f4e2d2896ca0a97e166399e8828dc1d
Instruction ID: f162fc166a278df3f9c40e892db8387af59e16000258efb6184dff1955009b76
Opcode Fuzzy Hash: 31320f831a652b182e501db71ae6cbf10f4e2d2896ca0a97e166399e8828dc1d
Instruction Fuzzy Hash: 4EF0F631B006105BCA17A33DA40836DBAD7EFC1365B04416AE6199B391CFA9DD0683E6

Function 02AE8711 Relevance: .0, Instructions: 40COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a62f85859b21047f02a771a79a9dd785af909a3ac8bb333b7ce303645619542b
Instruction ID: 9addcc219ac611a686c694ab092920717523916e23cc8fb2087ac29d1b7c7dff
Opcode Fuzzy Hash: a62f85859b21047f02a771a79a9dd785af909a3ac8bb333b7ce303645619542b
Instruction Fuzzy Hash: 74F028752442404FCB019BACE841A98BFD1DFC826070608ADD069DF228DA38D8068B20

Function 06AEDFC6 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1e74fd40d444dda060d3f4a4da5cfd8dff31e56af9d819df2003dca5e5ffcfd0
Instruction ID: e426f4a1a7c4d3352d79488b4fd104c4ead1733615cf6149e62d3528ad82c0cd
Opcode Fuzzy Hash: 1e74fd40d444dda060d3f4a4da5cfd8dff31e56af9d819df2003dca5e5ffcfd0
Instruction Fuzzy Hash: C9012870D00219DFCB40EFA8D8409AEBBB2FF88310F10C929D55AAB651D335AA01CF90

Function 06B9CE60 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 26679693f724e91437c49ed19470234f3ae87d9698d989a0c094a0b34c0a5509
Instruction ID: 9a0899583ee6ad60d75eda0a4a09c91830bc0062c208599b9aa1a218bfc1bd25
Opcode Fuzzy Hash: 26679693f724e91437c49ed19470234f3ae87d9698d989a0c094a0b34c0a5509
Instruction Fuzzy Hash: B9F0BD763104149F87489F29D988C5ABBE6FF8D62136180A9E50ACB371CB21EC558A94

Function 02AEBB21 Relevance: .0, Instructions: 38COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c7733e9789489baea34c0f8e50c6e92d8e61d42962ffa10300285aa2cadbc908
Instruction ID: 50cbe3a4f0ae25e699af656a1bf01f85a13d66d20d682272c93e62f2fd3bcf14
Opcode Fuzzy Hash: c7733e9789489baea34c0f8e50c6e92d8e61d42962ffa10300285aa2cadbc908
Instruction Fuzzy Hash: E2F02B777406215BD7149BBC598462EABD9EBC8351B11057AD506C3394EF32CC438790

Function 06AE3A32 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f436d921f68f305ccf8b878f91c9c2c7d51c8ea95cc96feb289bbe57a178d1b9
Instruction ID: 130b794bd819243dbcfb9e148dd7a63e2d8918956548313b27d566a6cb4d3163
Opcode Fuzzy Hash: f436d921f68f305ccf8b878f91c9c2c7d51c8ea95cc96feb289bbe57a178d1b9
Instruction Fuzzy Hash: E8F0F6712057011FC2165B28E80956EFFEADFC1345704455EE54387381CE75AD4A87A2

Function 02AE8F58 Relevance: .0, Instructions: 37COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: edc5ae398aa7b0b1b7234cacb43ad57ec947fa34623481ff11cf4e9942bf1986
Instruction ID: 9d25e777a10aa7fd955e0a57dd408c692926a0b9a537080080ac73888e48c2d4
Opcode Fuzzy Hash: edc5ae398aa7b0b1b7234cacb43ad57ec947fa34623481ff11cf4e9942bf1986
Instruction Fuzzy Hash: 9BF04F75300610CFD71A9F28E659A2D3FBAEF88316B154169F406C77A1CF389D82CB94

Function 06AEA698 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 63d612ce377c2f02793b8b2427c96d0210e6dc5f54ee223ec4222a0a2f1df6a7
Instruction ID: 841019b00f833ff667b925e4ade67449cf3d44cf14d7d0991cdc7e74a4fcf8bb
Opcode Fuzzy Hash: 63d612ce377c2f02793b8b2427c96d0210e6dc5f54ee223ec4222a0a2f1df6a7
Instruction Fuzzy Hash: 21F027203093904FC3061B788C249AA3FFAEF43250B0941D3E605CF3E3DA258C04C3A2

Function 06AE2A58 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c72bed19323e4267713959dac0dce5837abaf2a8cd50bbf874a906fc6edaa8d8
Instruction ID: 6ba18920c2b5ebe2d837f22ad65c105bfba5d7cc20cb3b3907bba8370eb74a9a
Opcode Fuzzy Hash: c72bed19323e4267713959dac0dce5837abaf2a8cd50bbf874a906fc6edaa8d8
Instruction Fuzzy Hash: D3F027327042051F87649BAE5C94A5BBFEDEFC5260304807BE10ACB315ED70CC0543A0

Function 02AEBB30 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 35bd2a449af206cd258eb81dfd2040b70b2948ff4d4c8f6a69cf716f5bd7ed83
Instruction ID: c83d8e5ac47de569d446bceace4bc3684587bd7e0e12a5d37cdaf03efb9c9ca5
Opcode Fuzzy Hash: 35bd2a449af206cd258eb81dfd2040b70b2948ff4d4c8f6a69cf716f5bd7ed83
Instruction Fuzzy Hash: F8F0BE36740625ABD7149AAD998092BFAEAEBC8360B100539E50AC3354DF72CC8387E5

Function 00F5DC10 Relevance: .0, Instructions: 36COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511041317.0000000000F5D000.00000040.00000800.00020000.00000000.sdmp, Offset: 00F5D000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_f5d000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 16a820ea418589a70973d980e324d1ea95ad8a8fd05ad6e7e21b7b2d66afe5f3
Instruction ID: fa91d1e2c40909c396063b236b09b6379fe803439f6dcfb325848977202d95f9
Opcode Fuzzy Hash: 16a820ea418589a70973d980e324d1ea95ad8a8fd05ad6e7e21b7b2d66afe5f3
Instruction Fuzzy Hash: DFF0C2714053449EE7208A1AC9C8B62FFA8EB50735F18C45AED084F282C2B99C44DAB0

Function 02AE7F18 Relevance: .0, Instructions: 35COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7a56cf3bae3fe0456647290795070d883b2a84f2f616306f446b0020804a1568
Instruction ID: a3fefbe514324297cd75485f03661cbed1f305b4abf08ba1dac994cb7223cf81
Opcode Fuzzy Hash: 7a56cf3bae3fe0456647290795070d883b2a84f2f616306f446b0020804a1568
Instruction Fuzzy Hash: 04016931A002198FCB51EF68D80959EBFF0FB88721F00412AE819E7340EB749A45CBA1

Function 06B9B92F Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5cd0940ef941e931e86a20d802e0b5e0c76503a78bf644e0a5c05379979187ae
Instruction ID: 1d50eb327350dc020754c7f6a4acc3af286072cf6928770f0ded4d74fee4ce2f
Opcode Fuzzy Hash: 5cd0940ef941e931e86a20d802e0b5e0c76503a78bf644e0a5c05379979187ae
Instruction Fuzzy Hash: 72E0E5727042102FC7492679AC5059FBF9BDFCA1A030940BBE206C7356DD614D0A83E5

Function 02AE8791 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b8708ee92ea4a2e4b5d66ed3d96be9761fd5a067920ae178d9f3689d599e718d
Instruction ID: a0b9e1b25a5e2204904cb5d7efa128f50b88c144e51bcef265a73ea2db3ae5f1
Opcode Fuzzy Hash: b8708ee92ea4a2e4b5d66ed3d96be9761fd5a067920ae178d9f3689d599e718d
Instruction Fuzzy Hash: B2F0E2393043004FCB20DB6DD9C0E5ABBEADFC8354B44493DE14ADB364EB65E8068790

Function 058CC654 Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c4562aada712e2f47f219173358c59903b4fafb4d470c473054b040af8d2ae43
Instruction ID: e7220718765ea0d862a3e5c6ce6947d051cbb42a0c9233b6265a857214452109
Opcode Fuzzy Hash: c4562aada712e2f47f219173358c59903b4fafb4d470c473054b040af8d2ae43
Instruction Fuzzy Hash: CDF027B2B4D1504FD30A8318AA6473ABF51EB85215B1840EEC94BCF2A5EB36DC43C350

Function 058CCCEA Relevance: .0, Instructions: 34COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d91987111608c75391cde98705e74ad4eb1e892d9c53842bd8921b7c5741bda7
Instruction ID: 9d3d64b3a82086ea1f9a897be39299b679be958251111f265d45c12d0a02c52c
Opcode Fuzzy Hash: d91987111608c75391cde98705e74ad4eb1e892d9c53842bd8921b7c5741bda7
Instruction Fuzzy Hash: CDF0A7312053105FC712A72CAC5589BFFBADE852513108A6AE15ACB395CB349D098BF1

Function 06B9CEC8 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 64df3ed307fef14a5694fc49b2031b9233bab85e2026b26808bd609aa189c82d
Instruction ID: 3159814a040ad47d0cb0431857df0446ab52a0d4abdf2ff82d184508f378c061
Opcode Fuzzy Hash: 64df3ed307fef14a5694fc49b2031b9233bab85e2026b26808bd609aa189c82d
Instruction Fuzzy Hash: CFF0F8763115149F8B48DB2EE554C5ABBEAEFD962131540BAF606CB731CB71EC01CB60

Function 058CB64A Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a9665936a42792bc5093291fd81c5747c824ee0b8d30399b61d956abf193a4c1
Instruction ID: 3470dc016482c5278ffdadec32e0e611c9c206653da17329080c489ce7bf594d
Opcode Fuzzy Hash: a9665936a42792bc5093291fd81c5747c824ee0b8d30399b61d956abf193a4c1
Instruction Fuzzy Hash: 18F0A7343017269FDB14A739EC61D6ABB9AEF80206704843CF90BCB255DF31EC098790

Function 058CCD44 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e40abe4bfab1fe6bc7e0e77189f152c017e55211eb68344e42bc59a6ad8c1734
Instruction ID: 8ff95c6e990b1986db51972c3dc5184cbecbbe1a631fb82d1c323ac50e09e19f
Opcode Fuzzy Hash: e40abe4bfab1fe6bc7e0e77189f152c017e55211eb68344e42bc59a6ad8c1734
Instruction Fuzzy Hash: EBF0E9725043508FD7129B2CA856165BFA1DD911803448AAED95BCF269DB38DD0E8790

Function 060A2C38 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5393afbc05ece9626da60d13121d44b9b0753a24591ca53e4de6c6c1204ad9f1
Instruction ID: 1a954460ec067a8b3585ed8cc5454cfc24dec555884260c03da9439a81d39918
Opcode Fuzzy Hash: 5393afbc05ece9626da60d13121d44b9b0753a24591ca53e4de6c6c1204ad9f1
Instruction Fuzzy Hash: 32F03774E00205DFCB60DFB8C4848AABBF0EB08310B1489A9D899D7342EB31DA02CF91

Function 060A31E8 Relevance: .0, Instructions: 33COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: babd34738fadb26ccd80e5ace577d8b429920dbdfde1e613094a5d389cdd1985
Instruction ID: 88caa9710d8ce0147d6b33c06d5fc460e43783aee7fdeddf9b246d06bc56aaab
Opcode Fuzzy Hash: babd34738fadb26ccd80e5ace577d8b429920dbdfde1e613094a5d389cdd1985
Instruction Fuzzy Hash: 52F0BE362442149FD659ABACF408BAA77EDD748371F008126F20DC6200CB345CC7CBEA

Function 06AE3F92 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d8cf1fd5fbcab71c6e944ae9e0dd419bdb779b7fbfaebdeab62423eceadb9768
Instruction ID: d8a6a7eaf78bca82b70721bcacff475a639857c9aec34499e5b7cce7894e0ed8
Opcode Fuzzy Hash: d8cf1fd5fbcab71c6e944ae9e0dd419bdb779b7fbfaebdeab62423eceadb9768
Instruction Fuzzy Hash: C3E0D87171E3915FDF42333A1A410FA3B7A5D8105570800FFE549CF143D929C5078292

Function 06AEDFD0 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4a61809e73a67b8118fe46b4054c565ec2126d1e10cc6d30e9ddbbf675ecdd98
Instruction ID: c34054efec0a676aba9cdbadf3b17a4c90785af470ff10ed62f17ec36f7c1a0a
Opcode Fuzzy Hash: 4a61809e73a67b8118fe46b4054c565ec2126d1e10cc6d30e9ddbbf675ecdd98
Instruction Fuzzy Hash: F6011470D00219DFCB44EFA8D840AAEBBB1FF48310F10C929D569A7350E736AA41CF90

Function 06B9BC20 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 519341a0189ab653f943db96bbc5238ac640bb15a7a0586d865291e042af6d8a
Instruction ID: 208b14b06b1998359601963ddb43f9a362989f07e799879e76dd1337aec134a7
Opcode Fuzzy Hash: 519341a0189ab653f943db96bbc5238ac640bb15a7a0586d865291e042af6d8a
Instruction Fuzzy Hash: D6E06D733400545B4B189A4EB8C4DABBBAEFBD92323544077F208C7220CA219C45C7B0

Function 06B942B8 Relevance: .0, Instructions: 32COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4d9ef9d6303ad7b2925f269e0bf1a31667d7f12f93e47c996d96e71e5269a69e
Instruction ID: 2855079fd87d864f199b9fe8f407e20f608447378cb2e722733078445d556afb
Opcode Fuzzy Hash: 4d9ef9d6303ad7b2925f269e0bf1a31667d7f12f93e47c996d96e71e5269a69e
Instruction Fuzzy Hash: 91F027353102208FC7409619E844AA6B7EAEBC9321F1840BBDA09C3761CBB1EC02C790

Function 06AE28A0 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 11d917b5bdf126b9439969f5bf905c43208f5a6edf26b034f924b7fdf4af882e
Instruction ID: dcebf0c627b4babe9748c56679e5c2394fc838bd0161992dc179fe5014db0a3e
Opcode Fuzzy Hash: 11d917b5bdf126b9439969f5bf905c43208f5a6edf26b034f924b7fdf4af882e
Instruction Fuzzy Hash: 12E01233B04219AB4714DAAAF40099EB7EEEAC8265714847AE21CC3204EA31D9168750

Function 06B94318 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2d9ba9ae23606a82cbe995ecc8bbaffb8065247a1c16a92d0435ec7c42283300
Instruction ID: fddd38fe28a7bda44173ed8c486cc4ccd92f6d5f9543d6796c7dc2b84c998eb1
Opcode Fuzzy Hash: 2d9ba9ae23606a82cbe995ecc8bbaffb8065247a1c16a92d0435ec7c42283300
Instruction Fuzzy Hash: DAF0A7B11006206FD220562ADC80D77FBEEFBC4321F548529FA8643600CA75A845D7B0

Function 02AED4F5 Relevance: .0, Instructions: 31COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6b3627da41eea9f38ecbdeabe28f66b22a23a0afe1f75e0fc4ac2a70811022bf
Instruction ID: e98245851f8646d27ab85c04deae7a98cb3a8c89a103c6b06467dfaa548bff8d
Opcode Fuzzy Hash: 6b3627da41eea9f38ecbdeabe28f66b22a23a0afe1f75e0fc4ac2a70811022bf
Instruction Fuzzy Hash: 4601F234A11259AFEF14CB90D895FADBF76BF48304F204006F802BA7A0CB75A981DF60

Function 058CCC60 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 996b4e79a99695d1bb3b30e4b159b5dfa1a8493473d4f28485c03a4f0d7cb01e
Instruction ID: ccadaca9a3e3f530d5eff9094dfff23a189b1e6236b5eafc218c305279d603f9
Opcode Fuzzy Hash: 996b4e79a99695d1bb3b30e4b159b5dfa1a8493473d4f28485c03a4f0d7cb01e
Instruction Fuzzy Hash: 44E0D8353052606B5B0626582C144EE7B6FD9C692271A006BF606C7242CE264D1D53F2

Function 060A3379 Relevance: .0, Instructions: 30COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 7ee802bd3b35091a627eb21baef947ba171b38e188fb972e65ec84c77728b8a7
Instruction ID: 2d790afe6e79edd488b7f722b6e07b1bed7b777e4b5734851431acf8380a224c
Opcode Fuzzy Hash: 7ee802bd3b35091a627eb21baef947ba171b38e188fb972e65ec84c77728b8a7
Instruction Fuzzy Hash: E9F055323043602BC32E6269B40AFBF3FEE8BC2324F04006BE5064B282CDD52805D3B2

Function 06AE4C89 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b8e0f0b9e074873a53a1816a949ed3b32d7f3c44f570267c7ebde5aa93f1db4c
Instruction ID: 32a1896d5b44c4d54c4f351269c0438cad20ff423190cb78543f1686df4cc139
Opcode Fuzzy Hash: b8e0f0b9e074873a53a1816a949ed3b32d7f3c44f570267c7ebde5aa93f1db4c
Instruction Fuzzy Hash: 34E09271F511054BCF96BB7855540BEABDBDBC8211B00843AC506CF358DD39E81643E1

Function 02AE9891 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 5a9e003ee42c4549fbdbf772d65fe1af3a077179e4d9c004d90528023a0ddbad
Instruction ID: 4de9a4fb9d887140980570002186c6f1d64449ea9b1cb88311c2a35b753349b3
Opcode Fuzzy Hash: 5a9e003ee42c4549fbdbf772d65fe1af3a077179e4d9c004d90528023a0ddbad
Instruction Fuzzy Hash: 40F0E5353043508BCB075B79E85966B7FAAEFC9256719447AF106C3396CE708D02CBA0

Function 02AE1EAD Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1539cb9a665d7c33a3366508f7e5a76f221375159d223fb911d958395895f328
Instruction ID: d8f5574067087d5a60ddec2c9c183b531a68976b6a0330ba085f7b00c4fb0e3e
Opcode Fuzzy Hash: 1539cb9a665d7c33a3366508f7e5a76f221375159d223fb911d958395895f328
Instruction Fuzzy Hash: 1CF0272060C3889FDB028764C8143DE3FB25F4A201F1100A7C5469B2D2DF3A0D58C3B3

Function 058CA727 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 936e58d65de7abc2e84853b6637098fec3b7a733fa00965604fdcd0152f27d6c
Instruction ID: 5daa635055d75545e4ecb2de8adcb41113475e7c4525093839573e8c715efcdf
Opcode Fuzzy Hash: 936e58d65de7abc2e84853b6637098fec3b7a733fa00965604fdcd0152f27d6c
Instruction Fuzzy Hash: CBE0D8223091905FC3015779A81489E3BAADFC715531800E6E444CB3A6CE158D0683E2

Function 060A1808 Relevance: .0, Instructions: 29COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c37aa93f7868904a6040bdc87d73af991ddd98222b9812f8f78052b906ed62aa
Instruction ID: 771c516c1ec540a5488749dce7c3301db772f1f7f066e778ec6226c6a03bcb79
Opcode Fuzzy Hash: c37aa93f7868904a6040bdc87d73af991ddd98222b9812f8f78052b906ed62aa
Instruction Fuzzy Hash: 0FF0BE319883898FDB469BA8C8143DCBFB16F0A244F1890EBC015EB1A3C7784948CF62

Function 02AE7EB8 Relevance: .0, Instructions: 28COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a54c73f04e1fa7581f9b3585104bf1c5a0bf0abad5aa17eaeabd08b65414b02a
Instruction ID: cf37612741660738c5f4c826441c25aaeafb0fae4faa666db3f5c951b26e1b80
Opcode Fuzzy Hash: a54c73f04e1fa7581f9b3585104bf1c5a0bf0abad5aa17eaeabd08b65414b02a
Instruction Fuzzy Hash: D0E02B7A2181505FC302A7BCAD55A6A7F5AEBC8252B45446AF549C3285DF798C0843A1

Function 06AE2D41 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6868d0089b6875567ee397ea4c92d02c13a40a00ae714d601ef28c985fc85dd8
Instruction ID: cdfbb9c20ef593bd3c0278c598c5807430a05267e892e9db469bcd436c5f6dd1
Opcode Fuzzy Hash: 6868d0089b6875567ee397ea4c92d02c13a40a00ae714d601ef28c985fc85dd8
Instruction Fuzzy Hash: D8E026360457499ED301F334ED40BA137FDDB01301B080152A108CB067D7344E04C2E2

Function 02AE34B4 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8e6bcb8910652c579e27fac52b94521a31da3fc59197c88c4caef17553153b5c
Instruction ID: a6b1251135c38c40274c06c5a0b65ef841229d6b6c740fdec599e7fe8f9fc7c4
Opcode Fuzzy Hash: 8e6bcb8910652c579e27fac52b94521a31da3fc59197c88c4caef17553153b5c
Instruction Fuzzy Hash: 06E0D877D09190DFDF134B68E8950F47F70DDA629278541D7D0829B065EB25885BC720

Function 02AE1ECD Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e8d0d43faf4eb90a2a46e7086136d2a7b86674c7e1780cf6f0d65a16a3f7adfb
Instruction ID: 5a96316a66c328ffea57ecdd407448378f75a5f38ef6d3e9307ba70a5f194e91
Opcode Fuzzy Hash: e8d0d43faf4eb90a2a46e7086136d2a7b86674c7e1780cf6f0d65a16a3f7adfb
Instruction Fuzzy Hash: BDE02B53A0D3C28FD713836494653CC7F725F63150B0511EBC086C72A7EA68461AC3A3

Function 060A2C48 Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94108863bd3a2c3041b849e8210ff16255e56c9bf5bbfca56a0bf54a8ea4e43e
Instruction ID: 322375874fb7b64b4c65f1f074af88f67ef0d7db62c4a66b30005eae0f17a645
Opcode Fuzzy Hash: 94108863bd3a2c3041b849e8210ff16255e56c9bf5bbfca56a0bf54a8ea4e43e
Instruction Fuzzy Hash: 5EF0D474E00209DFCB54DFB8D5455AEBBF5EB48210B1484AAD919E7301EB359A42CF90

Function 060A194F Relevance: .0, Instructions: 27COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bcb66b08bc582373f922761b542eaf7ecb225f875b37a5ee0308b459f694f921
Instruction ID: 6e570ef53be5cd4e2d413f31ecc217811f112ea48d4d718a50cd3ccd2862f03a
Opcode Fuzzy Hash: bcb66b08bc582373f922761b542eaf7ecb225f875b37a5ee0308b459f694f921
Instruction Fuzzy Hash: 0DE01239340B014F8354CA6ED844C52BBF6EFC965131544B9F559C7731DE71EC41CA60

Function 06B9B940 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 27dfb0e5654ffeba70db17dcf12db897fb5d6541d04d0a33dcfcd06e0cf3549b
Instruction ID: fd8debc9510631b3c427f51aa155eb8b1435647f6c5c1c41f6767cee3ab84f55
Opcode Fuzzy Hash: 27dfb0e5654ffeba70db17dcf12db897fb5d6541d04d0a33dcfcd06e0cf3549b
Instruction Fuzzy Hash: 6EE086727002141B8644367DAC9149FBA8FDFC95A0754447AE70AC7355DC759D0543E4

Function 02AEA361 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8d7fa13bd82a3d9381f30b918040cae258a86e1acdd61f613c00a7f89bc3adba
Instruction ID: 247f2eb3e6162b148c082e5c2fd8a9086cc7e3b8441a9c43057dd9bde54455fb
Opcode Fuzzy Hash: 8d7fa13bd82a3d9381f30b918040cae258a86e1acdd61f613c00a7f89bc3adba
Instruction Fuzzy Hash: B7F09D38A401088FCB45CF99D9809CCB7F1FF88314B2181A5E505AB325D772AE45CFA0

Function 02AE7EC8 Relevance: .0, Instructions: 26COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: bdf8d47079243ceee7d0ed208c63951c53c1991f595f74ba8948e18b205e2b21
Instruction ID: 073920aa730dc26eef0b29f72c3d8fc6f9d9c818125f63abf38c5884f8ff44b6
Opcode Fuzzy Hash: bdf8d47079243ceee7d0ed208c63951c53c1991f595f74ba8948e18b205e2b21
Instruction Fuzzy Hash: 5CE020353101545FC311766EBC4491BBE6EEBC93A57404039F909C3345DF754C0443E0

Function 02AE1F1A Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca00d99277a53213f881fbbdac4fe52b4320d1b82ba0a7410d062af2a91cbda6
Instruction ID: 3fae6d8cc15b8595a29a26634917c91b2c7f9262755d1460409cf30688415366
Opcode Fuzzy Hash: ca00d99277a53213f881fbbdac4fe52b4320d1b82ba0a7410d062af2a91cbda6
Instruction Fuzzy Hash: F8E02B30609288DBDB019BB4C4153DDBFB6DF89200F2000B5D54567255CF75465BCBE3

Function 060A1910 Relevance: .0, Instructions: 25COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4acdef0803f55bc9ecb8b8c2a0fc2617d09f3761427aa31001c3d74d73c8ddec
Instruction ID: 399e9ef7acfed1d365bdff9043ee88e3225ab340d17ca826e4ec8f7bdeea3b34
Opcode Fuzzy Hash: 4acdef0803f55bc9ecb8b8c2a0fc2617d09f3761427aa31001c3d74d73c8ddec
Instruction Fuzzy Hash: CFE01A35115254BFC752EE59D841CC6BFA9AF0A220315449BE584CB662C631D8119BA1

Function 06AE8ED0 Relevance: .0, Instructions: 24COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9af93006d9ea5b354b98d57125cd7ce66532e8f19944628833955a526a6db47b
Instruction ID: 078392007c5553404c52cf750af36fb89ea460217df8f9476ae894ec8ce989e3
Opcode Fuzzy Hash: 9af93006d9ea5b354b98d57125cd7ce66532e8f19944628833955a526a6db47b
Instruction Fuzzy Hash: A3E08C327606244BE718DB6AE844B56B7DEAF88A15F0980BAE10ACB660D961D80047C0

Function 06AE4939 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ce79cb5d0a4100a1cbeaf1b33eade279d023d8d2fe31f76ed95f0be373ad1681
Instruction ID: 0f1915f9374dc52f103321c01ac957a8abb1ce2347091bfa59d184332fc2ad59
Opcode Fuzzy Hash: ce79cb5d0a4100a1cbeaf1b33eade279d023d8d2fe31f76ed95f0be373ad1681
Instruction Fuzzy Hash: F0D05B7630516457F62462B958447BF3ECFCFC5511F044066F619C7255CEB48C0653F1

Function 02AEBB88 Relevance: .0, Instructions: 23COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 503f8e6fc8e54b32ea8166cbd2fa66d172a3450a44a76ab54de3e17428c59648
Instruction ID: 9b284ea37dd907ba0e85ba1d12dadb9083b4ab801245a62afd29dea1d40a2cb5
Opcode Fuzzy Hash: 503f8e6fc8e54b32ea8166cbd2fa66d172a3450a44a76ab54de3e17428c59648
Instruction Fuzzy Hash: C8E0EDB1D0420D9FCB44DFA9D4856AEBFF5AB18201F10816AE558F6250EB349641CFD6

Function 06AE2CC0 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f0423a854d5645ec45883f708fa65b0d9eb7faa3dac5f7626df32da66b5c1967
Instruction ID: c163a1bd1b7d7238044c3186ad778a6ea886f628316f60cc46800e6473d1ce1b
Opcode Fuzzy Hash: f0423a854d5645ec45883f708fa65b0d9eb7faa3dac5f7626df32da66b5c1967
Instruction Fuzzy Hash: 7ED0A730A1A7652BE31222796C026D33BDFEB8711170545A3F506C6107D929D91902F6

Function 06B954C8 Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1b4b0c6a66c160185f414de492b93da897cc610647a8b0f2e72c27e2187ebebc
Instruction ID: c6c7d75d3a48c0c2ff64260df565916ea567a0c3c0e0e258e51fd766122c5439
Opcode Fuzzy Hash: 1b4b0c6a66c160185f414de492b93da897cc610647a8b0f2e72c27e2187ebebc
Instruction Fuzzy Hash: 64D05E26700224230654619E389482EEADEDACA5A1351043AE70EC3341CD255C1603A5

Function 02AE1EBD Relevance: .0, Instructions: 22COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4346a259d3f9968e9176d74af319827738da702108c71e5da13f6f6aef27d447
Instruction ID: 25c464126f9653f76c7c75254081542da9f7c79438418cb6897ae9adea900ef8
Opcode Fuzzy Hash: 4346a259d3f9968e9176d74af319827738da702108c71e5da13f6f6aef27d447
Instruction Fuzzy Hash: 36E09A61A0D3859FDB028BB4D82439C7FB29F86208F2600E7C146DB1A2DB350A5983B3

Function 06AE3FB2 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 22dfd7d5e32bbae15c5a6c2aeea40d7c990d6582a29ce8e833d07fc20e624e17
Instruction ID: 2b125cb60ac12f684a5bbb864ef686964fe7071212ff2632800fc3c230455083
Opcode Fuzzy Hash: 22dfd7d5e32bbae15c5a6c2aeea40d7c990d6582a29ce8e833d07fc20e624e17
Instruction Fuzzy Hash: 0BD02B3160D3408FC742237868149E63FEE9E4330130480D9F005CF153DA34C901C3A3

Function 06AE400F Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 95736a2beacd71cfb61b2c65a47517128ea744f30391761f7108ab554f315880
Instruction ID: 3a4b8f5fbcdf2af0bff79b18a3639a3839343b7019888f08da7d50d6da252277
Opcode Fuzzy Hash: 95736a2beacd71cfb61b2c65a47517128ea744f30391761f7108ab554f315880
Instruction Fuzzy Hash: 59E02B302093048FCB417BB56C206AB3BFECE4560030180E9E408CF146DE3ADC0AC7A1

Function 06B9B8E0 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 229f360dcc2019d05acf9b3777e3382acc76416379088d729f69b9fa3a14d7f3
Instruction ID: d909ef5e485bb7611a5eb1ba1a80eea6faa1b107f65c462e723c23ddd206d585
Opcode Fuzzy Hash: 229f360dcc2019d05acf9b3777e3382acc76416379088d729f69b9fa3a14d7f3
Instruction Fuzzy Hash: 45E0C2722103158BDB28962AE80496BB7BAFFC5361310447EE11687624DA71F8868790

Function 06B95076 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 72f3f494201d3750ea1870422eb3db166283dd9af3b2fe0b53ec8c86a5e560df
Instruction ID: e211b21e0a1a28d79c97874f9756c9b51dffdd40c863adba07e4586144fd9732
Opcode Fuzzy Hash: 72f3f494201d3750ea1870422eb3db166283dd9af3b2fe0b53ec8c86a5e560df
Instruction Fuzzy Hash: B2D05E37B000246FDB1CEAB9EC008BFB39ADBC8210305C53AB509C7004E9759C1286E0

Function 058CB5EA Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 175212445ab0d513b17f6a682fe185b0db6bcfa09d755f779d58f623b6ec2a68
Instruction ID: 31763f232dea611a454a26a1a6af3391e9d549e70f2338712bcd512eeec2f3b7
Opcode Fuzzy Hash: 175212445ab0d513b17f6a682fe185b0db6bcfa09d755f779d58f623b6ec2a68
Instruction Fuzzy Hash: 59E0CD70D042086FC750EFB9D906BAA7FF8AB00211F4040A9D909E3240F730D5008BD2

Function 058CA738 Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2e83e2e1d965de9452b3a5c8830aff874fc8e50d994a7c682c895467d3f098f3
Instruction ID: aad8bc211af877ad4a7b147fe65d08ddce78a6ad7d7aeb37f32ad852d7f7b9f6
Opcode Fuzzy Hash: 2e83e2e1d965de9452b3a5c8830aff874fc8e50d994a7c682c895467d3f098f3
Instruction Fuzzy Hash: 19D0A7323000145FC200A6AEE844C6F77DEDFCA6A676400B9E109CB3A5CE25DC0747D5

Function 058CCC2A Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 628a99e881dc4c1a74143132e1d1864005525e5fe1a15e573763708177412da7
Instruction ID: 41467dae3c370c656d7bcbee3185e68358100ce04c2707950b420d3a1db60dbb
Opcode Fuzzy Hash: 628a99e881dc4c1a74143132e1d1864005525e5fe1a15e573763708177412da7
Instruction Fuzzy Hash: 67E0C2302053409FCB049635A81487A7BEAAA4952830485DDA83EC72D3DA32DC1586A1

Function 058CCB6A Relevance: .0, Instructions: 21COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: fbd5563dafbe00805c24c625a39890fb4c282890a5246714ba85d94fb3979c3f
Instruction ID: 59e76e320ab68695eec250c3e2622983e696a2833f46fd09a16e50b5c3d684d5
Opcode Fuzzy Hash: fbd5563dafbe00805c24c625a39890fb4c282890a5246714ba85d94fb3979c3f
Instruction Fuzzy Hash: 38D09E3A70163563972516BA781889A7A5EAAC5571309007AFE16C3345DE71CC1543E1

Function 06AE4978 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 0fc046b7b2da738280918052adbfb1f3b6dbc3fdcbad27ac4a35abd6c0d571d3
Instruction ID: 83f1c949f135ec82e81eafa7f44ca1e344548b152bff60686d47bcd4d66556b1
Opcode Fuzzy Hash: 0fc046b7b2da738280918052adbfb1f3b6dbc3fdcbad27ac4a35abd6c0d571d3
Instruction Fuzzy Hash: C2E0487190524C9FCB51DF68D90569DBFB5DB41240F0044E9D94697245E9322F14DF90

Function 058CB5F0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: c717c980210553debb26ae185bcda11bba92614e445dec7f895a0845f8c2d391
Instruction ID: 1e8f2f431284bc2c3262c80f33f16bb06f9ce6de3fc62775264900ffe5de9c63
Opcode Fuzzy Hash: c717c980210553debb26ae185bcda11bba92614e445dec7f895a0845f8c2d391
Instruction Fuzzy Hash: A2E0EC70E0421C8F8B50EFB8E945A6ABFF4EB04215B4541E9DC0DD3701F731D9108B91

Function 058CCC70 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 8dbc40eedf08804c9637ad5c2445f76abee75c02e8b1a4ac37fa65efe54e63a0
Instruction ID: da55cd9cae3201627f21c913ad4d06f16fc0d0d71e4ca7db92dc619ca4c9068f
Opcode Fuzzy Hash: 8dbc40eedf08804c9637ad5c2445f76abee75c02e8b1a4ac37fa65efe54e63a0
Instruction Fuzzy Hash: 21D0A736300134531745269D741852E779FDAC996230A043FFB0FC3381DE718C1513E5

Function 060A2EA0 Relevance: .0, Instructions: 20COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1604c1acd4c5d949127089502dcd418f8c66a229bef4b1bb642a377c55fa5a3
Instruction ID: 9fae666d5cbb53c836c0ed061947557a4bd2c9ffaef34d30679d35010a2c23ca
Opcode Fuzzy Hash: f1604c1acd4c5d949127089502dcd418f8c66a229bef4b1bb642a377c55fa5a3
Instruction Fuzzy Hash: 68E08C36108390AFC7169FB8E8548477FEDBB0A60430500AAF584D7317CAA5A801CBA6

Function 06B9D3DA Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 640a44469ca4fdc4c8b57b059fd66d893abb01c72f005ea7c8f9e4feef7cba2a
Instruction ID: f91e4d8c70165971d7974e9ce8359ac9de1c16e66f7598f31a8d914c08d73811
Opcode Fuzzy Hash: 640a44469ca4fdc4c8b57b059fd66d893abb01c72f005ea7c8f9e4feef7cba2a
Instruction Fuzzy Hash: BDE0ECB15197858FCB4A9F34EC549847F74EF0762430642DAE088CF6B3C7259C45DB21

Function 02AEBB98 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6dcf193f18b70d5a581a70f2de51ce0c8927b88c73ff1b44d238f5e7fbcea07a
Instruction ID: 039166eea8434dd83de8194dda09278ec10876c667c2878ebbe42ceae3136bc7
Opcode Fuzzy Hash: 6dcf193f18b70d5a581a70f2de51ce0c8927b88c73ff1b44d238f5e7fbcea07a
Instruction Fuzzy Hash: 24E092B0D0420D9F8B84DFA9D8456BEBFF4BB48200F10816AE919E2250E7345A51CFE5

Function 058CD288 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ad63952ab2fc99d521f4f866d33e991ac990e2ce0c8ab1f342f30552d1f9495
Instruction ID: 2b0a9deb09d3f5751b22e8156a40ff74586d27b24eb0701d10e7f3e7fc89bb0d
Opcode Fuzzy Hash: 2ad63952ab2fc99d521f4f866d33e991ac990e2ce0c8ab1f342f30552d1f9495
Instruction Fuzzy Hash: 88D0A7181069D45EEE13AA641C41DA67F216A83100B0415D7E409DB65BC234DE148365

Function 060A2C01 Relevance: .0, Instructions: 19COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 392868a2704b91ac00d7f57d385dc3fee7b67dd6592ed6ed128a4d64ca8adc24
Instruction ID: 0ec7da763cbe369d3201d02e296d8f235a5c703d830ab75061985400aa804d59
Opcode Fuzzy Hash: 392868a2704b91ac00d7f57d385dc3fee7b67dd6592ed6ed128a4d64ca8adc24
Instruction Fuzzy Hash: B4E02BB06011D18FE70BA794A030189FBE5EF4678171008D7E04DD7983DEA89C1583A1

Function 06AE3FEA Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 2ca3b997071289eadabe84d79565ec6355e392592bab91d874da9d2f0a1c3ebb
Instruction ID: ef8205a39781a966eab66aaddf315dfd2e5c283ee36b5819c793abc9bb21f88c
Opcode Fuzzy Hash: 2ca3b997071289eadabe84d79565ec6355e392592bab91d874da9d2f0a1c3ebb
Instruction Fuzzy Hash: 55D0A7B060E3810F9F9173751E149E23E6E4E5210170985D5A082CF487DA18C5199232

Function 02AE3460 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ca12c30df509ea8f8eb9f43c730e1f78df75ecf8039059a9119ccb7bad343956
Instruction ID: beaca1e836e1a885e3bc81ebb69888ae7d210d00cadf1993d6bfc601485c9bc2
Opcode Fuzzy Hash: ca12c30df509ea8f8eb9f43c730e1f78df75ecf8039059a9119ccb7bad343956
Instruction Fuzzy Hash: BBE0BF36D50508CFCB04DFA8E4848DCB7B0FF89325F004156D51577220EB306999CF50

Function 060A3250 Relevance: .0, Instructions: 18COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a638d5834fa4ddaf5f63d519118d2622b6a1127a10bd3bba3b05e806140b2bd2
Instruction ID: 4f955ccd8a60a654de338ceaf839a64180e37a9838a643b2c585a19ea61796fc
Opcode Fuzzy Hash: a638d5834fa4ddaf5f63d519118d2622b6a1127a10bd3bba3b05e806140b2bd2
Instruction Fuzzy Hash: 01E026751087D04FC3C3AB38B8503587F51FB42304B04419CD544CB24AC7206C8AC7D9

Function 06B9CD60 Relevance: .0, Instructions: 17COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9509ecffbaddb81f0148f8a2f048ee6fe14a476751e7fa33530039b15656f499
Instruction ID: 3b1e087f0090b5cbc00034ed40fe5738c34c3e15f616f68a2f07ccd2376076b1
Opcode Fuzzy Hash: 9509ecffbaddb81f0148f8a2f048ee6fe14a476751e7fa33530039b15656f499
Instruction Fuzzy Hash: 11D05E3690D1605FD74997B868245DA3A6A9F89200B0680D3BA06E7156CE684D0983E6

Function 06AE4988 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a459785c5fdc77648d8a78fb74b3a034fc0b8c275b6b923f1a4af9b9b05d5975
Instruction ID: 61d66c47c914ee2ead4ade6aace7e34f0052ea60d39e3e5ebd249e1f3e5a58a7
Opcode Fuzzy Hash: a459785c5fdc77648d8a78fb74b3a034fc0b8c275b6b923f1a4af9b9b05d5975
Instruction Fuzzy Hash: A0D01770A0120CEFCB40EFACEA0195DFBB9EB84204B1045A8990AD3245EE316F04AB80

Function 058CD2B0 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4787d0b83ac057c80e9f8cd9c0d597eb672664c02e0f0276b74c9a0774db7a9d
Instruction ID: be872294d16a406ff341782c24002bc377308a570ce7b96e5793e7e2c3a14fea
Opcode Fuzzy Hash: 4787d0b83ac057c80e9f8cd9c0d597eb672664c02e0f0276b74c9a0774db7a9d
Instruction Fuzzy Hash: 9DD0A9300492952EC7031720AC019E53F3D94020083841282A0A88B02BCA194E0AC7E2

Function 060A2EB0 Relevance: .0, Instructions: 16COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 65f8c9cbc1134eaff2705fa2e44fbc49243c7a9b5ac1454d0ec2ca0e28361077
Instruction ID: 172e2a1bb38263d617719e20fb4da7ff2f89de3764b7b7e56868223ea2c0d853
Opcode Fuzzy Hash: 65f8c9cbc1134eaff2705fa2e44fbc49243c7a9b5ac1454d0ec2ca0e28361077
Instruction Fuzzy Hash: F0D0A936200220DFC719AFA8F408C4A77EDFB0C3113000069F608C7309CA71EC00CBA1

Function 06AE3FC0 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 69c6508e22e9b0eddb3384826b155b72252bdb2780284b70f98ae7ee351e9eca
Instruction ID: ded596e488699175816ac7241b1bd16a83191b2ad945923496c794cdaebcb5d5
Opcode Fuzzy Hash: 69c6508e22e9b0eddb3384826b155b72252bdb2780284b70f98ae7ee351e9eca
Instruction Fuzzy Hash: 79D012317043048BDB8476F5B41462A33DEDB84714350447CE50DCB245EE76DC01C680

Function 06AEF769 Relevance: .0, Instructions: 15COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f99ecce05eed0a17b9d7fe9a3acc36dfdf1cd618b020567c53f0aae3dee88123
Instruction ID: 36fdc6e9347d013c320784b86030e171b6fffd25b7fdef31d5c9f7c578f66e1e
Opcode Fuzzy Hash: f99ecce05eed0a17b9d7fe9a3acc36dfdf1cd618b020567c53f0aae3dee88123
Instruction Fuzzy Hash: 58D0A775001A409FC364DB28D908BA23FF9DF45609F6904E8E5890F533C136E82AC791

Function 06AEF740 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c8335b844907708094a0074dfce07cdddd4b18d279bd6ad06ef5b0fef15a683
Instruction ID: f9528abc5cf542d05e3d86307e9718f988dbdadb46c9609cebf988da7144cb93
Opcode Fuzzy Hash: 1c8335b844907708094a0074dfce07cdddd4b18d279bd6ad06ef5b0fef15a683
Instruction Fuzzy Hash: 2FD0C9702592844FC3019A2CE866D553B78EB06B04B0500E6F454CB673C659ED408756

Function 060A2360 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: dba62d144bddf9ef7cf50e21bb20cff39ffcac568d16df581128a15d52b6581f
Instruction ID: ed8b0e2b1b563a07968265f8885b6bc31bf9ba95c1889f1342f460c3ae691f1c
Opcode Fuzzy Hash: dba62d144bddf9ef7cf50e21bb20cff39ffcac568d16df581128a15d52b6581f
Instruction Fuzzy Hash: EDD0C93001D3588FC712AB64F492984BFF8EE427047544992D0C5C712BD668B80987A2

Function 060A2C10 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 3687b9a1fb26f5f86e7b7e8e36a3a98744e8d12098e4730a22d482c6842842ff
Instruction ID: e26bc32dbe1f72b94618e0f3d2b715bd07bc45d4e6624a78f6bd14e1ad8306fd
Opcode Fuzzy Hash: 3687b9a1fb26f5f86e7b7e8e36a3a98744e8d12098e4730a22d482c6842842ff
Instruction Fuzzy Hash: 22C012F130012857E6093198642159EB5CDDB85691B100095F50DD3681DD996C0103E6

Function 060A1920 Relevance: .0, Instructions: 14COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f1c3c6f3e65a7aa89e028821f37458a22875d24a41b23d1ce394abc0c963c753
Instruction ID: f1a8f9c4d2bcfdfc561cff15ce83f1e9e20c66dfc182e0e3eee015f094571bae
Opcode Fuzzy Hash: f1c3c6f3e65a7aa89e028821f37458a22875d24a41b23d1ce394abc0c963c753
Instruction Fuzzy Hash: 2BD0C936210118AF8B44DE89D840C95BBA9FF4D6607158096FA188B332C672EC11DB90

Function 06AE8628 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9a4f0b4da8b27319cdecb2173f6dda411e8cba6bfc80804b36e5e78c820e893
Instruction ID: f873ac2857f86c8f8f1201e2d6922692be824a12fd7053f0e8e80ed60c78f711
Opcode Fuzzy Hash: e9a4f0b4da8b27319cdecb2173f6dda411e8cba6bfc80804b36e5e78c820e893
Instruction Fuzzy Hash: 60C08CB08842081FD291BB58BC067143BADD6C1200F0040E2EC5ECB766E9552D2C5BE2

Function 02AE7E85 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: df343ea540d8f409ec7f05ef47f287f94d8d732b6ac89f01a1d087c67e6f3667
Instruction ID: 1ecf404696c3f29aed9d95fd2bd5f852d56b8e9c4eb97ffd4755a384dc70546a
Opcode Fuzzy Hash: df343ea540d8f409ec7f05ef47f287f94d8d732b6ac89f01a1d087c67e6f3667
Instruction Fuzzy Hash: A3D05E30A080898BDF66FF38E58531A7FA2AB85344F044444A401CB2CDCB349C848B40

Function 02AE1F68 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a909c590e265760c8b31860deb7c967544b3a372f7d79ef2269e5340e310e6c5
Instruction ID: 1e1c0860d9acdeda1ce9413c8302c1b49b14a17641befdbe1c26d6d5a7913e43
Opcode Fuzzy Hash: a909c590e265760c8b31860deb7c967544b3a372f7d79ef2269e5340e310e6c5
Instruction Fuzzy Hash: 66D0A930A00209DADB80ABE8A8023DC7BA2EBC4200F50127AC10A960458FB046E4CAB3

Function 02AE1F55 Relevance: .0, Instructions: 13COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e376d4af06634e3a813669c2a957eafbc14ba3a8011a25aa5b0d5beda8545fff
Instruction ID: 3d0689e087d547cba5e8171baf5b482afe068ae6e303e6c56dc88fdc1f362ad5
Opcode Fuzzy Hash: e376d4af06634e3a813669c2a957eafbc14ba3a8011a25aa5b0d5beda8545fff
Instruction Fuzzy Hash: 64D0A734A00209DADB40DBD4D4023DC77B2FB84200F501167C10763040CF701AA4C773

Function 06AE2289 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4dda4010c2e685ebe71a3c3c44dde06c9baa972bb10b4b73b82d2207b8a30baf
Instruction ID: 9788095bb1f4c1742c02f3519f5ce0ffa006bb0d4b3d228b0ff1a5c6bc97636f
Opcode Fuzzy Hash: 4dda4010c2e685ebe71a3c3c44dde06c9baa972bb10b4b73b82d2207b8a30baf
Instruction Fuzzy Hash: 48C0123100538E8FCB60AFD4A88979A3B29EB44218F805151E5080A20AEA646BAA9B94

Function 02AE1F78 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: b1bc3fb839d530a855512abd01cf3214530d3b6fcb20b23aeb0e3a7d50a65cb2
Instruction ID: c60adf0cfd28c157ec0cba10f22903857adc1c0fb9a6054ce1b005b720c07da5
Opcode Fuzzy Hash: b1bc3fb839d530a855512abd01cf3214530d3b6fcb20b23aeb0e3a7d50a65cb2
Instruction Fuzzy Hash: 18C01225740619DADBC0BBFCA90438C7A52DFD5700F500179D1058A15A8EE486F48AB3

Function 058CA268 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: e9bcec4652b4d300cae58d18133147cb637641bc8634bafa19835441979c54e6
Instruction ID: e0c24a325a12769bfdfffad54f02d53cfe8208dafc8fb0f484f429f8c6cbe3a7
Opcode Fuzzy Hash: e9bcec4652b4d300cae58d18133147cb637641bc8634bafa19835441979c54e6
Instruction Fuzzy Hash: DAD0CA352442048FCB08EB68C48891877E8BF4820430214E4F50ACB362EA21E8008B40

Function 058CFCB0 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 40578d7d1dbe2389fc5926e0fe9b9466edbfb761a5c04022e90eb12b0f91e9d3
Instruction ID: ca397d4aebb375988a5c2071713cdb395084d5e5088b15edcadc92a1c4778ac2
Opcode Fuzzy Hash: 40578d7d1dbe2389fc5926e0fe9b9466edbfb761a5c04022e90eb12b0f91e9d3
Instruction Fuzzy Hash: 41C01232209268DBEF309E1D8D043ED37A6EB40292F4901909E15C0501E22996698B51

Function 060A06B1 Relevance: .0, Instructions: 12COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: db6697eca752cb523c2e75668d7e326dae40a821ed27682e0aefd4f42c427bb5
Instruction ID: 55bd1a5d602138db346381e7b7507367a7a97406497232ee047e6a296d61c565
Opcode Fuzzy Hash: db6697eca752cb523c2e75668d7e326dae40a821ed27682e0aefd4f42c427bb5
Instruction Fuzzy Hash: 01C04896409391AEC29341742C346E2BFA4595611038A13A3D461CAAB3D00A0A8A5AF2

Function 06AE16E0 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d67a8745ac896b8382b94c96ae3f29ef0bf733627ce49af0c59032d2e998241f
Instruction ID: cef099cfc10e29735bc6afdc9759a4f0cc30170b42532e17b177bddc5170883f
Opcode Fuzzy Hash: d67a8745ac896b8382b94c96ae3f29ef0bf733627ce49af0c59032d2e998241f
Instruction Fuzzy Hash: 45C02B239446000DFB0111328E0F3503A43E7C3204F08C0A214E3C0480CC3C40898421

Function 06AE8600 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 68dbc7772221b39a7897cbc879c7d4cc932773b7164d4615fb9ef4869080a7a9
Instruction ID: a9cfdef91a3d707ffbb0379d8ed7d2f584a59ff2ca8223ccc7c6820f27243db9
Opcode Fuzzy Hash: 68dbc7772221b39a7897cbc879c7d4cc932773b7164d4615fb9ef4869080a7a9
Instruction Fuzzy Hash: 7BC04C24A141444FFA95A55896213163AA297D6340F0141E68CAACFBE5F5649C154BA2

Function 06AEF778 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 492cccb23d7a460b0c5b9cab68c2f02c7e5df2d21aaa4f3bb9b299a9f92f7fa2
Instruction ID: 92c482eeaa840ea0bb94e62a296e020e1b502d73ee843f7d0af22a321bad7a28
Opcode Fuzzy Hash: 492cccb23d7a460b0c5b9cab68c2f02c7e5df2d21aaa4f3bb9b299a9f92f7fa2
Instruction Fuzzy Hash: 18C08C30451904CFC358AF08E50CA3137ECEF0070AB6600F4E1084FA32C271E822CB91

Function 06AE2260 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: d91983da352831a94168718b63cf563e2fc62ba7eda6194b0138d29752c396e4
Instruction ID: 63e4210fb239befee521a455b7d9cb27c290279fb18371c30fdfe12a76a9ba36
Opcode Fuzzy Hash: d91983da352831a94168718b63cf563e2fc62ba7eda6194b0138d29752c396e4
Instruction Fuzzy Hash: 78C080310561C88FDF20EBC49D90BBF3714DB8432FF40444569144F54BC530A932D651

Function 06B9B910 Relevance: .0, Instructions: 11COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: eba95ecc1fbe92048a00169fdf260ddc0646f0015f294445514ddae6dd61918f
Instruction ID: ac9fe62cf500adbdb45ec1291e0f44e34a9c6b3a9ba9fb39879895184cf9793d
Opcode Fuzzy Hash: eba95ecc1fbe92048a00169fdf260ddc0646f0015f294445514ddae6dd61918f
Instruction Fuzzy Hash: E6D0C9B22093928FD3468B34E544D01BFB4EF57350B0641C7E190CB973C362A828D716

Function 060A0825 Relevance: .0, Instructions: 10COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 4e60752b0a91e0855527b49862a232124733ef4b473057634c88454a0c0fa144
Instruction ID: 05823ca30396887318b38a12e0ee6175278c6b79a8585b80905617af6e73e946
Opcode Fuzzy Hash: 4e60752b0a91e0855527b49862a232124733ef4b473057634c88454a0c0fa144
Instruction Fuzzy Hash: 4BC04C36A040548BDB009694F5455DDBB65EB98326F2040B2D619525424A361A15CA61

Function 060A2A0F Relevance: .0, Instructions: 9COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 1c0abf0237e7398d5bcd47f78bbddb9da890697648a395c63f5095321e35f265
Instruction ID: c57e573beb9a467319cfdf7a615613c0f50bb93980e6869209be4c2262574ba8
Opcode Fuzzy Hash: 1c0abf0237e7398d5bcd47f78bbddb9da890697648a395c63f5095321e35f265
Instruction Fuzzy Hash: EBC09238260208DFC300DB69E589CA0BBECFF49A0835580D9F50D8BB32CB22FC01CA91

Function 06AEF750 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 94a9bb855b66031527ad60d43b9bbe596700b8874c009695b8fe6633e9f835db
Instruction ID: 74d73ab9e6f381ab5f9d9b95b6852324e2f71f11f687843942c945560dc2aa6d
Opcode Fuzzy Hash: 94a9bb855b66031527ad60d43b9bbe596700b8874c009695b8fe6633e9f835db
Instruction Fuzzy Hash: 85B092302602088FC300DA59D444E4173ACFF48B08F5100E0E5088BB32C662FC008A40

Function 06B9BB40 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 462f806103f530d795e63e7cd30240698a3559f3884ee21002b46cc62c982ebf
Instruction ID: 2df6d80194bf496dfdd8b1dc122b96866b93262767d8aea8f77197051aee9fd1
Opcode Fuzzy Hash: 462f806103f530d795e63e7cd30240698a3559f3884ee21002b46cc62c982ebf
Instruction Fuzzy Hash: E8B09277A090088AEB509A84B4813EEFB30F790325F104067C21162040C232016887E1

Function 060A2A10 Relevance: .0, Instructions: 8COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: ea37b6cea62d40df410734184e5c43626299f01a35dbb0a8c3f936d9d13bb41f
Instruction ID: 4f1a3ac6db0f59e3f0d4f9a92a27a48c10cc8b74c58d88c87f1da974c996a5cc
Opcode Fuzzy Hash: ea37b6cea62d40df410734184e5c43626299f01a35dbb0a8c3f936d9d13bb41f
Instruction Fuzzy Hash: B0C09238260208CFC300DB59D588C10BBECFF49A0835580D8E50D8B732CB22FC01CA80

Function 06AE8638 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: a60693044e9ef2543c64af91782e3708a9f6118032bde480afa47ceb68c926d2
Instruction ID: 94ab1fa679e748fa0e748275620154fdd5e64286c90fbf180bbea61388a6ad02
Opcode Fuzzy Hash: a60693044e9ef2543c64af91782e3708a9f6118032bde480afa47ceb68c926d2
Instruction Fuzzy Hash: 5FB0127004020D4FC6007794F8056087B1DE540204B404120E10C4B2295EA57C4C47D4

Function 06AE2298 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: f4bd142bccbf77463bd1d0f6d09599d97c76b8ff152f5f8c0f0a2b8679ff9b6a
Instruction ID: e577961dc8394b3889ed975df59b5e47d3df01590314a9196b77aa4a17e4de85
Opcode Fuzzy Hash: f4bd142bccbf77463bd1d0f6d09599d97c76b8ff152f5f8c0f0a2b8679ff9b6a
Instruction Fuzzy Hash: C9B0123105020D4FC50077D4F4096147B2DD9842147404121A10C4A2199E746E9E4784

Function 06B9B920 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 99c5e80e5d161c6cd17717d7e90366d7df6c86bdedef1d8d57fbaaa881c347e6
Instruction ID: 1485e72821faeb6dd9078d765896f2924cff3babc4a0a417e0ffd36dedc08b16
Opcode Fuzzy Hash: 99c5e80e5d161c6cd17717d7e90366d7df6c86bdedef1d8d57fbaaa881c347e6
Instruction Fuzzy Hash: 69B092721502088F8300DB68E548C0277A8AB18A1031140A1E2048B232C621F8108A65

Function 058CD2C0 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 6f70ce91d818a59f128844f434be88c09d280907f42032ae44424635869fc135
Instruction ID: 5aac74b4b2e4c2368c1aa26d3e419f2e5c285264a68bfc49d4755af2fdaa3d53
Opcode Fuzzy Hash: 6f70ce91d818a59f128844f434be88c09d280907f42032ae44424635869fc135
Instruction Fuzzy Hash: DDB0123004420D8FCB417794F908654772EE5402087406321A10C4A11A9B74AD4887C4

Function 060A2370 Relevance: .0, Instructions: 7COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3514772603.00000000060A0000.00000040.00000800.00020000.00000000.sdmp, Offset: 060A0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_60a0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 9b745450d2c9f73567ef6c8fc8c1da701c4e10352619722bc5760edac20e3741
Instruction ID: 8f9b2db1696594cb93b3cd3d201311dd7b53f9826bfc109ee957ec5e71a1b54a
Opcode Fuzzy Hash: 9b745450d2c9f73567ef6c8fc8c1da701c4e10352619722bc5760edac20e3741
Instruction Fuzzy Hash: A9B0123004460D8FC6007754F506A087B9DEA803097504360A00C4651E9B687C4886C4

Function 02AE8E03 Relevance: .0, Instructions: 6COMMON

Download Yara Rule

Memory Dump Source

Source File: 00000001.00000002.3511458399.0000000002AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 02AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_2ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID:
API String ID:
Opcode ID: 74c9153a87549d2c747f356eca5bc59eef9168d5f2e7d611a1ad24ac9d6f520e
Instruction ID: 5bd1412a5c838436ef12492557882729e59946cc57577dcb612cf4a4cae1130c
Opcode Fuzzy Hash: 74c9153a87549d2c747f356eca5bc59eef9168d5f2e7d611a1ad24ac9d6f520e
Instruction Fuzzy Hash: C6A0120E24012802D447325C479631D001287C02C1FD04800420526240DF3C88051311

Non-executed Functions

Function 06B95507 Relevance: 6.6, Strings: 5, Instructions: 382COMMON

Download Yara Rule

Strings

Pl^q, xrefs: 06B9555D
Pl^q, xrefs: 06B958C5
Pl^q, xrefs: 06B95701
Pl^q, xrefs: 06B9584E
Pl^q, xrefs: 06B957BA

Memory Dump Source

Source File: 00000001.00000002.3515721970.0000000006B90000.00000040.00000800.00020000.00000000.sdmp, Offset: 06B90000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6b90000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: Pl^q$Pl^q$Pl^q$Pl^q$Pl^q
API String ID: 0-2405877317
Opcode ID: ebe0a57983cc340cbe166615905580ecf6ff352999e19402baf9350ed378ad5f
Instruction ID: dcc4459cc6c4adffa312d9e825aa613315911c546f9caa13931699b6bd1dc199
Opcode Fuzzy Hash: ebe0a57983cc340cbe166615905580ecf6ff352999e19402baf9350ed378ad5f
Instruction Fuzzy Hash: 52E19F71B406048FDB66DF39C984A6ABBE2FF88300F1449A9D5428B3B5DB34EC45CB61

Function 06AE65D0 Relevance: 5.3, Strings: 4, Instructions: 291COMMON

Download Yara Rule

Strings

,bq, xrefs: 06AE6725
,bq, xrefs: 06AE6719
(bq, xrefs: 06AE6763
(bq, xrefs: 06AE663E

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$(bq$,bq$,bq
API String ID: 0-3352830385
Opcode ID: c4f2c270f33d567242e8df45fa0702b31364d856cd22b49dad3c6519e564ba7f
Instruction ID: 17005a7c7b91f63bf68ff6ce0571c9b705b1b3cd6b78794b2acbe8bcf1046747
Opcode Fuzzy Hash: c4f2c270f33d567242e8df45fa0702b31364d856cd22b49dad3c6519e564ba7f
Instruction Fuzzy Hash: B5A19030B002148FC755EF69D89496EBBB2FF86311B2189A9E54ADB391DF31EC05CB91

Function 058C5B00 Relevance: 5.3, Strings: 4, Instructions: 268COMMON

Download Yara Rule

Strings

(bq, xrefs: 058C5C21
fcq, xrefs: 058C5E39
Hbq, xrefs: 058C5C75
fcq, xrefs: 058C5D34

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: fcq$ fcq$(bq$Hbq
API String ID: 0-857845183
Opcode ID: 88c1220bf2ccc4106d995381081759d0fad66c434b457021636b80319ca62f77
Instruction ID: edbbbf9b4c537ad63fadaa3f802f84108ab592ead02d14f4cb9858b78a38028e
Opcode Fuzzy Hash: 88c1220bf2ccc4106d995381081759d0fad66c434b457021636b80319ca62f77
Instruction Fuzzy Hash: 14C17034A00208DFCB15EF74D458BADBBB2FF89308B644569D81AA7398DB76AD41CF44

Function 058C5C16 Relevance: 5.2, Strings: 4, Instructions: 201COMMON

Download Yara Rule

Strings

(bq, xrefs: 058C5C21
fcq, xrefs: 058C5E39
Hbq, xrefs: 058C5C75
fcq, xrefs: 058C5D34

Memory Dump Source

Source File: 00000001.00000002.3514704104.00000000058C0000.00000040.00000800.00020000.00000000.sdmp, Offset: 058C0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_58c0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: fcq$ fcq$(bq$Hbq
API String ID: 0-857845183
Opcode ID: fbb1bce499d4069e08eadc71e07056b02ec55c5a3d1113dc6409594a1ed77c9c
Instruction ID: 4f9cd8c7f7e17bc9242b3d0ceea4a5ec1706221e32067310cb6ed899e968c1ee
Opcode Fuzzy Hash: fbb1bce499d4069e08eadc71e07056b02ec55c5a3d1113dc6409594a1ed77c9c
Instruction Fuzzy Hash: AD911C34A00208DFCB15EF74E948A6D7BB3FF89308B644568D81997398DB76AE42CF44

Function 06AE3B28 Relevance: 5.2, Strings: 4, Instructions: 150COMMON

Download Yara Rule

Strings

c^q, xrefs: 06AE3C1B
4c^q, xrefs: 06AE3C49
$^q, xrefs: 06AE3C32
(bq, xrefs: 06AE3C81

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$4c^q$$^q$c^q
API String ID: 0-3082160503
Opcode ID: 2efd8099646af085a8aaf38e9b424df0917d2e6f26a43e09a1080efba837ccbe
Instruction ID: 20c2149ed92e7d17bd9ce7c6bac46d5d2e1788563b2b8059f664d04dce910153
Opcode Fuzzy Hash: 2efd8099646af085a8aaf38e9b424df0917d2e6f26a43e09a1080efba837ccbe
Instruction Fuzzy Hash: 4241E731754B508FDB65AB39858423A7BE3BFC5250B14499EC8438F7A2DB24FC4AC792

Function 06AE6B50 Relevance: 5.1, Strings: 4, Instructions: 64COMMON

Download Yara Rule

Strings

,bq, xrefs: 06AE6B8B
,bq, xrefs: 06AE6B7F
(bq, xrefs: 06AE6C30
Hbq, xrefs: 06AE6BF1

Memory Dump Source

Source File: 00000001.00000002.3515537993.0000000006AE0000.00000040.00000800.00020000.00000000.sdmp, Offset: 06AE0000, based on PE: false

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_1_2_6ae0000_WebCompanion-Installer.jbxd

Similarity

API ID:
String ID: (bq$,bq$,bq$Hbq
API String ID: 0-441485220
Opcode ID: 4ca8da6a06a9b00090a7c893219b48e0f684ba333d844f53a5acf0089f7f557b
Instruction ID: 9c8c5d77e56ee0b087d78f7fcda2ac43c3a830f2333595e1d8f90224f03d433a
Opcode Fuzzy Hash: 4ca8da6a06a9b00090a7c893219b48e0f684ba333d844f53a5acf0089f7f557b
Instruction Fuzzy Hash: A311E235B501688FC794AB2C881446F7BEAEF963517200ABAD002EB3D1CF30AD01CB89

Description:	Adversaries may abuse Windows Management Instrumentation (WMI) to execute malicious commands and payloads. WMI is an administration feature that provides a uniform environment to access Windows system components. The WMI service enables both local and remote access, though the latter is facilitated by Remote Services such as Distributed Component Object Model (DCOM) and Windows Remote Management (WinRM).Remote WMI over DCOM operates using port 135, whereas WMI over WinRM operates over port 5985 when using HTTP and 5986 for HTTPS.
Tactics:	Execution
Data Sources:	Command: Command Execution, Network Traffic: Network Connection Creation, Process: Process Creation, WMI: WMI Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries. These interfaces and languages provide ways of interacting with computer systems and are a common feature across many different platforms. Most systems come with some built-in command-line interface and scripting capabilities, for example, macOS and Linux distributions include some flavor of Unix Shell while Windows installations include the Windows Command Shell and PowerShell .
Tactics:	Execution
Data Sources:	Command: Command Execution, Module: Module Load, Process: Process Creation, Process: Process Metadata, Script: Script Execution
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Network, Office 365, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the native OS application programming interface (API) to execute behaviors. Native APIs provide a controlled means of calling low-level OS services within the kernel, such as those involving hardware/devices, memory, and processes.These native APIs are leveraged by the OS during system boot (when other system components are not yet initialized) as well as carrying out tasks and requests during routine operations.
Tactics:	Execution
Data Sources:	Module: Module Load, Process: OS API Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may modify and/or disable security tools to avoid possible detection of their malware/tools and activities. This may take many forms, such as killing security software processes or services, modifying / deleting Registry keys or configuration files so that tools do not operate properly, or other methods to interfere with security tools scanning or reporting information. Adversaries may also disable updates to prevent the latest security patches from reaching tools on victim systems.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, Driver: Driver Load, Process: Process Creation, Process: Process Termination, Sensor Health: Host Status, Service: Service Metadata, Windows Registry: Windows Registry Key Deletion, Windows Registry: Windows Registry Key Modification
Platforms:	Containers, IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use Obfuscated Files or Information to hide artifacts of an intrusion from analysis. They may require separate mechanisms to decode or deobfuscate that information depending on how they intend to use it. Methods for doing that include built-in functionality of malware or by using utilities present on the system.
Tactics:	Defense Evasion
Data Sources:	File: File Modification, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Module: Module Load, Process: OS API Execution, Process: Process Creation, Script: Script Execution, WMI: WMI Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may interact with the Windows Registry to gather information about the system, configuration, and installed software.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may compress and/or encrypt data that is collected prior to exfiltration. Compressing the data can help to obfuscate the collected data and minimize the amount of data sent over the network. Encryption can be used to hide information that is being exfiltrated from detection or make exfiltration less conspicuous upon inspection by a defender.
Tactics:	Collection
Data Sources:	Command: Command Execution, File: File Creation, Process: Process Creation, Script: Script Execution
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Setup.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

Unpacked PEs

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

Language, Device and Operating System Detection

Lowering of HIPS / PFW / Operating System Security Settings

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ICSharpCode.SharpZipLib.dll

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\Newtonsoft.Json.dll

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\WebCompanion-Installer.exe.config

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\de-DE\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\en-US\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\es-ES\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\fr-CA\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\it-IT\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ja-JP\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\pt-BR\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\ru-RU\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\tr-TR\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\7zS0B6D4380\zh-CHS\WebCompanion-Installer.resources.dll

C:\Users\user\AppData\Local\Temp\WcInstaller.log

C:\Users\user\AppData\Local\Temp\WebCompanion.zip

C:\Users\user\AppData\Roaming\Lavasoft\Web Companion\Options\Statistics.txt

Static File Info

General

File Icon

Windows Analysis Report
Setup.exe

Function 004148D4 Relevance: 10.6, APIs: 4, Strings: 2, Instructions: 81
COMMON

Function 00405434 Relevance: 3.0, APIs: 2, Instructions: 44
fileCOMMON

Function 00401014 Relevance: 48.0, APIs: 8, Strings: 19, Instructions: 715
windowsynchronizationCOMMON

Function 0040AB05 Relevance: 14.2, APIs: 9, Instructions: 682
COMMON

Function 004051B7 Relevance: 14.1, APIs: 6, Strings: 2, Instructions: 102
threadCOMMON

Function 00404908 Relevance: 8.8, APIs: 4, Strings: 1, Instructions: 36
filetimeCOMMON

Function 004083AB Relevance: 5.6, APIs: 1, Strings: 2, Instructions: 328
COMMON

Function 00405620 Relevance: 4.6, APIs: 3, Instructions: 130
COMMON

Function 0040280E Relevance: 3.9, APIs: 1, Strings: 1, Instructions: 384
COMMON

Function 004030FC Relevance: 3.6, APIs: 1, Strings: 1, Instructions: 134
COMMON

Function 00404A3E Relevance: 3.2, APIs: 2, Instructions: 166
COMMON

Function 00408755 Relevance: 3.1, APIs: 2, Instructions: 85
COMMON

Function 0041468E Relevance: 3.0, APIs: 2, Instructions: 45
threadCOMMON

Function 00405892 Relevance: 3.0, APIs: 2, Instructions: 45
fileCOMMON

Function 00404965 Relevance: 3.0, APIs: 2, Instructions: 31
COMMON