Login to Download PCAP (7.7MiB); PDF Report (1.1MiB); XML Report (2.1MiB); Login to "168.95.192.2" . "194.158.122.15" which is directly followed by "cmp dword ptr [esp+6Ch], 06h" and "jc 00408390h". .. Pattern match: "http://www.zemana.com/Purchase.aspx?product=anti-malware&new_affid=%d" Heuristic .