Loading ...

General Information

Analysis ID:36150
Start time:11:34:16
Start date:23/09/2013
Overall analysis duration:0h 3m 32s
Report type:full
Sample file name:9f68ae8267182bf1be4e5bb6c75022b8
Cookbook file name:default.jbs
Analysis system description:XP SP3 (Office 2003 SP2, Java 1.6.0, Acrobat Reader 9.3.4, Internet Explorer 8)
Number of analysed new started processes analysed:7
Number of new started drivers analysed:0
Number of existing processes analysed:0
Number of existing drivers analysed:0
Number of injected processes analysed:3
HCA enabled:true
HCA success:true, ratio: 95%
Warnings:
  • Report size getting too big, too many NtQueryValueKey calls found.


Detection

StrategyDetectionIndexReport FP/FN
Threshold malicious0.220


Signature Overview

Key, Mouse, Clipboard, Microphone and Screen Caputering:

Contains functionality to retrieve information about pressed keystrokesShow sources
Hooks clipboard functions (used to sniff clipboard data)Show sources

E-Banking Fraud:

Hooks winsocket function (used for sniffing or altering network traffic)Show sources

Networking:

Contains functionality to download additional files from the internetShow sources
Downloads filesShow sources
Urls found in memory or binary dataShow sources
Downloads files from webservers via HTTPShow sources
Performs DNS lookupsShow sources

Boot Survival:

Creates an autostart registry keyShow sources
Creates or modifies windows servicesShow sources
Modifies existing windows servicesShow sources
Monitors registry run keys for changesShow sources

Remote Access Functionality:

Opens a port and listens for incoming connection (possibly a backdoor)Show sources

Persistence and Installation Behavior:

Drops PE filesShow sources

Data Obfuscation:

Binary may include packed or encrypted dataShow sources
Contains functionality to dynamically determine API callsShow sources
PE file contains an invalid checksumShow sources

Spreading:

Contains functionality to enumerate / list files inside a directoryShow sources

System Summary:

Contains functionality to access the windows certificate storeShow sources
Contains functionality to adjust token privileges (e.g. debug / backup)Show sources
Contains functionality to enum processes or threadsShow sources
Creates files inside the user directoryShow sources
Creates temporary filesShow sources
Executes batch filesShow sources
Reads ini filesShow sources
Spawns processesShow sources
Contains functionality to call native functionsShow sources
Contains functionality to shutdown / reboot the systemShow sources
Creates mutexesShow sources
Enables driver privilegesShow sources
Tries to load missing DLLsShow sources

HIPS / PFW / Operating System Protection Evasion:

Contains functionality to add an ACL to a security descriptorShow sources
Contains functionality to inject threads in other processesShow sources
Allocates memory in foreign processesShow sources
Changes memory attributes in foreign processes to executable or writableShow sources
Creates a thread in another existing process (thread injection)Show sources
Injects a PE file into a foreign processesShow sources
Writes to foreign memory regionsShow sources

Anti Debugging:

Contains functionality to register its own exception handlerShow sources
Checks for kernel debuggers (NtQuerySystemInformation(SystemKernelDebuggerInformation))Show sources
Contains functionality to access loader functionality (e.g. LdrGetProcedureAddress)Show sources
Contains functionality to check if a debugger is running (IsDebuggerPresent)Show sources
Contains functionality to dynamically determine API callsShow sources
Creates guard pages, often used to prevent reverse engineering and debuggingShow sources
Found dropped PE file which has not been started or loadedShow sources

Virtual Machine Detection:

Contains functionality to enumerate / list files inside a directoryShow sources
Queries a list of all running processesShow sources

Hooking and other Techniques for Stealthness and Protection:

Monitors certain registry keys / values for changes (often done to protect autostart functionality)Show sources
Deletes itself after installationShow sources
Modifies the prolog of user mode functions (user mode inline hooks)Show sources

Lowering of HIPS / PFW / Operating System Security Settings:

Modifies the windows firewallShow sources

Language, Device and Operating System Detection:

Contains functionality to query local / system timeShow sources
Contains functionality to query the account / user nameShow sources
Contains functionality to query time zone informationShow sources
Contains functionality to query windows versionShow sources
Queries the cryptographic machine GUIDShow sources
Queries the installation date of WindowsShow sources
Queries the installation date of WindowsShow sources
Queries the product ID of WindowsShow sources
Queries the volume information (name, serial number etc) of a deviceShow sources

Screenshot

Startup

  • system is xp
  • 9f68ae8267182bf1be4e5bb6c75022b8.exe (PID: 1476 MD5: 9F68AE8267182BF1BE4E5BB6C75022B8)
    • dfengh.exe (PID: 1700 MD5: 31A061B9C2661D02C88C04887651AA53)
      • bfsrfgs.exe (PID: 1632 MD5: CE82CCE381074ABA34C76B7929CBCC29)
        • yxufa.exe (PID: 908 MD5: 80E258A5B4707BDC9674627FAADD86A4)
          • explorer.exe (PID: 1548 MD5: 12896823FB95BFB3DC9B46BCAEDC9923)
          • ctfmon.exe (PID: 1732 MD5: 5F1D5F88303D4A4DBC8E5F97BA967CC3)
          • wscntfy.exe (PID: 1640 MD5: F92E1076C42FCD6DB3D72D8CFE9816D5)
        • cmd.exe (PID: 116 cmdline: C:\WINDOWS\system32\cmd.exe /c C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\SMNBD85.bat MD5: 6D778E0F95447E6546553EEEA709D03C)
  • cleanup

Created / dropped Files

File PathHashes
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Cab1.tmp
  • MD5: F581048AA8697DA74A9BE736B6035542
  • SHA: 9EA06E2F446782EA60D685520FC38891FB6B8332
  • SHA-256: 8A2B17AC9DCC076AB307854E79854F7906C68A50C8865B289F848341D90750A8
  • SHA-512: E24BB92B27FD97A6409DE096714EE59FAB6B82A5BB72E1DBE92EA7E97324ABD6C64C8584C62E2AC9830700461F05014210B9FC148AB01ECE178DCEA1F0A2D546
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Cab3.tmp
  • MD5: F581048AA8697DA74A9BE736B6035542
  • SHA: 9EA06E2F446782EA60D685520FC38891FB6B8332
  • SHA-256: 8A2B17AC9DCC076AB307854E79854F7906C68A50C8865B289F848341D90750A8
  • SHA-512: E24BB92B27FD97A6409DE096714EE59FAB6B82A5BB72E1DBE92EA7E97324ABD6C64C8584C62E2AC9830700461F05014210B9FC148AB01ECE178DCEA1F0A2D546
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Cab5.tmp
  • MD5: C63ADFC2FEEB9A8816F2B38C118B4746
  • SHA: 3CAE38AB276501F2998191C71F1A91EEAF1D44C6
  • SHA-256: 9728D8F82A9AA5B4DA3AF6E41A08E5499AE3B86EA62E1F78AD0B3CDD097B98AF
  • SHA-512: 4EA126FB85B23FE15A938E8603D6846F2AEDC32559B69B65CD179940C5052BE9C8FBA720DEDD893D4E8C5863C3CF0204F985A7662F4D11205DBCBD1934AC74CB
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\SMNBD85.bat
  • MD5: 998324858FD4FAA8CAFE0AEACD175503
  • SHA: 9710787CA0327281EBE2F3680FA0B261CEE690CA
  • SHA-256: 6237917EF03361468925539A3BB22F3F384762F959C697935F654A2E148D79B4
  • SHA-512: 5BFB927F3217988F7F0A18AA4A6F6FF3214DAA049D095ACB04C259B946E56719A3AA05C8465E9DAD8C62AA6A7CE304764CF317C8C4AA5F69291489EEB5CD49BD
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Tar2.tmp
  • MD5: EF9FB765C2D58205E6DCB7BC9B1ED954
  • SHA: AD09FD6B5F537A5ED6654B5AA3C0B84A9107BB7B
  • SHA-256: 0CB216D73402ACE7B2F15F2F7D0D81A464EFC2732EDB001FA6F9A28EAF972BB4
  • SHA-512: E1D552D75996BDEB625BC70FBA6880EA5A6C9D780AFB328228F97418B54F377B37DC4EECAE95A346FAB610B3EBFFB8B85FC986BFA5B602ABEE381DE70AB3BA2F
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Tar4.tmp
  • MD5: EF9FB765C2D58205E6DCB7BC9B1ED954
  • SHA: AD09FD6B5F537A5ED6654B5AA3C0B84A9107BB7B
  • SHA-256: 0CB216D73402ACE7B2F15F2F7D0D81A464EFC2732EDB001FA6F9A28EAF972BB4
  • SHA-512: E1D552D75996BDEB625BC70FBA6880EA5A6C9D780AFB328228F97418B54F377B37DC4EECAE95A346FAB610B3EBFFB8B85FC986BFA5B602ABEE381DE70AB3BA2F
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\Tar6.tmp
  • MD5: 9A0E6AFE423E553B8CF32F1023086A0E
  • SHA: 749E3771C9E5D6999B03A4419A4CD9A754F9FC7B
  • SHA-256: 0C4A1F19CC6E73CEE61EC72F1072820FDE95CEE341B1D54979B83FF22678BFA3
  • SHA-512: 3CADD0B44CC473747E9B0016623A89D52CE0469B3D329F087527B5516E99A0256E6964554875F697E3AC1E2D44572B5FF5C6E10C78377B33F40C7E757FC86DEC
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\bfsrfgs.exe
  • MD5: CE82CCE381074ABA34C76B7929CBCC29
  • SHA: AB7DBC122116F137330EE6FA1CFA81BC4897B1EC
  • SHA-256: FA40B8757D9EC792F3090DFB647812E128B66E09ADC5C6C5D733AD69D890DC5A
  • SHA-512: A672CAE1DDFC9351E5297D8559E1C9727E5C1C562FEC8E80457D4EBCC7C34464DE2CCF39147D3A656BE87BA4B1F7F21659AD0156864D224FA38081854CE09773
C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\dfengh.exe
  • MD5: 31A061B9C2661D02C88C04887651AA53
  • SHA: 41D2167C45A0AD7BC3EC9D550661CD9A26860436
  • SHA-256: A4AD7A0BAD422CA82DA3A07421953EDBFEEAC6E2759222744AB758FF4B1D3EB7
  • SHA-512: 157F67116B8D0053582D4D310426EF29E382E3A76F39C9EA5ADE38733BDD74C45E138A028C9DDAD1CC031C6437F1E2BB225B058728A6B33D88399616AFE691A7
C:\Documents and Settings\Administrator\Application Data\Microsoft\Address Book\Administrator.wab
  • MD5: 02962AB958FD8410CA1B04F6E17678D4
  • SHA: FCA7F88477EC587D7DB697D0304B2CD4C866589E
  • SHA-256: FFCDD9AB874B1D78AC8ADD26AF64C4F30F5D15FCC95313E5D4AA8779A50EB142
  • SHA-512: 19866C137DC835737C3E50A0168BD6FA254496147DB6A7003C2319EDF02733D64D19C1479B6B035D8C6BBC3D13A1A80E287829960CAB4544CFC79A3A7A2C4678
C:\Documents and Settings\Administrator\Application Data\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004
  • MD5: 75D5804AECBAFD2AF943D4DE036A46AE
  • SHA: 53D118F68432F40A70788C610ABE235BF80EDC19
  • SHA-256: 8A3F0B8CF35F5D87647745E1073ADC1C09D418957BB34BB45914BDC2CDB0294E
  • SHA-512: 932D3268807604939853FCB798F1A48B6814290AF9A77F6B713F02EDB926213FEA9C84B131F59D6F27AA115E770B8475746B6D299DCA3D2777B857447B1F016F
C:\Documents and Settings\Administrator\Application Data\Microsoft\CryptnetUrlCache\Content\3B6E683A7A45CC59BF035C9BA8C7AB9D
  • MD5: 9E3F33A494B8AF3BC1E899A54C90AF3C
  • SHA: 33019A7FB34E4C2B366FD7A58CFC0B9397761261
  • SHA-256: 7C3845673E448A6EFADAAB0EAF49AD7B18782CA9971A7E61FB28652A57B1A21C
  • SHA-512: 49A95634042C7ECC82A67608E3C1850FED37F68755B81A0878E7FA71884ACF53035F97AB62228AA0F8B8A181DDF7F4DF9695885BD29BAEF43AAD0B726DE2D298
C:\Documents and Settings\Administrator\Application Data\Microsoft\CryptnetUrlCache\Content\56C1FDF96B4236A573C8DF6802435A5D
  • MD5: 84D69BB9690DF14BD01CE47C2529BE50
  • SHA: 141ADA2B39B5864EB072610E1B941F679843B077
  • SHA-256: DEC8F5F72512713B78688FE19269AB3D061D92CBE8A99EBEDDE1A0EF78514F6A
  • SHA-512: 23DDA4C458D82F58A22FCBC8B61DA4F4A2EF51DB5D623767DA58D15B32472D076DD27D895296CF840FAD5F7C319B472E6001C59C2CF482E6E35B815E71CF33C5
C:\Documents and Settings\Administrator\Application Data\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
  • MD5: C63ADFC2FEEB9A8816F2B38C118B4746
  • SHA: 3CAE38AB276501F2998191C71F1A91EEAF1D44C6
  • SHA-256: 9728D8F82A9AA5B4DA3AF6E41A08E5499AE3B86EA62E1F78AD0B3CDD097B98AF
  • SHA-512: 4EA126FB85B23FE15A938E8603D6846F2AEDC32559B69B65CD179940C5052BE9C8FBA720DEDD893D4E8C5863C3CF0204F985A7662F4D11205DBCBD1934AC74CB
C:\Documents and Settings\Administrator\Application Data\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004
  • MD5: 79965792D39752F8123544787E0D8468
  • SHA: D12037C177D0220AE1DBF9EDC4E875DFD55A3C7B
  • SHA-256: 2271170ECD2B6BE1C8D7C976B78C00AD22D5AC393CD9A8E8C8F63F993B3EDEE7
  • SHA-512: 15DA0281FE4B1036ABBC873EF1D964EA6EEC07FC9B88861F42288A2640865D5C23B9EA4918A552AE31CF28265A6AF5810739CE776CE81E8252D9376BC5A1380F
C:\Documents and Settings\Administrator\Application Data\Microsoft\CryptnetUrlCache\MetaData\3B6E683A7A45CC59BF035C9BA8C7AB9D
  • MD5: 57824D43574622136A16D215D0087950
  • SHA: 5B0811BCF4B64524B78F0883A3DACF08DE92A667
  • SHA-256: 6087CEAC9D6986C0A1980342862467F24A299D25BA4544578B009233044D5114
  • SHA-512: 89DA563BEE3DDEF867F88C8F18D6A81060A8D1D980463A052BF1D81BCE67F2CEA6086FA585F514977EB288D2711796A97B53E6FED82ABAF7B59203EE9F949C04
C:\Documents and Settings\Administrator\Application Data\Microsoft\CryptnetUrlCache\MetaData\56C1FDF96B4236A573C8DF6802435A5D
  • MD5: CF4150664C96327E8D406F84812828F4
  • SHA: 664CF5F4472FCEB075BE07FAA386503CB3A3C480
  • SHA-256: 8669C4013F98317F45E098E84FF37164C1E9BC7032039CF5F052DEB2D89FDBF5
  • SHA-512: F39DCC89E57AEDBAE0AE9B0008C60E79B9BD46D851A6758B2B890C27268654EFA7984C544243A9AE391321A3B367D1658E05E64A2D511D8460944798756970F2
C:\Documents and Settings\Administrator\Application Data\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
  • MD5: 380671FE1F4D7F7ED28214B029F12C1F
  • SHA: 695641ACECCEE7C9010170D2A3D5CBCA2129E17D
  • SHA-256: B54155AC6399579BF700BCB11316DAAED08C2A4947E92A4A1F1C0791AD739188
  • SHA-512: 670A99B267D9AEAF951FF5662BCC82711BCF874CAC64D740969E87953FD0A0BA25D1EB1A33348CE74DBD3B649855E9CDEDF2CF2D6B5637072D65C301F3EC7CCF
C:\Documents and Settings\Administrator\Application Data\Uvar\yxufa.exe
  • MD5: 80E258A5B4707BDC9674627FAADD86A4
  • SHA: 2EBC7F7F4B9204B41F1CC4EA5F461D732EB79A7B
  • SHA-256: 7D904C091D97D15CDF3F6FA9E87F369AB66A1AA76A0BAEA38432A85E4AF0E7FC
  • SHA-512: 083DFDB8A89B67C6817520073CBB916661CBC7BA94F11346D2ABFA58869A439C0F657B1AD29C0191E97398A6B9DD7DCA1DA406093E8755E3A51B07437BE6F2B9
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\5B7NHQO2\da[1].exe
  • MD5: CE82CCE381074ABA34C76B7929CBCC29
  • SHA: AB7DBC122116F137330EE6FA1CFA81BC4897B1EC
  • SHA-256: FA40B8757D9EC792F3090DFB647812E128B66E09ADC5C6C5D733AD69D890DC5A
  • SHA-512: A672CAE1DDFC9351E5297D8559E1C9727E5C1C562FEC8E80457D4EBCC7C34464DE2CCF39147D3A656BE87BA4B1F7F21659AD0156864D224FA38081854CE09773
\ROUTER
  • MD5: E62AF50E9DC6C765631B20C223C5A1D4
  • SHA: 78AF5EC66758B2128161D2EF516DB71208CC04DF
  • SHA-256: EB6315D3D364C74C36BAB83ABD9A49CA5A3FD8653CCD0731986DE6A2C510DB6C
  • SHA-512: AFA47A2FB0B5E33EE2A05BF5FB7498E3CD529C2EC1DD019F3BACE2035A0D712039DCE7D639F48DE2896DA8AB3665B83536C63A651C719BBF2925134F88A780C5

Contacted Domains

NameIPName ServerActiveRegistrare-Mail
gov-l.com74.221.210.125ns2.2ndry.com ns1.2ndry.com trueENOM, INC.support@namecheap.com4fcd17888e73440e9c2b2db4f6d94a55.protect@whoisguard.com
crl.comodoca.com178.255.83.2trueunknownunknown
crl.usertrust.com178.255.83.2trueunknownunknown

Contacted IPs

IPCountryPingableOpen Ports
74.208.73.146UNITED STATEStrue80 3389
24.107.136.226UNITED STATESfalse
71.61.76.222UNITED STATESfalse
86.131.235.103UNITED KINGDOMtrue
203.81.192.36PAKISTANtrue80 443 3389
178.255.83.2UNITED KINGDOMtrue22 80 443
74.221.210.125UNITED STATEStrue21 22 80 443
75.32.154.102UNITED STATESfalse
195.186.1.121SWITZERLANDfalse
98.95.183.150UNITED STATESfalse
85.100.41.9TURKEYtrue80
98.81.0.25UNITED STATESfalse
184.144.14.69CANADAfalse
115.70.128.151AUSTRALIAfalse21 3389
23.62.99.27unknowntrue80 443
81.138.21.57UNITED KINGDOMtrue
131.175.68.35ITALYtrue
74.179.161.58UNITED STATEStrue

Static File Info

File type:PE32 executable (GUI) Intel 80386, for MS Windows
File name:9f68ae8267182bf1be4e5bb6c75022b8
File size:20992
MD5:9f68ae8267182bf1be4e5bb6c75022b8
SHA1:0057e87e96f0bc653021a340e3485e574c878906
SHA256:f3e382b6dd99dbdef91a166791a54e10beb7d77f26291fcf59203ab444a1b2d1
SHA512:fa1152a499a4117b5c061ad31504b38399f62f7839387311a22ef645987f993f4dc4b37c110bb8972abc042c4926f5dc75d2ed3ac6e6a0238d0acf779faf5846

Static PE Info

General
Entrypoint:0x3501575
Entrypoint Section:.text
Imagebase:0x3500000
Subsystem:windows gui
Image File Characteristics:32BIT_MACHINE, EXECUTABLE_IMAGE
DLL Characteristics:TERMINAL_SERVER_AWARE, NX_COMPAT, NO_SEH
Time Stamp:0x52302D4D [Wed Sep 11 08:43:57 2013 UTC]
TLS Callbacks:
Digitally signed:False
Resources
NameRVASizeTypeLanguageCountry
RT_ICON0x51000x2734dataRussianRussia
RT_STRING0x78500x3cdataRussianRussia
RT_GROUP_ICON0x78380x14MS Windows icon resource - 1 iconRussianRussia
Imports
DLLImport
Cabinet.dll
KERNEL32.dllGetModuleHandleW, ExitProcess, GetLastError, CreateDirectoryW
USER32.dllGetCursorInfo
Sections
NameVirtual AddressVirtual SizeRaw SizeEntropy
.text0x10000x20000x14005.43901506667
.rdata0x30000x10000x8004.41591669205
.data0x40000x10000x8003.39680851835
.rsrc0x50000x28900x2a005.4264847342
Possible Origin
Language of compilation systemCountry where language is spokenMap
RussianRussia

Network Behavior

TCP Packets
TimestampSource PortDest PortSource IPDest IP
Sep 23, 2013 11:35:21.052078962 CEST6040153192.168.0.10195.186.1.121
Sep 23, 2013 11:35:21.647824049 CEST5360401195.186.1.121192.168.0.10
Sep 23, 2013 11:35:21.658081055 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:21.658152103 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:21.658575058 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:21.670782089 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:21.670809031 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:22.656055927 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:22.762753963 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:22.763577938 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:22.763598919 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:22.764178991 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:22.775122881 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:22.775171995 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:23.640507936 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:23.848638058 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:26.182960987 CEST5062753192.168.0.10195.186.1.121
Sep 23, 2013 11:35:26.876286983 CEST5350627195.186.1.121192.168.0.10
Sep 23, 2013 11:35:26.882637978 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:26.882667065 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:26.883001089 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:26.885591984 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:26.885607004 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:28.317456961 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:28.442759991 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:28.621778965 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:28.621793985 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:29.860522032 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:29.884536982 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:29.885299921 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:29.885313034 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:29.885807991 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:29.906697989 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:29.906704903 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:29.907370090 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:29.918462038 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:29.919224024 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:29.919234037 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:29.919723988 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.033679962 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.147954941 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.148698092 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.148710966 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.149329901 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.169895887 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.169902086 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.170650959 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.214982986 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.215722084 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.215732098 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.216301918 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.265722036 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.274966002 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.275706053 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.275718927 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.276283026 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.344479084 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.450015068 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.450748920 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.450759888 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.451419115 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.461987019 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.489073038 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.489805937 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.489815950 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.490154028 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.629190922 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.664690018 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.665472984 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.665484905 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.666099072 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.699541092 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.699552059 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.700218916 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.789824963 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.790517092 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.790533066 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.790740967 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.817939997 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.818627119 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.818639040 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.819063902 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:30.825895071 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.825901031 CEST80103223.62.99.27192.168.0.10
Sep 23, 2013 11:35:30.826558113 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:35:31.189676046 CEST5891053192.168.0.10195.186.1.121
Sep 23, 2013 11:35:31.811028004 CEST5358910195.186.1.121192.168.0.10
Sep 23, 2013 11:35:31.817414045 CEST103380192.168.0.10178.255.83.2
Sep 23, 2013 11:35:31.817466974 CEST801033178.255.83.2192.168.0.10
Sep 23, 2013 11:35:31.817827940 CEST103380192.168.0.10178.255.83.2
Sep 23, 2013 11:35:31.820439100 CEST103380192.168.0.10178.255.83.2
Sep 23, 2013 11:35:31.820465088 CEST801033178.255.83.2192.168.0.10
Sep 23, 2013 11:35:32.782247066 CEST801033178.255.83.2192.168.0.10
Sep 23, 2013 11:35:32.829495907 CEST801033178.255.83.2192.168.0.10
Sep 23, 2013 11:35:32.830033064 CEST103380192.168.0.10178.255.83.2
Sep 23, 2013 11:35:32.830920935 CEST103380192.168.0.10178.255.83.2
Sep 23, 2013 11:35:32.906227112 CEST5248553192.168.0.10195.186.1.121
Sep 23, 2013 11:35:33.612063885 CEST5352485195.186.1.121192.168.0.10
Sep 23, 2013 11:35:33.620712042 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:33.620743036 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:33.621088028 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:33.624850988 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:33.624881029 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:34.788559914 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:34.839426994 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:34.840241909 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:34.840255022 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:34.840985060 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:34.900012970 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:34.945307970 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:34.946129084 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:34.946145058 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:34.946475029 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:34.989449024 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:34.991139889 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:34.991867065 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:34.991878986 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:34.992271900 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.048544884 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.124325991 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.125046015 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.125057936 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.125638008 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.164030075 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.164036989 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.164777040 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.180051088 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.180799961 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.180809975 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.181389093 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.249319077 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.267332077 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.268070936 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.268081903 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.268760920 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.304517984 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.304527044 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.305259943 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.307533026 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.308254957 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.308265924 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.308815002 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.361397028 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.395492077 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.396287918 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.396300077 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.397022009 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.442608118 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.442615032 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.443346977 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.464998007 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.465811014 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.465821981 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.466562033 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.475229979 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.491628885 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.492373943 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.492383957 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.493000031 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.499967098 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.499973059 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.500714064 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.592371941 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.593187094 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.593203068 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.593923092 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.613420963 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.613426924 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.614362955 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.694545031 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.695282936 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.695298910 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.696029902 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.732620001 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.732629061 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.733439922 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.737309933 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.738044024 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.738056898 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.738658905 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.771950006 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.778465986 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.779277086 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.779288054 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.779911041 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.817310095 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.837619066 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.838357925 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.838368893 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.838722944 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.862776041 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.864950895 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.865711927 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.865744114 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.866316080 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.891242981 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.891253948 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.892000914 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.910111904 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.910857916 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.910870075 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.911336899 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.939379930 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.952447891 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.953248024 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.953258038 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.963664055 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.964396954 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.964407921 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.964937925 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.974724054 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.974729061 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.975465059 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.992892981 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.993633986 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:35.993654966 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:35.994241953 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.011887074 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.042390108 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.043148994 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.043164968 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.043840885 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.049721956 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.050080061 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.050767899 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.050779104 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.051253080 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.082592964 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.082600117 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.083302021 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.111563921 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.112004995 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.112307072 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.112317085 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.112646103 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.112911940 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.149863005 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.150597095 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.150607109 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.150794029 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.151051998 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.151061058 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.151459932 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.224188089 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.224937916 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.224948883 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.225390911 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.230372906 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.230379105 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.231112003 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.298794031 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.299530029 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.299541950 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.299751997 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.309581041 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.310312033 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.310322046 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.310827017 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.319746971 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.319752932 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.320563078 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.326389074 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.327205896 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.327214956 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.327830076 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.385977030 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.386454105 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.386904955 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.387145042 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.387156010 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.387548923 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.387825966 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.399856091 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.400593042 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.400603056 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.401223898 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.415966988 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.440850019 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.441663980 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.441673994 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.442190886 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.450305939 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.450310946 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.451047897 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.458926916 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.458931923 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.459630013 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.506376028 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.506386042 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.507128954 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.645342112 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.651202917 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.689697027 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.690423012 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.690447092 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.690968990 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.726427078 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.764997005 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.765283108 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.765808105 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.765821934 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.766031027 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.804588079 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.805210114 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.805223942 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.812352896 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.813091040 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.813102961 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.813677073 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.856744051 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.859491110 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.860301018 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.860311985 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.860928059 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.907809973 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.917660952 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.918400049 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.918411016 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.919071913 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.920968056 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.920975924 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.921701908 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.943298101 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.967781067 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.968522072 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:36.968535900 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:36.969068050 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.017574072 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.018120050 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.018852949 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.018865108 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.019392014 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.040066004 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.040074110 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.040827990 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.044631004 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.044636965 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.045389891 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.081835032 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.109066010 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.109787941 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.109805107 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.110330105 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.122987032 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.122992992 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.123809099 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.130084038 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.161442041 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.162251949 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.162262917 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.162883043 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.182169914 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.182177067 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.182992935 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.225007057 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.225706100 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.225718975 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.229933977 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.230603933 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.230612993 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.230938911 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.249360085 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.258930922 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.259627104 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.259638071 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.262402058 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.268347025 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.277085066 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.277704954 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.277717113 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.278156996 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.286010981 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.321203947 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.321945906 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.321957111 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.418870926 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.419615030 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.419625044 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.419836998 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.426664114 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.427478075 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.427486897 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.428116083 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.475697041 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.475703001 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.476453066 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.499033928 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.499847889 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.499857903 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.500528097 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.512417078 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.512423992 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.513242006 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.518095016 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.518860102 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.518898964 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.519481897 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.526609898 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.544517994 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.545321941 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.545335054 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.583409071 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.584139109 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.584151030 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.584367037 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.618344069 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.619153976 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.619163990 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.619749069 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.646667957 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.646675110 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.647356033 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.661243916 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.661251068 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.662054062 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.680998087 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.681524038 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.681535006 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.682404041 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.738337994 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.767631054 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.768436909 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.768449068 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.769100904 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.782947063 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.798355103 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.799153090 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.799163103 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.824807882 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.825544119 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.825555086 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.826131105 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.866113901 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.877327919 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.878135920 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.878146887 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.878722906 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:37.930221081 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.930227041 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:37.931037903 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:38.038109064 CEST801034178.255.83.2192.168.0.10
Sep 23, 2013 11:35:38.038902998 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:38.039753914 CEST103480192.168.0.10178.255.83.2
Sep 23, 2013 11:35:38.335489988 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:38.335505962 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.153633118 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.233885050 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.234719992 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.234743118 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.235462904 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.251231909 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.266594887 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.267307997 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.267327070 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.267849922 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.292172909 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.301697016 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.302427053 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.302448034 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.303028107 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.327600002 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.327615976 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.328356981 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.328561068 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.363997936 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.364011049 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.364743948 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.414863110 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.415611982 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.415632010 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.457967043 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.458687067 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.458698988 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.459528923 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.479847908 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.479861975 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.480632067 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.492117882 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.492865086 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.492885113 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.493566990 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.516279936 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.516299963 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.517225981 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.698664904 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.699477911 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.699502945 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.700093985 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.715079069 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.720628977 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.721143961 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.721154928 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.721626997 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.760296106 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.760317087 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.761163950 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.799807072 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.800554991 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.800584078 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.801186085 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.803889990 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.803904057 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.804651976 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.878802061 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.879540920 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.879559994 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.879760981 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.917454958 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.918268919 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.918289900 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.918369055 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.962213993 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.963042021 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.963062048 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.975080013 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.975831032 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.975855112 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.976516962 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:39.995903969 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.995923042 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:39.996670961 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.007894993 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.008711100 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.008730888 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.009391069 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.017608881 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.017622948 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.018354893 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.031924009 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.032730103 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.032752037 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.033332109 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.046401024 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.046416998 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.047147036 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.067898989 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.067974091 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.068696976 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.068712950 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.068778038 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.082396984 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.083128929 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.083146095 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.083228111 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.108136892 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.108838081 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.108855009 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.115257978 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.115925074 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.115943909 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.116532087 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.136874914 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.136899948 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.137120962 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.137609959 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.137902021 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.137912989 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.138341904 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.139678001 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.139688015 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.140454054 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.173986912 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.174009085 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.174807072 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.174827099 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.174886942 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.175118923 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.183001041 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.183738947 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.183758974 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.184370995 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.202692032 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.208242893 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.208981991 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.209001064 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.209079027 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.228394032 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.229182959 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.229204893 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.229815006 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.252696037 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.287059069 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.287796021 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.287813902 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.288454056 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.294085026 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.294097900 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.294898033 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.306334019 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.307074070 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.307089090 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.307149887 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.307174921 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.307765961 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.307774067 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.308465958 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.316504955 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.344644070 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.345395088 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.345413923 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.345936060 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.350492001 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.359479904 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.360213041 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.360233068 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.360847950 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.381808043 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.393171072 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.393927097 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.393944979 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.394023895 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.397080898 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.397833109 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.397850037 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.398375988 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.411381960 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.418900967 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.419644117 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.419661999 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.420233965 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.429663897 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.436431885 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.437149048 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.437166929 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.513216972 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.513921022 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.513938904 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.519001961 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.519737959 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.519757032 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.519835949 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.586447001 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.587245941 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.587264061 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.587330103 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.600246906 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.600982904 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.601001978 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.601330042 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.609500885 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.619293928 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.620198011 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.620217085 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.620826006 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.626141071 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.648168087 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.648968935 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.648991108 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.649724007 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.657134056 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.663595915 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.664341927 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.664356947 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.664928913 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.671291113 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.671304941 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.671742916 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.672111034 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.672414064 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.672425032 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.672864914 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.716783047 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.795525074 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.796258926 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.796278954 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.797014952 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.805455923 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.834907055 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.835570097 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.835587978 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.835932016 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.851542950 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.860615015 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.861355066 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.861386061 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.861963987 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.869982958 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.869993925 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.870764017 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.916495085 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.917344093 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.917365074 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.917983055 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.959961891 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.975258112 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.975994110 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:40.976012945 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:40.976350069 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.012680054 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.021852016 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.022694111 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.022715092 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.023283005 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.024840117 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.024849892 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.025588036 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.038239956 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.038986921 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.039005041 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.039681911 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.047759056 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.052072048 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.052679062 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.052695036 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.052903891 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.087924957 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.088671923 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.088709116 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.089431047 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.097209930 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.097235918 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.098036051 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.130009890 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.130904913 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.130923033 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.130987883 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.147383928 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.148140907 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.148169041 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.162117004 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.162147045 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.162995100 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.163017988 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.163105965 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.163346052 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.191219091 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.191235065 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.192051888 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.205252886 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.206105947 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.206123114 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.206187963 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.257739067 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.258548021 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.258563995 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.258656979 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.428028107 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.428770065 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.428790092 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.429516077 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.467813015 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.493736029 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.494549990 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.494568110 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.495176077 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.644346952 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.735347986 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.736196995 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.736217976 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.871678114 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.872490883 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.872508049 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.873117924 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.934043884 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.970541954 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.971357107 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:41.971378088 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:41.971704960 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.034533024 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.072478056 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.073291063 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.073312044 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.074028969 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.128900051 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.149149895 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.149965048 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.149986982 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.150600910 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.164671898 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.164685965 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.165493965 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.268244028 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.269023895 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.269043922 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.269125938 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.303225994 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.304083109 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.304101944 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.304837942 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.368834972 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.432041883 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.432863951 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.432898045 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.433623075 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.482578993 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.484654903 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.485456944 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.485476971 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.506266117 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.507080078 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.507101059 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.507179022 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.540177107 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.540915966 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.540937901 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.541595936 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.602160931 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.672360897 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.673131943 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.673151016 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.685669899 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.686491966 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.686515093 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.687125921 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.689152956 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.689165115 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.689980030 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.755302906 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.756185055 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.756203890 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.756288052 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.756566048 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.766350985 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.809608936 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.810228109 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.810250044 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.810728073 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.882093906 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.882329941 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.882991076 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.883009911 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.883482933 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:42.907541990 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.907555103 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:42.908212900 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:43.036262035 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:43.036963940 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:43.037014008 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:43.037053108 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:43.037342072 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:43.037441969 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:43.037450075 CEST443103174.221.210.125192.168.0.10
Sep 23, 2013 11:35:43.038183928 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:43.214607954 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:45.682271957 CEST1031443192.168.0.1074.221.210.125
Sep 23, 2013 11:35:45.682517052 CEST103280192.168.0.1023.62.99.27
Sep 23, 2013 11:36:05.607302904 CEST70521376192.168.0.1075.32.154.102
Sep 23, 2013 11:36:11.461339951 CEST70524587192.168.0.1074.208.73.146
Sep 23, 2013 11:36:18.740853071 CEST70528835192.168.0.1085.100.41.9
Sep 23, 2013 11:36:24.757910967 CEST70528992192.168.0.1074.179.161.58
Sep 23, 2013 11:36:31.889354944 CEST70526597192.168.0.1024.107.136.226
Sep 23, 2013 11:36:40.571105957 CEST70524982192.168.0.1081.138.21.57
Sep 23, 2013 11:36:49.024137974 CEST70524668192.168.0.1086.131.235.103
Sep 23, 2013 11:36:56.257484913 CEST70529797192.168.0.1071.61.76.222
Sep 23, 2013 11:37:03.228971958 CEST70524672192.168.0.10203.81.192.36
Sep 23, 2013 11:37:08.461266041 CEST70529865192.168.0.10184.144.14.69
Sep 23, 2013 11:37:13.914647102 CEST70525323192.168.0.1098.95.183.150
Sep 23, 2013 11:37:20.945631027 CEST70527106192.168.0.10131.175.68.35
Sep 23, 2013 11:37:29.948623896 CEST70522727192.168.0.1098.81.0.25
Sep 23, 2013 11:37:35.678349018 CEST70522702192.168.0.10115.70.128.151
UDP Packets
TimestampSource PortDest PortSource IPDest IP
Sep 23, 2013 11:35:21.052078962 CEST6040153192.168.0.10195.186.1.121
Sep 23, 2013 11:35:21.647824049 CEST5360401195.186.1.121192.168.0.10
Sep 23, 2013 11:35:26.182960987 CEST5062753192.168.0.10195.186.1.121
Sep 23, 2013 11:35:26.876286983 CEST5350627195.186.1.121192.168.0.10
Sep 23, 2013 11:35:31.189676046 CEST5891053192.168.0.10195.186.1.121
Sep 23, 2013 11:35:31.811028004 CEST5358910195.186.1.121192.168.0.10
Sep 23, 2013 11:35:32.906227112 CEST5248553192.168.0.10195.186.1.121
Sep 23, 2013 11:35:33.612063885 CEST5352485195.186.1.121192.168.0.10
Sep 23, 2013 11:36:05.607302904 CEST70521376192.168.0.1075.32.154.102
Sep 23, 2013 11:36:11.461339951 CEST70524587192.168.0.1074.208.73.146
Sep 23, 2013 11:36:18.740853071 CEST70528835192.168.0.1085.100.41.9
Sep 23, 2013 11:36:24.757910967 CEST70528992192.168.0.1074.179.161.58
Sep 23, 2013 11:36:31.889354944 CEST70526597192.168.0.1024.107.136.226
Sep 23, 2013 11:36:40.571105957 CEST70524982192.168.0.1081.138.21.57
Sep 23, 2013 11:36:49.024137974 CEST70524668192.168.0.1086.131.235.103
Sep 23, 2013 11:36:56.257484913 CEST70529797192.168.0.1071.61.76.222
Sep 23, 2013 11:37:03.228971958 CEST70524672192.168.0.10203.81.192.36
Sep 23, 2013 11:37:08.461266041 CEST70529865192.168.0.10184.144.14.69
Sep 23, 2013 11:37:13.914647102 CEST70525323192.168.0.1098.95.183.150
Sep 23, 2013 11:37:20.945631027 CEST70527106192.168.0.10131.175.68.35
Sep 23, 2013 11:37:29.948623896 CEST70522727192.168.0.1098.81.0.25
Sep 23, 2013 11:37:35.678349018 CEST70522702192.168.0.10115.70.128.151
DNS Queries
TimestampSource IPDest IPTrans IDOP CodeNameTypeClass
Sep 23, 2013 11:35:21.052078962 CEST192.168.0.10195.186.1.1210x9388Standard query (0)gov-l.comA (IP address)IN (0x0001)
Sep 23, 2013 11:35:31.189676046 CEST192.168.0.10195.186.1.1210xfc3aStandard query (0)crl.usertrust.comA (IP address)IN (0x0001)
Sep 23, 2013 11:35:32.906227112 CEST192.168.0.10195.186.1.1210x9b0Standard query (0)crl.comodoca.comA (IP address)IN (0x0001)
DNS Answers
TimestampSource IPDest IPTrans IDReplay CodeNameCNameAddressTypeClass
Sep 23, 2013 11:35:21.647824049 CEST195.186.1.121192.168.0.100x9388No error (0)gov-l.com74.221.210.125A (IP address)IN (0x0001)
Sep 23, 2013 11:35:31.811028004 CEST195.186.1.121192.168.0.100xfc3aNo error (0)crl.usertrust.com178.255.83.2A (IP address)IN (0x0001)
Sep 23, 2013 11:35:33.612063885 CEST195.186.1.121192.168.0.100x9b0No error (0)crl.comodoca.com178.255.83.2A (IP address)IN (0x0001)
HTTP Request Dependency Graph
  • crl.usertrust.com
  • crl.comodoca.com
HTTP Packets
TimestampSource PortDest PortSource IPDest IPHeaderTotal Bytes Transfered (KB)
Sep 23, 2013 11:35:31.820439100 CEST103380192.168.0.10178.255.83.2GET /AddTrustExternalCARoot.crl HTTP/1.1
Accept: */*
User-Agent: Microsoft-CryptoAPI/5.131.2600.5512
Host: crl.usertrust.com
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache
61
Sep 23, 2013 11:35:32.782247066 CEST801033178.255.83.2192.168.0.10HTTP/1.1 200 OK
Server: nginx
Date: Mon, 23 Sep 2013 09:35:31 GMT
Content-Type: application/x-pkcs7-crl
Content-Length: 494
Last-Modified: Sun, 22 Sep 2013 11:36:52 GMT
Connection: close
X-CCACDN-Mirror-ID: h6edcacrl3
Accept-Ranges: bytes
62
Sep 23, 2013 11:35:33.624850988 CEST103480192.168.0.10178.255.83.2GET /PositiveSSLCA2.crl HTTP/1.1
Accept: */*
User-Agent: Microsoft-CryptoAPI/5.131.2600.5512
Host: crl.comodoca.com
Connection: Keep-Alive
Cache-Control: no-cache
Pragma: no-cache
63
Sep 23, 2013 11:35:34.788559914 CEST801034178.255.83.2192.168.0.10HTTP/1.1 200 OK
Server: nginx
Date: Mon, 23 Sep 2013 09:35:33 GMT
Content-Type: application/x-pkcs7-crl
Content-Length: 310978
Last-Modified: Sun, 22 Sep 2013 14:17:14 GMT
Connection: close
X-CCACDN-Mirror-ID: h6edcacrl3
Accept-Ranges: bytes
64

Code Manipulation Behavior

User Modules
Hook Summary
Function NameHook TypeActive in Processes
GetClipboardDataINLINEexplorer.exe, wscntfy.exe, ctfmon.exe
TranslateMessageINLINEexplorer.exe, wscntfy.exe, ctfmon.exe
ZwCreateThreadINLINEexplorer.exe, wscntfy.exe, ctfmon.exe
LdrLoadDllINLINEexplorer.exe, wscntfy.exe, ctfmon.exe
NtCreateThreadINLINEexplorer.exe, wscntfy.exe, ctfmon.exe
closesocketINLINEexplorer.exe
FreeAddrInfoWINLINEexplorer.exe
WSARecvINLINEexplorer.exe
WSAGetOverlappedResultINLINEexplorer.exe
GetAddrInfoWINLINEexplorer.exe
sendINLINEexplorer.exe
gethostbynameINLINEexplorer.exe
freeaddrinfoINLINEexplorer.exe
recvINLINEexplorer.exe
getaddrinfoINLINEexplorer.exe
WSASendINLINEexplorer.exe
PFXImportCertStoreINLINEexplorer.exe
UnsealMessageINLINEexplorer.exe, wscntfy.exe, ctfmon.exe
DeleteSecurityContextINLINEexplorer.exe, wscntfy.exe, ctfmon.exe
DecryptMessageINLINEexplorer.exe, wscntfy.exe, ctfmon.exe
EncryptMessageINLINEexplorer.exe, wscntfy.exe, ctfmon.exe
SealMessageINLINEexplorer.exe, wscntfy.exe, ctfmon.exe
InternetReadFileINLINEexplorer.exe
HttpSendRequestAINLINEexplorer.exe
HttpSendRequestWINLINEexplorer.exe
InternetQueryDataAvailableINLINEexplorer.exe
InternetReadFileExAINLINEexplorer.exe
HttpQueryInfoWINLINEexplorer.exe
HttpSendRequestExAINLINEexplorer.exe
HttpQueryInfoAINLINEexplorer.exe
InternetWriteFileINLINEexplorer.exe
HttpSendRequestExWINLINEexplorer.exe
InternetReadFileExWINLINEexplorer.exe
InternetCloseHandleINLINEexplorer.exe
Processes
Process: explorer.exe, Module: USER32.dll
Function NameHook TypeNew Data
GetClipboardDataINLINE0xE9 0x9C 0xC7 0x7F 0xF3 0x33
TranslateMessageINLINE0xE9 0x92 0x27 0x77 0x75 0x53
Process: explorer.exe, Module: ntdll.dll
Function NameHook TypeNew Data
ZwCreateThreadINLINE0xE9 0x95 0x51 0x10 0x07 0x7F
LdrLoadDllINLINE0xE9 0x99 0x92 0x27 0x78 0x8F
NtCreateThreadINLINE0xE9 0x95 0x51 0x10 0x07 0x7F
Process: explorer.exe, Module: WS2_32.dll
Function NameHook TypeNew Data
closesocketINLINE0xE9 0x97 0x7C 0xC0 0x06 0x6D
FreeAddrInfoWINLINE0xE9 0x9A 0xA9 0x91 0x18 0x8D
WSARecvINLINE0xE9 0x9A 0xA1 0x1F 0xF8 0x8D
WSAGetOverlappedResultINLINE0xE9 0x97 0x78 0x83 0x3A 0xAD
GetAddrInfoWINLINE0xE9 0x9A 0xA4 0x41 0x19 0x9D
sendINLINE0xE9 0x96 0x6E 0xEF 0xFA 0xAD
gethostbynameINLINE0xE9 0x9E 0xE5 0x5F 0xF0 0x0D
freeaddrinfoINLINE0xE9 0x9A 0xA9 0x91 0x18 0x8D
recvINLINE0xE9 0x98 0x8F 0xFD 0xDD 0xDD
getaddrinfoINLINE0xE9 0x9C 0xCD 0xD1 0x18 0x8D
WSASendINLINE0xE9 0x9E 0xED 0xDD 0xDD 0xDD
Process: explorer.exe, Module: CRYPT32.dll
Function NameHook TypeNew Data
PFXImportCertStoreINLINE0xE9 0x91 0x1D 0xDE 0xE6 0x6D
Process: explorer.exe, Module: Secur32.dll
Function NameHook TypeNew Data
UnsealMessageINLINE0xE9 0x90 0x07 0x79 0x9E 0xE8
DeleteSecurityContextINLINE0xE9 0x92 0x2F 0xF1 0x17 0x78
DecryptMessageINLINE0xE9 0x90 0x07 0x79 0x9E 0xE8
EncryptMessageINLINE0xE9 0x91 0x12 0x29 0x9E 0xE8
SealMessageINLINE0xE9 0x91 0x12 0x29 0x9E 0xE8
Process: explorer.exe, Module: WININET.dll
Function NameHook TypeNew Data
InternetReadFileINLINE0xE9 0x90 0x0C 0xC6 0x6C 0xCE
HttpSendRequestAINLINE0xE9 0x93 0x3E 0xED 0xDB 0xBE
HttpSendRequestWINLINE0xE9 0x92 0x2C 0xCC 0xCF 0xFE
InternetQueryDataAvailableINLINE0xE9 0x94 0x46 0x61 0x12 0x2E
InternetReadFileExAINLINE0xE9 0x9F 0xFC 0xC9 0x9D 0xDE
HttpQueryInfoWINLINE0xE9 0x9F 0xF0 0x01 0x14 0x4E
HttpSendRequestExAINLINE0xE9 0x9A 0xA7 0x72 0x23 0x3E
HttpQueryInfoAINLINE0xE9 0x9D 0xD7 0x74 0x4A 0xAE
InternetWriteFileINLINE0xE9 0x92 0x25 0x56 0x6B 0xBE
HttpSendRequestExWINLINE0xE9 0x97 0x71 0x12 0x23 0x3E
InternetReadFileExWINLINE0xE9 0x95 0x5A 0xA9 0x9E 0xEE
InternetCloseHandleINLINE0xE9 0x97 0x78 0x82 0x2E 0xEE
Process: wscntfy.exe, Module: Secur32.dll
Function NameHook TypeNew Data
UnsealMessageINLINE0xE9 0x90 0x07 0x79 0x9E 0xEB
DeleteSecurityContextINLINE0xE9 0x92 0x2F 0xF1 0x17 0x7B
DecryptMessageINLINE0xE9 0x90 0x07 0x79 0x9E 0xEB
EncryptMessageINLINE0xE9 0x91 0x12 0x29 0x9E 0xEB
SealMessageINLINE0xE9 0x91 0x12 0x29 0x9E 0xEB
Process: wscntfy.exe, Module: USER32.dll
Function NameHook TypeNew Data
GetClipboardDataINLINE0xE9 0x9C 0xC7 0x7F 0xF3 0x36
TranslateMessageINLINE0xE9 0x92 0x27 0x77 0x75 0x56
Process: wscntfy.exe, Module: ntdll.dll
Function NameHook TypeNew Data
ZwCreateThreadINLINE0xE9 0x95 0x51 0x10 0x07 0x71
LdrLoadDllINLINE0xE9 0x99 0x92 0x27 0x78 0x81
NtCreateThreadINLINE0xE9 0x95 0x51 0x10 0x07 0x71
Process: ctfmon.exe, Module: USER32.dll
Function NameHook TypeNew Data
GetClipboardDataINLINE0xE9 0x9C 0xC7 0x7F 0xF3 0x38
TranslateMessageINLINE0xE9 0x92 0x27 0x77 0x75 0x58
Process: ctfmon.exe, Module: Secur32.dll
Function NameHook TypeNew Data
UnsealMessageINLINE0xE9 0x90 0x07 0x79 0x9E 0xED
DeleteSecurityContextINLINE0xE9 0x92 0x2F 0xF1 0x17 0x7D
DecryptMessageINLINE0xE9 0x90 0x07 0x79 0x9E 0xED
EncryptMessageINLINE0xE9 0x91 0x12 0x29 0x9E 0xED
SealMessageINLINE0xE9 0x91 0x12 0x29 0x9E 0xED
Process: ctfmon.exe, Module: ntdll.dll
Function NameHook TypeNew Data
ZwCreateThreadINLINE0xE9 0x95 0x51 0x10 0x07 0x73
LdrLoadDllINLINE0xE9 0x99 0x92 0x27 0x78 0x83
NtCreateThreadINLINE0xE9 0x95 0x51 0x10 0x07 0x73

System Behavior