Play interactive tour

Edit tour

Analysis Report COVID19open_closedPodsVACCINE_LETTER2B.docx

Overview

General Information

Sample Name:	COVID19open_closedPodsVACCINE_LETTER2B.docx
Analysis ID:	353581
MD5:	e65769cca6ce8214adf674a8001d83b4
SHA1:	d3800da27e0aa660f04da269b5392fb3f4c26eb5
SHA256:	b0ecb837f4df662ff941ce2cdb64cea78b07c22b1e9ad0d328229aa9dd9f1996
Most interesting Screenshot:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Allocates a big amount of memory (probably used for heap spraying)

JA3 SSL client fingerprint seen in connection with other malware

Classification

Analysis Advice

No malicious behavior found, analyze the document also on other version of Office / Acrobat

Uses HTTPS for network communication, use the 'Proxy HTTPS (port 443) to read its encrypted data' cookbook for further analysis

Startup

System is w10x64

WINWORD.EXE (PID: 6304 cmdline: 'C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE' /Automation -Embedding MD5: 0B9AB9B9C4DE429473D6450D4297A123)

iexplore.exe (PID: 5696 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 4368 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5696 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Compliance:

Uses new MSVCR Dlls

Show sources

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE

File opened: C:\Windows\SysWOW64\MSVCR100.dll

Jump to behavior

Uses secure TLS version for HTTPS connections

Show sources

Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49766 version: TLS 1.2

Software Vulnerabilities:

Source: winword.exe

Memory has grown: Private usage: 0MB later: 67MB

Networking:

Source: Joe Sandbox View	JA3 fingerprint: 9e10692f1b7f78228b2d4e424db3a98c
Source: Joe Sandbox View	JA3 fingerprint: 37f463bf4616ecd445d4a1937da06e19

Source: global traffic

HTTP traffic detected: GET / HTTP/1.1Accept: text/html, application/xhtml+xml, image/jxr, */*Accept-Language: en-USUser-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like GeckoAccept-Encoding: gzip, deflateHost: www.dhhs.nh.govConnection: Keep-Alive

Source: index[1].htm.14.dr	String found in binary or memory: <div class="social-media"><span><a href="media/pr/index.htm">News Archive</a></span><a href="https://www.facebook.com/NHDepartmentOfHealthAndHumanServices"><img src="graphics/icon-fb-like.gif" alt="Facebook Icon" width="42" height="20" /></a> equals www.facebook.com (Facebook)
Source: covid19[1].htm0.14.dr	String found in binary or memory: <li><a class="social-btn" href="https://www.facebook.com/NHDepartmentOfHealthAndHumanServices/">DHHS Facebook <img src="css/graphics/facebook-btn.png" alt="facebook" /></a></li> equals www.facebook.com (Facebook)
Source: covid19[1].htm0.14.dr	String found in binary or memory: <li><a class="social-btn" href="https://www.facebook.com/NHPubHealth">Public Health Facebook <img src="css/graphics/facebook-btn.png" alt="facebook" /></a></li> equals www.facebook.com (Facebook)
Source: msapplication.xml0.13.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x055030f8,0x01d704c3</date><accdate>0x055030f8,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml0.13.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x055030f8,0x01d704c3</date><accdate>0x055030f8,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml5.13.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x056a6aad,0x01d704c3</date><accdate>0x056a6aad,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml5.13.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x056a6aad,0x01d704c3</date><accdate>0x056a6aad,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml7.13.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x056f2f60,0x01d704c3</date><accdate>0x056f2f60,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: msapplication.xml7.13.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x056f2f60,0x01d704c3</date><accdate>0x056f2f60,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: www.dhhs.nh.gov

Source: index[1].htm.14.dr	String found in binary or memory: http://coveringnewhampshire.org/
Source: jquery.jshowoff.min[1].js.14.dr	String found in binary or memory: http://ekallevig.com/jshowoff
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: http://olkflt.edog.officeapps.live.com/olkflt/outlookflighting.svc/api/glides
Source: index[1].htm.14.dr	String found in binary or memory: http://thedoorway.nh.gov/
Source: textsizer[1].js.14.dr	String found in binary or memory: http://txkang.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: http://weather.service.msn.com/data.aspx
Source: msapplication.xml.13.dr	String found in binary or memory: http://www.amazon.com/
Source: element_main[1].js.14.dr	String found in binary or memory: http://www.broofa.com
Source: ~WRS{B268D7D1-175E-4774-8B62-5FC8DD9A2BB9}.tmp.0.dr	String found in binary or memory: http://www.dhhs.nh.gov/
Source: textsizer[1].js.14.dr	String found in binary or memory: http://www.dynamicdrive.com)
Source: msapplication.xml1.13.dr	String found in binary or memory: http://www.google.com/
Source: msapplication.xml2.13.dr	String found in binary or memory: http://www.live.com/
Source: msapplication.xml3.13.dr	String found in binary or memory: http://www.nytimes.com/
Source: adults[1].htm.14.dr	String found in binary or memory: http://www.recovery.gov
Source: msapplication.xml4.13.dr	String found in binary or memory: http://www.reddit.com/
Source: seniors[1].htm.14.dr	String found in binary or memory: http://www.servicelink.nh.gov/
Source: disabilities[1].htm.14.dr, seniors[1].htm.14.dr	String found in binary or memory: http://www.ssa.gov/
Source: msapplication.xml5.13.dr	String found in binary or memory: http://www.twitter.com/
Source: msapplication.xml6.13.dr	String found in binary or memory: http://www.wikipedia.com/
Source: msapplication.xml7.13.dr	String found in binary or memory: http://www.youtube.com/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://analysis.windows.net/powerbi/api
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://apc.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://api.aadrm.com/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appinfo/query
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://api.addins.omex.office.net/appstate/query
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://api.addins.store.office.com/app/query
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://api.cortana.ai
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://api.diagnostics.office.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://api.diagnosticssdf.office.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://api.microsoftstream.com/api/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://api.office.net
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://api.onedrive.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://api.powerbi.com/beta/myorg/imports
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/datasets
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://api.powerbi.com/v1.0/myorg/groups
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://apis.live.net/v5.0/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://arc.msn.com/v4/api/selection
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://asgsmsproxyapi.azurewebsites.net/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://augloop.office.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://augloop.office.com/v2
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://business.nh.gov/DOS_COVID19Testing/
Source: adults[1].htm.14.dr, index[1].htm.14.dr	String found in binary or memory: https://business.nh.gov/Sign_Up/cal.asp?w=grid&y=7
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://cdn.entity.
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://cdn.odc.officeapps.live.com/odc/stat/images/OneDriveUpsell.png
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://cdn.odc.officeapps.live.com/odc/xml?resource=OneDriveSignUpUpsell
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://cdn.odc.officeapps.live.com/odc/xml?resource=OneDriveSyncClientUpsell
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://client-office365-tas.msedge.net/ab
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://clients.config.office.net/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/android/policies
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/ios
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/mac
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://clients.config.office.net/user/v1.0/tenantassociationkey
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://cloudfiles.onenote.com/upload.aspx
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://config.edge.skype.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v1/Office
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://config.edge.skype.com/config/v2/Office
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://cortana.ai
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://cortana.ai/api
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://cr.office.com
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://dashboard.nh.gov/#/site/DHHS/views/COVID-19LrgMaps/MAPCumulativeLrg.pdf
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://dashboard.nh.gov/#/site/DHHS/views/COVID19InteractiveMapDashboard/Town-ActiveCases-Data.csv?
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://dashboard.nh.gov/#/site/DHHS/views/COVID19InteractiveMapDashboard/Town-CumulativeCases-Data.
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://dashboard.nh.gov/t/DHHS/views/COVID-19LrgMaps/MAPCumulativeLrg.pdf
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://dashboard.nh.gov/t/DHHS/views/COVID-19LrgMaps/MAPCurrentCasesLrg.pdf
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://dataservice.o365filtering.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://dataservice.o365filtering.com/PolicySync/PolicySync.svc/SyncFile
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://dev.cortana.ai
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://dev0-api.acompli.net/autodetect
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://devnull.onenote.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://directory.services.
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://ecs.office.com/config/v2/Office
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://entitlement.diagnostics.office.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://entitlement.diagnosticssdf.office.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://eur.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://excel.uservoice.com/forums/304936-excel-for-mobile-devices-tablets-phones-android
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://globaldisco.crm.dynamics.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://graph.ppe.windows.net
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://graph.ppe.windows.net/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://graph.windows.net
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://graph.windows.net/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/api/telemetry
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/browse?cp=remix3d
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=icons&premium=1
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockimages&premium=1
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsoftcontent?initpivot=stockvideos&premium=1
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://hubblecontent.osi.office.net/contentsvc/microsofticon?
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://incidents.diagnostics.office.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://incidents.diagnosticssdf.office.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=ClipArt
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Facebook
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=OneDrive
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://insertmedia.bing.office.net/odc/insertmedia
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://learningtools.onenote.com/learningtoolsapi/v2.0/GetFreeformSpeech
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://lifecycle.office.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://login.microsoftonline.com/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://login.windows-ppe.net/common/oauth2/authorize
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://login.windows.local
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://login.windows.net/72f988bf-86f1-41af-91ab-2d7cd011db47/oauth2/authorize
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://login.windows.net/common/oauth2/authorize
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://loki.delve.office.com/api/v1/configuration/officewin32/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://lookup.onenote.com/lookup/geolocation/v1
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://management.azure.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://management.azure.com/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://messaging.office.com/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://ncus-000.contentsync.
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://ncus-000.pagecontentsync.
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://nh.gov/t/DHHS/views/COVID-19MAPS/CumulativeMapImageSmall.png
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://nh.gov/t/DHHS/views/COVID19OverviewDashboard/COVIDOverview?:isGuestRedirectFromVizportal=y&:
Source: index[1].htm.14.dr	String found in binary or memory: https://nheasy.nh.gov/dcyf/#/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://o365auditrealtimeingestion.manage.office.com/api/userauditrecord
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://o365diagnosticsppe-web.cloudapp.net
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://ocos-office365-s2s.msedge.net/ab
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://ofcrecsvcapi-int.azurewebsites.net/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://officeapps.live.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://officeci.azurewebsites.net/api/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://officemobile.uservoice.com/forums/929800-office-app-ios-and-ipad-asks
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://officesetup.getmicrosoftkey.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://ogma.osi.office.net/TradukoApi/api/v1.0/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentities
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://omex.cdn.office.net/addinclassifier/officeentitiesupdated
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://onedrive.live.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://onedrive.live.com/about/download/?windows10SyncClientInstalled=false
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://onedrive.live.com/embed?
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://outlook.office.com/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://outlook.office.com/autosuggest/api/v1/init?cvid=
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://outlook.office365.com/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://outlook.office365.com/api/v1.0/me/Activities
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://outlook.office365.com/autodiscover/autodiscover.json
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://ovisualuiapp.azurewebsites.net/pbiagave/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://partnerservices.getmicrosoftkey.com/PartnerProvisioning.svc/v1/subscriptions
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://portal.office.com/account/?ref=ClientMeControl
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://posarprodcssservice.accesscontrol.windows.net/v2/OAuth2-13
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://powerlift-frontdesk.acompli.net
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://powerlift.acompli.net
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://powerpoint.uservoice.com/forums/288952-powerpoint-for-ipad-iphone-ios
Source: ~WRS{B268D7D1-175E-4774-8B62-5FC8DD9A2BB9}.tmp.0.dr	String found in binary or memory: https://prd.blogs.nh.gov/dos/hsem/?page_id=11170
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://prod-global-autodetect.acompli.net/autodetect
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://r4.res.office365.com/footprintconfig/v1.7/scripts/fpconfig.json
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://res.getmicrosoftkey.com/api/redemptionevents
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://rpsticket.partnerservices.getmicrosoftkey.com
Source: index[1].htm.14.dr	String found in binary or memory: https://schoolsafetyresources.nh.gov/
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://search.nh.gov/covid19-search.htm
Source: adults[1].htm.14.dr	String found in binary or memory: https://search.nh.gov/dhhs-search.htm
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://settings.outlook.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://shell.suite.office.com:1443
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://skyapi.live.net/Activity/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://sr.outlook.office.net/ws/speech/recognize/assistant/work
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://staging.cortana.ai
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://storage.live.com/clientlogs/uploadlocation
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://store.office.cn/addinstemplate
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://store.office.com/?productgroup=Outlook
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://store.office.com/addinstemplate
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://store.office.de/addinstemplate
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://store.officeppe.com/addinstemplate
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://tasks.office.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://templatelogging.office.com/client/log
Source: element_main[1].js.14.dr	String found in binary or memory: https://translate.google.com
Source: adults[1].htm.14.dr, covid19[1].htm0.14.dr	String found in binary or memory: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
Source: covid19[1].htm0.14.dr, index[1].htm.14.dr	String found in binary or memory: https://twitter.com/NHDHHSPIO
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://twitter.com/NHPubHealth
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.desktop.html
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://uci.officeapps.live.com/OfficeInsights/web/views/insights.immersive.html
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://visio.uservoice.com/forums/368202-visio-on-devices
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://web.microsoftstream.com/video/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://webshell.suite.office.com
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://wus2-000.contentsync.
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://wus2-000.pagecontentsync.
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.apha.org/topics-and-issues/communicable-disease/coronavirus/guia
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.apha.org/topics-and-issues/communicable-disease/coronavirus/guidance
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-black.woff)
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-bold.woff)
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-medium.woff)
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-bold-italic.woff)
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-bold.woff)
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-extrabold.woff)
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-italic.woff)
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-semibold-italic.woff)
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-semibold.woff)
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans.woff)
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/trirong/trirong-bold-italic.woff)
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/trirong/trirong-bold.woff)
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/trirong/trirong-italic.woff)
Source: lg-screen[1].css.14.dr	String found in binary or memory: https://www.app-support.nh.gov/nhgov-fonts/trirong/trirong-regular.woff)
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://www.bingapis.com/api/v7/urlpreview/search?appid=E93048236FE27D972F67C5AF722136866DF65FA2
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.cdc.gov/coronavirus/2019-ncov/index.html
Source: disabilities[1].htm.14.dr, seniors[1].htm.14.dr	String found in binary or memory: https://www.cms.gov/
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.covidguidance.nh.gov/
Source: {2B1065E6-70B6-11EB-90E5-ECF4BB570DC9}.dat.13.dr	String found in binary or memory: https://www.dhhs.nh.go
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.dhhs.nh.gov
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/#skip
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/#skip/www.dhhs.nh.gov/favicon.ico
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/#translate
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/#translateilities.htm
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/#translateilities.htmt
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/R
Source: {2B1065E6-70B6-11EB-90E5-ECF4BB570DC9}.dat.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/Root
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/about/index.htm
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/about/index.htmies.htm
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/about/index.htmies.htmp
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.dhhs.nh.gov/dphs/cdcs/
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.dhhs.nh.gov/dphs/cdcs/covid19/crisis-soc-medical-ad-comm.htm
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.dhhs.nh.gov/dphs/cdcs/covid19/documents/covid-case-investigation-plan.pdf
Source: imagestore.dat.14.dr	String found in binary or memory: https://www.dhhs.nh.gov/favicon.ico
Source: imagestore.dat.14.dr	String found in binary or memory: https://www.dhhs.nh.gov/favicon.ico~
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/adults.htm
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/adults.htmm
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/adults.htmmhttps://www.dhhs.nh.gov/favicon.ico
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/disabilities.htm
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/families.htm
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/families.htmx
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/seniors.htm
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/seniors.htmt
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/seniors.htmv
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/teens.htm
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/teens.htmmr
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/women.htm
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/women.htmm
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/foryou/women.htmmr
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/index.htm
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/index.htmilities.htm
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/index.htmilities.htmd
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/index.htmjNew
Source: {2B1065E6-70B6-11EB-90E5-ECF4BB570DC9}.dat.13.dr	String found in binary or memory: https://www.dhhs.nh.gov/jNew
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.dhhs.nh.gov/omh/covid19-equity-response.htm
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.dhhs.nh.gov/oos/ombudsman/nondiscrimination.htm
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.doj.nh.gov/covid-19-scams/
Source: element_main[1].js.14.dr	String found in binary or memory: https://www.google.com/images/cleardot.gif
Source: element_main[1].js.14.dr	String found in binary or memory: https://www.google.com/support/translate
Source: element_main[1].js.14.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Source: element_main[1].js.14.dr	String found in binary or memory: https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png
Source: element_main[1].js.14.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/1x/translate_24dp.png
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.hhs.gov/sites/default/files/ocr-bulletin-3-28-20.pdf
Source: adults[1].htm.14.dr, index[1].htm.14.dr	String found in binary or memory: https://www.nh.gov
Source: {2B1065E6-70B6-11EB-90E5-ECF4BB570DC9}.dat.13.dr	String found in binary or memory: https://www.nh.gov/cov
Source: index[1].htm.14.dr	String found in binary or memory: https://www.nh.gov/covid19
Source: ~DFE0551548F1A31EE1.TMP.13.dr, covid19[1].htm.14.dr	String found in binary or memory: https://www.nh.gov/covid19/
Source: ~DFE0551548F1A31EE1.TMP.13.dr	String found in binary or memory: https://www.nh.gov/covid19/X
Source: index[1].htm.14.dr	String found in binary or memory: https://www.nh.gov/covid19/index.htm
Source: ~WRS{B268D7D1-175E-4774-8B62-5FC8DD9A2BB9}.tmp.0.dr, document.xml	String found in binary or memory: https://www.nh.gov/covid19/resources-guidance/vaccination-planning.htm
Source: {2B1065E6-70B6-11EB-90E5-ECF4BB570DC9}.dat.13.dr	String found in binary or memory: https://www.nh.gov/covv/R
Source: adults[1].htm.14.dr, index[1].htm.14.dr	String found in binary or memory: https://www.nh.gov/disclaimer.html
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.nh.gov/file-format/pdf.htm
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.nh.gov/index.htm
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.nh.gov/policy/accessibility.htm
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.nh.gov/policy/index.htm
Source: adults[1].htm.14.dr, index[1].htm.14.dr	String found in binary or memory: https://www.nh.gov/wai/index.html
Source: index[1].htm.14.dr	String found in binary or memory: https://www.nhcarepath.dhhs.nh.gov/
Source: ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	String found in binary or memory: https://www.odwebp.svc.ms
Source: women[1].htm.14.dr	String found in binary or memory: https://www.servicelink.nh.gov
Source: adults[1].htm.14.dr, disabilities[1].htm.14.dr	String found in binary or memory: https://www.servicelink.nh.gov/
Source: index[1].htm.14.dr	String found in binary or memory: https://www.servicelink.nh.gov/locator/index.htm
Source: disabilities[1].htm.14.dr	String found in binary or memory: https://www.stablenh.com/
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.vaccines.nh.gov
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://www.who.int/health-topics/coronavirus
Source: covid19[1].htm0.14.dr	String found in binary or memory: https://youtu.be/6zDpHJdwBvw?list=PLvrp9iOILTQatwnqm61jqFrsfUB4RKh6J

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443

Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49760 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49767 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 199.192.8.2:443 -> 192.168.2.5:49766 version: TLS 1.2

System Summary:

Source: classification engine

Classification label: clean1.winDOCX@4/132@4/2

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Temp\{7095FC57-AA6B-46B1-8B3A-C2FE55EF67A6} - OProcSessId.dat

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE 'C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE' /Automation -Embedding
Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: unknown	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5696 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5696 CREDAT:17410 /prefetch:2	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: COVID19open_closedPodsVACCINE_LETTER2B.docx

Initial sample: OLE zip file path = docProps/custom.xml

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\LanguageResources\EnabledEditingLanguages

Jump to behavior

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE

File opened: C:\Windows\SysWOW64\MSVCR100.dll

Jump to behavior

Hooking and other Techniques for Hiding and Protection:

Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: FAILCRITICALERRORS \| NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Extra Window Memory Injection1	Process Injection1	LSASS Memory	System Information Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol2	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Extra Window Memory Injection1	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol3	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Ingress Tool Transfer1	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
COVID19open_closedPodsVACCINE_LETTER2B.docx	0%	Virustotal		Browse
COVID19open_closedPodsVACCINE_LETTER2B.docx	0%	ReversingLabs

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://cdn.entity.	0%	URL Reputation	safe
https://cdn.entity.	0%	URL Reputation	safe
https://cdn.entity.	0%	URL Reputation	safe
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	URL Reputation	safe
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	URL Reputation	safe
https://rpsticket.partnerservices.getmicrosoftkey.com	0%	URL Reputation	safe
https://api.aadrm.com/	0%	URL Reputation	safe
https://api.aadrm.com/	0%	URL Reputation	safe
https://api.aadrm.com/	0%	URL Reputation	safe
https://res.getmicrosoftkey.com/api/redemptionevents	0%	URL Reputation	safe
https://res.getmicrosoftkey.com/api/redemptionevents	0%	URL Reputation	safe
https://res.getmicrosoftkey.com/api/redemptionevents	0%	URL Reputation	safe
https://officeci.azurewebsites.net/api/	0%	Avira URL Cloud	safe
https://store.office.cn/addinstemplate	0%	URL Reputation	safe
https://store.office.cn/addinstemplate	0%	URL Reputation	safe
https://store.office.cn/addinstemplate	0%	URL Reputation	safe
https://wus2-000.pagecontentsync.	0%	URL Reputation	safe
https://wus2-000.pagecontentsync.	0%	URL Reputation	safe
https://wus2-000.pagecontentsync.	0%	URL Reputation	safe
https://www.odwebp.svc.ms	0%	URL Reputation	safe
https://www.odwebp.svc.ms	0%	URL Reputation	safe
https://www.odwebp.svc.ms	0%	URL Reputation	safe
https://www.dhhs.nh.go	0%	Avira URL Cloud	safe
http://www.dynamicdrive.com)	0%	Avira URL Cloud	safe
http://coveringnewhampshire.org/	0%	Avira URL Cloud	safe
http://txkang.com	0%	Avira URL Cloud	safe
https://skyapi.live.net/Activity/	0%	URL Reputation	safe
https://skyapi.live.net/Activity/	0%	URL Reputation	safe
https://skyapi.live.net/Activity/	0%	URL Reputation	safe
http://ekallevig.com/jshowoff	0%	Avira URL Cloud	safe
https://api.cortana.ai	0%	URL Reputation	safe
https://api.cortana.ai	0%	URL Reputation	safe
https://api.cortana.ai	0%	URL Reputation	safe
https://staging.cortana.ai	0%	URL Reputation	safe
https://staging.cortana.ai	0%	URL Reputation	safe
https://staging.cortana.ai	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.dhhs.state.nh.us	199.192.8.2	true	false	unknown
www.app-support.nh.gov	199.192.8.2	true	false	high
www.nh.gov	199.192.8.2	true	false	high
www.dhhs.nh.gov	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.dhhs.nh.gov/foryou/teens.htm	false	high
https://www.dhhs.nh.gov/foryou/women.htm	false	high
https://www.dhhs.nh.gov/foryou/disabilities.htm	false	high
https://www.dhhs.nh.gov/foryou/seniors.htm	false	high
https://www.dhhs.nh.gov/index.htm	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://shell.suite.office.com:1443	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://twitter.com/NHPubHealth	covid19[1].htm0.14.dr	false		high
https://autodiscover-s.outlook.com/	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Flickr	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://cdn.entity.	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://dev.virtualearth.net/REST/V1/GeospatialEndpoint/	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://rpsticket.partnerservices.getmicrosoftkey.com	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://lookup.onenote.com/lookup/geolocation/v1	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://syncservice.protection.outlook.com/PolicySync/PolicySync.svc/SyncFile	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://na01.oscs.protection.outlook.com/api/SafeLinksApi/GetPolicy	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://api.aadrm.com/	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.dhhs.nh.gov/foryou/seniors.htm	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://dataservice.protection.outlook.com/PsorWebService/v1/ClientSyncFile/MipPolicies	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://api.microsoftstream.com/api/	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://insertmedia.bing.office.net/images/hosted?host=office&adlt=strict&hostType=Immersive	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://cr.office.com	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://www.nh.gov/policy/accessibility.htm	covid19[1].htm0.14.dr	false		high
https://www.dhhs.nh.gov/#translateilities.htmt	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://www.dhhs.nh.gov/favicon.ico~	imagestore.dat.14.dr	false		high
http://www.reddit.com/	msapplication.xml4.13.dr	false		high
https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-medium.woff)	lg-screen[1].css.14.dr	false		high
https://www.app-support.nh.gov/nhgov-fonts/trirong/trirong-regular.woff)	lg-screen[1].css.14.dr	false		high
https://www.dhhs.nh.gov/foryou/adults.htmm	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://res.getmicrosoftkey.com/api/redemptionevents	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://tasks.office.com	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://www.nh.gov/covid19	index[1].htm.14.dr	false		high
https://officeci.azurewebsites.net/api/	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false	Avira URL Cloud: safe	unknown
https://www.dhhs.nh.gov/about/index.htmies.htm	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://www.dhhs.nh.gov/foryou/adults.htm	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://dashboard.nh.gov/#/site/DHHS/views/COVID-19LrgMaps/MAPCumulativeLrg.pdf	covid19[1].htm0.14.dr	false		high
https://store.office.cn/addinstemplate	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.servicelink.nh.gov/	adults[1].htm.14.dr, disabilities[1].htm.14.dr	false		high
https://wus2-000.pagecontentsync.	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.app-support.nh.gov/nhgov-fonts/trirong/trirong-bold-italic.woff)	lg-screen[1].css.14.dr	false		high
https://www.dhhs.nh.gov	covid19[1].htm0.14.dr	false		high
https://nam.learningtools.onenote.com/learningtoolsapi/v2.0/getfreeformspeech	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://www.dhhs.nh.gov/foryou/women.htmmr	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://www.odwebp.svc.ms	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://api.powerbi.com/v1.0/myorg/groups	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://web.microsoftstream.com/video/	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://www.dhhs.nh.gov/foryou/women.htm	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://www.doj.nh.gov/covid-19-scams/	covid19[1].htm0.14.dr	false		high
https://graph.windows.net	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://www.nh.gov	adults[1].htm.14.dr, index[1].htm.14.dr	false		high
https://dashboard.nh.gov/#/site/DHHS/views/COVID19InteractiveMapDashboard/Town-ActiveCases-Data.csv?	covid19[1].htm0.14.dr	false		high
https://www.dhhs.nh.gov/index.htmjNew	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://pf.directory.live.com/profile/mine/System.ShortCircuitProfile.json	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://www.dhhs.nh.gov/foryou/families.htm	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://www.hhs.gov/sites/default/files/ocr-bulletin-3-28-20.pdf	covid19[1].htm0.14.dr	false		high
https://www.dhhs.nh.gov/dphs/cdcs/covid19/crisis-soc-medical-ad-comm.htm	covid19[1].htm0.14.dr	false		high
https://www.dhhs.nh.gov/index.htmilities.htmd	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://webdir.online.lync.com/autodiscover/autodiscoverservice.svc/root/	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
http://weather.service.msn.com/data.aspx	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-bold.woff)	lg-screen[1].css.14.dr	false		high
https://word.uservoice.com/forums/304948-word-for-ipad-iphone-ios	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://www.dhhs.nh.gov/#skip/www.dhhs.nh.gov/favicon.ico	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://autodiscover-s.outlook.com/autodiscover/autodiscover.xml	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://clients.config.office.net/user/v1.0/ios	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://www.dhhs.nh.gov/foryou/families.htmx	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://o365auditrealtimeingestion.manage.office.com	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://outlook.office365.com/api/v1.0/me/Activities	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://clients.config.office.net/user/v1.0/android/policies	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
http://www.amazon.com/	msapplication.xml.13.dr	false		high
https://entitlement.diagnostics.office.com	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://pf.directory.live.com/profile/mine/WLX.Profiles.IC.json	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://www.who.int/health-topics/coronavirus	covid19[1].htm0.14.dr	false		high
http://www.twitter.com/	msapplication.xml5.13.dr	false		high
https://outlook.office.com/	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://storage.live.com/clientlogs/uploadlocation	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://www.nh.gov/file-format/pdf.htm	covid19[1].htm0.14.dr	false		high
https://www.dhhs.nh.gov/index.htmilities.htm	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://www.nh.gov/index.htm	covid19[1].htm0.14.dr	false		high
https://www.nh.gov/covid19/resources-guidance/vaccination-planning.htm	~WRS{B268D7D1-175E-4774-8B62-5FC8DD9A2BB9}.tmp.0.dr, document.xml	false		high
https://www.dhhs.nh.go	{2B1065E6-70B6-11EB-90E5-ECF4BB570DC9}.dat.13.dr	false	Avira URL Cloud: safe	unknown
http://www.dynamicdrive.com)	textsizer[1].js.14.dr	false	Avira URL Cloud: safe	low
https://graph.windows.net/	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://devnull.onenote.com	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://www.dhhs.nh.gov/	~DFE0551548F1A31EE1.TMP.13.dr	false		high
http://coveringnewhampshire.org/	index[1].htm.14.dr	false	Avira URL Cloud: safe	unknown
https://www.dhhs.nh.gov/about/index.htm	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://messaging.office.com/	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
http://txkang.com	textsizer[1].js.14.dr	false	Avira URL Cloud: safe	unknown
https://www.dhhs.nh.gov/foryou/women.htmm	~DFE0551548F1A31EE1.TMP.13.dr	false		high
https://insertmedia.bing.office.net/images/officeonlinecontent/browse?cp=Bing	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://skyapi.live.net/Activity/	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.nh.gov/covid19/X	~DFE0551548F1A31EE1.TMP.13.dr	false		high
http://ekallevig.com/jshowoff	jquery.jshowoff.min[1].js.14.dr	false	Avira URL Cloud: safe	unknown
http://www.nytimes.com/	msapplication.xml3.13.dr	false		high
https://api.cortana.ai	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.nh.gov/covid19/index.htm	index[1].htm.14.dr	false		high
https://visio.uservoice.com/forums/368202-visio-on-devices	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://staging.cortana.ai	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.nhcarepath.dhhs.nh.gov/	index[1].htm.14.dr	false		high
https://onedrive.live.com/embed?	ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D.0.dr	false		high
https://www.dhhs.nh.gov/favicon.ico	imagestore.dat.14.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
199.192.8.2	unknown	United States		19713	STATE-OF-NH-USAUS	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	353581
Start date:	16.02.2021
Start time:	16:20:44
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 7m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	COVID19open_closedPodsVACCINE_LETTER2B.docx
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Run name:	Potential for more IOCs and behavior
Number of analysed new started processes analysed:	30
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.winDOCX@4/132@4/2
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .docx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Browse link: http://www.dhhs.nh.gov/ Scroll down Close Viewer Browsing link: https://www.nh.gov/covid19 Browsing link: https://www.dhhs.nh.gov/#skip Browsing link: https://www.dhhs.nh.gov/foryou/families.htm Browsing link: https://www.dhhs.nh.gov/foryou/women.htm Browsing link: https://www.dhhs.nh.gov/foryou/teens.htm Browsing link: https://www.dhhs.nh.gov/foryou/adults.htm Browsing link: https://www.dhhs.nh.gov/foryou/seniors.htm Browsing link: https://www.dhhs.nh.gov/foryou/disabilities.htm Browsing link: https://www.dhhs.nh.gov/#translate Browsing link: https://www.dhhs.nh.gov/index.htm Browsing link: https://www.dhhs.nh.gov/about/index.htm
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, ielowutil.exe, WMIADAP.exe, backgroundTaskHost.exe, SgrmBroker.exe, conhost.exe, svchost.exe, wuapihost.exe Excluded IPs from analysis (whitelisted): 51.104.139.180, 204.79.197.200, 13.107.21.200, 93.184.220.29, 168.61.161.212, 104.43.193.48, 23.211.6.115, 104.43.139.144, 13.88.21.125, 52.109.32.63, 52.109.76.35, 52.109.88.40, 184.30.20.56, 51.104.144.132, 88.221.62.148, 142.250.180.142, 216.58.209.42, 142.250.180.163, 2.20.142.210, 2.20.142.209, 51.103.5.186, 92.122.213.194, 92.122.213.247, 152.199.19.161, 52.155.217.156, 20.54.26.129 Excluded domains from analysis (whitelisted): arc.msn.com.nsatc.net, cs9.wac.phicdn.net, fs-wildcard.microsoft.com.edgekey.net, e11290.dspg.akamaiedge.net, ocsp.digicert.com, www-bing-com.dual-a-0001.a-msedge.net, audownload.windowsupdate.nsatc.net, officeclient.microsoft.com, watson.telemetry.microsoft.com, www.gstatic.com, au-bg-shim.trafficmanager.net, www.bing.com, fs.microsoft.com, dual-a-0001.a-msedge.net, displaycatalog.md.mp.microsoft.com.akadns.net, ris-prod.trafficmanager.net, skypedataprdcolcus17.cloudapp.net, skypedataprdcolcus16.cloudapp.net, skypedataprdcolcus15.cloudapp.net, ris.api.iris.microsoft.com, www3.l.google.com, store-images.s-microsoft.com, translate.googleapis.com, blobcollector.events.data.trafficmanager.net, europe.configsvc1.live.com.akadns.net, cs9.wpc.v0cdn.net, au.download.windowsupdate.com.edgesuite.net, prod-w.nexus.live.com.akadns.net, store-images.s-microsoft.com-c.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, arc.msn.com, iecvlist.microsoft.com, db5eap.displaycatalog.md.mp.microsoft.com.akadns.net, e12564.dspb.akamaiedge.net, wns.notify.trafficmanager.net, go.microsoft.com, nexus.officeapps.live.com, displaycatalog.mp.microsoft.com, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, displaycatalog-europeeap.md.mp.microsoft.com.akadns.net, client.wns.windows.com, ie9comview.vo.msecnd.net, prod.configsvc1.live.com.akadns.net, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, a767.dscg3.akamai.net, a-0001.a-afdentry.net.trafficmanager.net, config.officeapps.live.com, go.microsoft.com.edgekey.net, translate.google.com, skypedataprdcolwus15.cloudapp.net, vip2-par02p.wns.notify.trafficmanager.net Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtDeviceIoControlFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
9e10692f1b7f78228b2d4e424db3a98c	ORDER FRD91PM7.xlsx	Get hash	malicious	Browse	199.192.8.2
	CHT International.exe	Get hash	malicious	Browse	199.192.8.2
	SecuriteInfo.com.Generic.mg.44669e0ff064dfc9.dll	Get hash	malicious	Browse	199.192.8.2
	SecuriteInfo.com.Generic.mg.3964ec2fe493ed56.dll	Get hash	malicious	Browse	199.192.8.2
	SecuriteInfo.com.Generic.mg.f76b81b0397ae313.dll	Get hash	malicious	Browse	199.192.8.2
	SecuriteInfo.com.Generic.mg.f77e7bd43f365593.dll	Get hash	malicious	Browse	199.192.8.2
	NJPcHPuRcG.dll	Get hash	malicious	Browse	199.192.8.2
	Ne6A4k8vK6.dll	Get hash	malicious	Browse	199.192.8.2
	13xakh1PtD.dll	Get hash	malicious	Browse	199.192.8.2
	DUcKsYsyX0.dll	Get hash	malicious	Browse	199.192.8.2
	7eec14e7cec4dc93fbf53e08998b2340.exe	Get hash	malicious	Browse	199.192.8.2
	RI51uAIUyL.dll	Get hash	malicious	Browse	199.192.8.2
	L257MJZ0TP.htm	Get hash	malicious	Browse	199.192.8.2
	brewin-02-02-21 Statement_763108amFtZXMubXV0aW1lcg==.htm	Get hash	malicious	Browse	199.192.8.2
	658908343Bel.html	Get hash	malicious	Browse	199.192.8.2
	P178979.htm	Get hash	malicious	Browse	199.192.8.2
	03728d6617cd13b19bd69625f7ead202.exe	Get hash	malicious	Browse	199.192.8.2
	PO 20191003.exe	Get hash	malicious	Browse	199.192.8.2
	SecuriteInfo.com.Trojan.GenericKD.36134277.347.exe	Get hash	malicious	Browse	199.192.8.2
	SecuriteInfo.com.Trojan.PWS.Siggen2.61222.12968.exe	Get hash	malicious	Browse	199.192.8.2
37f463bf4616ecd445d4a1937da06e19	MV CHEN GLORY 1 Q88.DOC.exe	Get hash	malicious	Browse	199.192.8.2
	quotation professional pricelist for 2021 - 1009 232356 0000 565.exe	Get hash	malicious	Browse	199.192.8.2
	quotation professional pricelist for 2021 - 1009 232356 0000 565.exe	Get hash	malicious	Browse	199.192.8.2
	Kreuzmayr_PO_22656_65564345565643ETD,pdf.exe	Get hash	malicious	Browse	199.192.8.2
	DHL_Shipment_Notofication#554334.exe	Get hash	malicious	Browse	199.192.8.2
	jYHhaKx7OH.exe	Get hash	malicious	Browse	199.192.8.2
	DHL_6368638172 receipt document,pdf.exe	Get hash	malicious	Browse	199.192.8.2
	Facturas de datos bancarios FA00001120.pdf.exe	Get hash	malicious	Browse	199.192.8.2
	TR8IqBxed5.exe	Get hash	malicious	Browse	199.192.8.2
	CorporateProspal.exe	Get hash	malicious	Browse	199.192.8.2
	EmployeeComplaintReport.exe	Get hash	malicious	Browse	199.192.8.2
	necessary (47).xls	Get hash	malicious	Browse	199.192.8.2
	ORDER FRD91PM7.xlsx	Get hash	malicious	Browse	199.192.8.2
	D200821ROB.ppt	Get hash	malicious	Browse	199.192.8.2
	significant (92).xls	Get hash	malicious	Browse	199.192.8.2
	necessary (47).xls	Get hash	malicious	Browse	199.192.8.2
	obligations (84).xls	Get hash	malicious	Browse	199.192.8.2
	DHL_6368638172 documento de recibo,pdf.exe	Get hash	malicious	Browse	199.192.8.2
	HyperLinkDemo.exe	Get hash	malicious	Browse	199.192.8.2
	DOCUMENT (63).xls	Get hash	malicious	Browse	199.192.8.2

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{2B1065E4-70B6-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	33368
Entropy (8bit):	1.868265279767621
Encrypted:	false
SSDEEP:	96:rCZ1Zp2+WCGdtCCbfC7/oKMChgqCVmQCHgqCJLtC1/363:rCZ1Zp2+WCCtCSfC7VMC9CtCjCFtC1y3
MD5:	42A0AB8DE54E258342487B9218ADE23E
SHA1:	5984C2CD478753F749287760ADED00EAF91D8E9E
SHA-256:	BFB6FF9519CA36127D57DD9D01E43CD8BD1BE7FECE6B4C347CD6C2984FC05E85
SHA-512:	ADEE2D130E84EE061D85E42643B169C723BB0C5F04F599155EFA8FDCAD223965F5B6A8D66EE5C1FF6A38AB216A8ED98B5342FC0A99C082DC0FE8C3FCD79D09BE
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{2B1065E6-70B6-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	159906
Entropy (8bit):	2.3997698519945723
Encrypted:	false
SSDEEP:	384:rdxPX+eeiWRdZkDTjA302AG2o0vAPW92iul9GpAt1rFLo2AM2cKsu41KGlIpoPMH:UukEdduo
MD5:	329087A4C531477131744CEBE0328D8F
SHA1:	62547710FE4E15C1DA6421066ABE3BF2B0B3F915
SHA-256:	EDACB9F3D6A803566D4229DFA709321AE6F3037E8FFF1C514BDD5A2BE491AC08
SHA-512:	53124A2D9740CFE86052760F76538350F49F5814EAE390F8C56EA10CCD0969AD3CAF923F07E7F1A5FA4A7B397BAE30FD36EED1D040DFD622D181BB07851B33B7
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{43C50248-70B6-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5632254934354755
Encrypted:	false
SSDEEP:	48:IwjGcpr2GwpayG4pQOGrapbS/GQpKqG7HpROTGIpG:rZZuQC6ABSpAFTqA
MD5:	6921D435197A19C623F97E1B0001CCCC
SHA1:	19516D3DE53FC4098F6964480AA828CA5D9FF8BD
SHA-256:	4A6BACF4C66F52429392F06989BAE695CEE45A6DFF4CC293C3C21BDADB882302
SHA-512:	4218F15C68896CB49153C643BD4C43B2706E28B48EA7444F88D5602A9804AE9768B3F1FF6C750702A1976E8619F7421A2B7CD9D1618DF57C9CA5DB8FF546DE26
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	657
Entropy (8bit):	5.04756477364833
Encrypted:	false
SSDEEP:	12:TMHdNMNxOEu+g+JnWimI002EtM3MHdNMNxOEu+g+JnWimI00ONVbkEtMb:2d6NxO5+g+JSZHKd6NxO5+g+JSZ7Qb
MD5:	E34B5BD82676E71C134828C22A67B1C5
SHA1:	C6150EFDDE584BF3B6F4DA4F1E140B73E44B445E
SHA-256:	157619DC8B11D67F57CF6B7022709273EEC61B96F1D422B605CE935644EB13AC
SHA-512:	1B87CCA74026B7F344DEAE3721A68F111298B7781A99C0713873743C178ABD6BAC320227E339862354DC6E253AEAA40B50CE553E567141C31ED41506624E8CDE
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x056a6aad,0x01d704c3</date><accdate>0x056a6aad,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0x056a6aad,0x01d704c3</date><accdate>0x056a6aad,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.100875853335666
Encrypted:	false
SSDEEP:	12:TMHdNMNxe2kk+y+JnWimI002EtM3MHdNMNxe2kk+O0nWimI00ONkak6EtMb:2d6NxrSdJSZHKd6NxrSO0SZ72a7b
MD5:	4A6660DCFB060AC3733117D0DC240B1C
SHA1:	33F89FEB0CEE025D3B8F787D1169A84A33A43271
SHA-256:	3F09E5FD3B9EF3F99FC508AB2E70DEB052014960CBE67322A135E230EF729EC2
SHA-512:	BA9EAEC4149C08B1175C0A60D660291C462519AC668749E539571E0A6EA4D7D75D6DC92E92A71AA3A758489C24F3AC2CF11DA432709A84A5F802B00A6DE2E259
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.amazon.com/"/><date>0x054909cd,0x01d704c3</date><accdate>0x054909cd,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.amazon.com/"/><date>0x054909cd,0x01d704c3</date><accdate>0x054b6c37,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Amazon.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	663
Entropy (8bit):	5.077923439738975
Encrypted:	false
SSDEEP:	12:TMHdNMNxvLbnWimI002EtM3MHdNMNxvLbnWimI00ONmZEtMb:2d6Nxv3SZHKd6Nxv3SZ7Ub
MD5:	605D31B35D0B2A3466232CA81A01B2AA
SHA1:	3470F7586C02C8EC4A5D77A0694A7BBC7BFDB495
SHA-256:	22389A004CD7639C25973D018C1D7659E4A55BF2BCD8A7BD522560B7B6DF9623
SHA-512:	A6E40C2016B7390ADA7A1895BA5F03037371B096AA92DC84D2604C52619A65EA1F75228B829C841F79C6BD4DF55FE2F4A044064D1AFA2770AA6F1126815EA8F4
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.wikipedia.com/"/><date>0x056ccd2a,0x01d704c3</date><accdate>0x056ccd2a,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.wikipedia.com/"/><date>0x056ccd2a,0x01d704c3</date><accdate>0x056ccd2a,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Wikipedia.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	648
Entropy (8bit):	5.05344037103215
Encrypted:	false
SSDEEP:	12:TMHdNMNxiIcRc0nWimI002EtM3MHdNMNxiIcRc0nWimI00ONd5EtMb:2d6NxhOVSZHKd6NxhOVSZ7njb
MD5:	0DFA09664BD868B28A94D6A188BA8774
SHA1:	EAABE783B4724D93AD60B4900F34C77741D5EE51
SHA-256:	2CFBA8BD6DA410E72A97685D6EB6F1D97D8CBE2F981B804FEB74A182CD46B181
SHA-512:	D2FC7A8E8027CBCC8980E52995E17CCA518B3798AAD021844820932ADAE61A95627D03C5E99A1D6C2D76264E1229E55CBDBD949B813A82FA4066A7123213672F
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.live.com/"/><date>0x0560e13e,0x01d704c3</date><accdate>0x0560e13e,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.live.com/"/><date>0x0560e13e,0x01d704c3</date><accdate>0x0560e13e,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Live.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	657
Entropy (8bit):	5.115787784840534
Encrypted:	false
SSDEEP:	12:TMHdNMNxhGwpnWimI002EtM3MHdNMNxhGwpnWimI00ON8K075EtMb:2d6NxQgSZHKd6NxQgSZ7uKajb
MD5:	CFB25D44F764B3F971411044DD884F63
SHA1:	DD3CF0D65A13D61E195FC23902A3E75F884E2846
SHA-256:	CE9AE1851BB182A0B9794D4B0D0344041E07743630BBB164F515790468EB3EF1
SHA-512:	D6576E879FD002CB19226F986B687CDD23AF3896FA6EE0D6AA8DD86E226DDC03B7265473541D730083ABEA29FEC81DDBD7FE6CD550021E131705439A46C4C257
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x056f2f60,0x01d704c3</date><accdate>0x056f2f60,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0x056f2f60,0x01d704c3</date><accdate>0x056f2f60,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.04855201827873
Encrypted:	false
SSDEEP:	12:TMHdNMNx0nu+g+JnWimI002EtM3MHdNMNx0nu+g+JnWimI00ONxEtMb:2d6Nx0u+g+JSZHKd6Nx0u+g+JSZ7Vb
MD5:	511996E48300E7E2B9B45DDCF6FFF08F
SHA1:	977A1C3022756BC5CF26F8BB467DB41DCD0799CC
SHA-256:	70C98F121061784D2918820FFFA82601AB9588C7CCE766FE2340C66E4EA1A69F
SHA-512:	3EBB4E4743BC06429E6CA8532F2EE9DFEDA933AE5720F360B20310684D035569FC39DD8A54D2D8EDE2F80ABD6586C4DA5BE5D96055FB0CA5483AC6FC80E50101
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.reddit.com/"/><date>0x056a6aad,0x01d704c3</date><accdate>0x056a6aad,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.reddit.com/"/><date>0x056a6aad,0x01d704c3</date><accdate>0x056a6aad,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Reddit.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	657
Entropy (8bit):	5.133466678209735
Encrypted:	false
SSDEEP:	12:TMHdNMNxx5V8VknWimI002EtM3MHdNMNxx5V8VknWimI00ON6Kq5EtMb:2d6NxjSZHKd6NxjSZ7ub
MD5:	C33903FF0BF413B9EE18E3B3B6F57ECA
SHA1:	9CB1370452503A7DCAC02BD06AE2F3E1BB12EB67
SHA-256:	C4EF70ACBB336326E99005488F49200B1DB38D5A2EF1D109D7ED0D737544EE49
SHA-512:	F966AB14C9482922459CD5C30F257BB8EF042E841F0D84C19595F497B51511DCF91A2E391D178EA9E9502B36A98F175B021ECA648F698AC85912B56EE04E5284
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.nytimes.com/"/><date>0x05680893,0x01d704c3</date><accdate>0x05680893,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.nytimes.com/"/><date>0x05680893,0x01d704c3</date><accdate>0x05680893,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\NYTimes.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	660
Entropy (8bit):	5.063953523101619
Encrypted:	false
SSDEEP:	12:TMHdNMNxchnWimI002EtM3MHdNMNxchnWimI00ONVEtMb:2d6NxoSZHKd6NxoSZ71b
MD5:	4A4B08B27CA317B7FF04E4EFD694D224
SHA1:	B8918B5C097552775663EEBD84E8EF3369E23782
SHA-256:	7C33DE9B7ED2F4EE76A453FB5D9C5F3839A6DE1392900B5B617DF0BA14A4378B
SHA-512:	43C5F7F7747C48746FAF81CB22B0E0C595CD3626197A52A95B666C38462C4CE0CBEEC99018AE986FFE50D79FA664FC50A15A36B3156D62AE535C854234F913F2
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x055030f8,0x01d704c3</date><accdate>0x055030f8,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0x055030f8,0x01d704c3</date><accdate>0x055030f8,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.042926777601526
Encrypted:	false
SSDEEP:	12:TMHdNMNxfnhnWimI002EtM3MHdNMNxfnLnWimI00ONe5EtMb:2d6NxJSZHKd6NxDSZ7Ejb
MD5:	90CF02B24D3EFB9F40B38DA560B2C4B0
SHA1:	40B94BE4BAB87740ECF573F2F80263674DFB3807
SHA-256:	06ACC1E729FF06353F6D48415543BE8C33235E4DC828C5420A32B02146B57AC9
SHA-512:	9BB3FB2CCA65694FA9BA414CAEE350C7B138C14D9CB694422EC5BA29119484B873029E08A1FFD0F119BE62D9A78E66C3CEA2068BA9F629BD14E94BA219F9E549
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.google.com/"/><date>0x055030f8,0x01d704c3</date><accdate>0x055030f8,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.google.com/"/><date>0x055030f8,0x01d704c3</date><accdate>0x055e7f0c,0x01d704c3</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Google.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	3860
Entropy (8bit):	5.934351382476207
Encrypted:	false
SSDEEP:	48:4vla4sBnR9IO65JbMY715WtkSavlaZp0whXeBkCoW5nUbcmZvpy24ZZuk78+zAnp:bt6bYY7X9O0wVjcyvpx4GW8oAnUyu5od
MD5:	997FD32E31F6C6D35B962DE5F07771E7
SHA1:	FD6D04AB5DA7986EE49EC53D3FAA7B3D8B9877DD
SHA-256:	A4A748973F701AB3472497F7F4DB7C641217BB6E727A2E01A78A939023002D30
SHA-512:	6A5F0B5F615F6890731B8F1BF85F1A5B79B3BAD1931850F5B4FA0FFBDB7187BF8028A0220B0B7134584A8C1123CA78A41707856569164F7AFA20E3852DA7D8B3
Malicious:	false
Reputation:	low
Preview:	#.h.t.t.p.s.:././.w.w.w...d.h.h.s...n.h...g.o.v./.f.a.v.i.c.o.n...i.c.o.~.................h.......(....... ...........@...........................R...{....Is.B(B.....B}R.........{.s.s...kUc.)m...41.....1Ec.Ru{..........e..J.........)..AR.)}k.Z.k.J]R.....!}...U..c...Z...B]s.........B...),J.....9}..)01.JIc.)as..as.s.......9q{.R....u..k.s.Z....m{.!8Z.!Ms..<c.....!.{..Y..Rik.cq..9uc.{............Ak.c...k.{.k............u...e..Z.c.94J......().)ec.....!y......R.s.....s....M{.c...J...Juk.9}s..]..s...{....i..1u..............)AZ......Us.!]..k...c.c.R...Z....$1..M...Mk..]{.c.......{...c.s.Zys.J.{..............U{.!Ek.!U{.k...!ek.1Ys..u..)e......J]{.Jms.c...!,).....!<c..a...}..c.k.By..Zu..............10J..Q{.)Ic..a...Y...Y{.)Qs.R...k...!.s.!i..s.s.)u..Ba{.R.k..................Y...e...i..JQc.)a{.)}s.........)u..1m..Z.k.s...s................................Ik..Q{..]..!Qs.JEc..]{..q...e......c...Jqs.Z.k.cu..c.............................................................................................

C:\Users\user\AppData\Local\Microsoft\Office\16.0\WebServiceCache\AllUsers\officeclient.microsoft.com\ADCB58F4-D1C1-44B4-8E35-2D0947F07A2D Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	XML 1.0 document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	132453
Entropy (8bit):	5.3757764325974575
Encrypted:	false
SSDEEP:	1536:OcQceNquBXA3gBw+pQ9DQW+zA9H34ZldpKWXboOilXNErLKzEh:8DQ9DQW+z0XiT
MD5:	203CCAB7FA4B3C142E948D7BFCB56DC5
SHA1:	0C657B6B569BE54CC5F28AA1941B48376006C146
SHA-256:	78CAEC1ABD673D53059FFD502352BF7003B61D9BCD7163312C74EA97CAD8A9C5
SHA-512:	4DF1CDD0A2823C88FBD6242F78731C91DF6FA588E8DF6E98795DC305D46608FC06DF557E4E4CE4CE7A1462BACEB153D39AFA6DC6F1FFA6F64470E19BD0506D18
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<o:OfficeConfig xmlns:o="urn:schemas-microsoft-com:office:office">.. <o:services o:GenerationTime="2021-02-16T15:21:38">.. Build: 16.0.13810.30527-->.. <o:default>.. <o:ticket o:headerName="Authorization" o:headerValue="{}" />.. </o:default>.. <o:service o:name="Research">.. <o:url>https://rr.office.microsoft.com/research/query.asmx</o:url>.. </o:service>.. <o:service o:name="ORedir">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ORedirSSL">.. <o:url>https://o15.officeredir.microsoft.com/r</o:url>.. </o:service>.. <o:service o:name="ClViewClientHelpId">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. </o:service>.. <o:service o:name="ClViewClientHome">.. <o:url>https://[MAX.BaseHost]/client/results</o:url>.. </o:service>.. <o:service o:name="ClViewClientTemplate">.. <o:url>https://ocsa.office.microsoft.com/client/15/help/template</o:url>.. </o:service>.. <o:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.MSO\698A8F31.png Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	PNG image data, 293 x 295, 1-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	6897
Entropy (8bit):	7.961710048383538
Encrypted:	false
SSDEEP:	192:C/va+mFRJNG78dpYUIMa3LXA53yBndb4h8HuyHAcD:C0FRJNtdpzUbXA530bw0uBE
MD5:	DA0E31545E3B38505B7318C64BDEC26B
SHA1:	48C54C0AA75AAB40686252301EA47FAB74B1190A
SHA-256:	EBC4D461F08B5EFAF6A44B314B4DDBA9025D6D6FB6614FED17A5A03010C68330
SHA-512:	A6257BD4DCAA72AC63DF003A2E1FBB2048DBB0EE7A894D93D238BFC7CF545757D8D0B96C840B9F7D3DA49F73408938843AF172E73CC103E117B81EAE244B150F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...%...'......a.?....PLTE.............bKGD....H....pHYs..........+......IDATh.}.}t..u...,.].P.IM7.G..{.T...$K.....{v.....#..4l.u .>.a~<.E{...q.I....v...R.lH......>.9.:k......cW...H...w...._.3G..0.y..}..w.}O.-......l.V.V..J._N....$..b...M.....w.7.q..r..S.=....J..."..y..(.2..oS..x;.... -D`...8.0..RE...0.$..IG..nOa..r..o?6v..T.0R.g.)@..:..].&M....P...8T...v..Y.......L..oG.I..`....:.=...@M.:...~k.. "....j..dw....?..1 r+.DZ.....D.$..[)[23.H.....<..hn..F.G.e!.\e...5.....xE...Bg....T..j...NY...,Ch...k.....V!.&.k.....t.$Lsy[..).)ii+e.".$...Fox).....Z...d8..vF.......kT....B....\...v3q..rU.v".eYy..M...d.b....7.9.?n.n...$...."i^m....F..?........(.hM..p..f....^..w.a...M.d....>D...n.<....M.+..jR....%.0......%..T...!>.y..NR.)&...V...G?A.yY0..F..qxU].......sq.6.6R6..V...F\|.\`..F..t...$c..N.#..h.TQ....... ..3..@..g...QYs.1.r.>....7....TQ.R.Q....b....{$...5U.(.'...2......).:...SL...,.I...p.Q......8..NQ.....6.(....bC..1..N.}..O,.`+.R..`Q...4W6P.2..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{684EC546-5172-4E4C-A638-EBF4CDF1FB1E}.tmp Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	0.05390218305374581
Encrypted:	false
SSDEEP:	3:ol3lYdn:4Wn
MD5:	5D4D94EE7E06BBB0AF9584119797B23A
SHA1:	DBB111419C704F116EFA8E72471DD83E86E49677
SHA-256:	4826C0D860AF884D3343CA6460B0006A7A2CE7DBCCC4D743208585D997CC5FD1
SHA-512:	95F83AE84CAFCCED5EAF504546725C34D5F9710E5CA2D11761486970F2FBECCB25F9CF50BBFC272BD75E1A66A18B7783F09E1C1454AFDA519624BC2BB2F28BA4
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{9766F8FA-474A-4D26-9B90-1E4FEFAFF644}.tmp Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:X:X
MD5:	32649384730B2D61C9E79D46DE589115
SHA1:	053D8D6CEEBA9453C97D0EE5374DB863E6F77AD4
SHA-256:	E545D395BB3FD971F91BF9A2B6722831DF704EFAE6C1AA9DA0989ED0970B77BB
SHA-512:	A4944ADFCB670ECD1A320FF126E7DBC7FC8CC4D5E73696D43C404E1C9BB5F228CF8A6EC1E9B1820709AD6D4D28093B7020B1B2578FDBC764287F86F888C07D9C
Malicious:	false
Preview:	..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\Content.Word\~WRS{B268D7D1-175E-4774-8B62-5FC8DD9A2BB9}.tmp Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	8648
Entropy (8bit):	3.9088978163461343
Encrypted:	false
SSDEEP:	96:v8DY16W2/Zx7P5154V1lGcAxW5aGpphPqWoFIA0y9Y4UnPwl/lBEM8m/+:QRv7e7lG/vGpp34UnYFHzm
MD5:	90D64E86C16A1DE41068701C702A394A
SHA1:	294170381818D2CE67FB86B25F0AE1BD3D237A78
SHA-256:	541B4E4DE318973D77F071E3869B4A3FE52993B06CB911EF1A7DE2ABE9E1782E
SHA-512:	28551CF3DFFB31FEA858D99F224897FF93E6D071F633B0529596C1598E9321D49A673C25F71EDA40FEE51F02DCFF0BAF0F3C65C4ECDFEF65CCF08910F24D98E1
Malicious:	false
Preview:	../.....L.o.r.i. .A... .S.h.i.b.i.n.e.t.t.e. .C.o.m.m.i.s.s.i.o.n.e.r.....L.i.s.a. .M... .M.o.r.r.i.s. .D.i.r.e.c.t.o.r.........F.e.b.r.u.a.r.y. .1.5.,. .2.0.2.1.....S.T.A.T.E. .O.F. .N.E.W. .H.A.M.P.S.H.I.R.E. .D.E.P.A.R.T.M.E.N.T. .O.F. .H.E.A.L.T.H. .A.N.D. .H.U.M.A.N. .S.E.R.V.I.C.E.S...D.I.V.I.S.I.O.N. .O.F. .P.U.B.L.I.C. .H.E.A.L.T.H. .S.E.R.V.I.C.E.S...B.U.R.E.A.U. .O.F. .I.N.F.E.C.T.I.O.U.S. .D.I.S.E.A.S.E. .C.O.N.T.R.O.L. .I.M.M.U.N.I.Z.A.T.I.O.N. .P.R.O.G.R.A.M...2.9. .H.A.Z.E.N. .D.R.I.V.E.,. ...................H...J...z...\|...~...........$...j................................................................................................................................................................................................................................$.............]...^...a$......$..........dc.......]...^...a$.............^.............d......dx.......]...^.d.`.............d.]...^.d.gd@................$..........d....]...^...a$..............$..........d....]...^

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\400x25officialsite[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 400 x 25
Category:	downloaded
Size (bytes):	3455
Entropy (8bit):	7.723531087767753
Encrypted:	false
SSDEEP:	48:5nlnNANz4PIt65pH87mCYGZG9LFLBxYkjshyV7t0A28qK4JldIQPueht:5n1Yr4pH8KCYGqFLQkjTJrxehPzj
MD5:	C242FCDA1B5DAA99D53BAD09E619D169
SHA1:	36C3FA7B2EFDD718550348B7E3E445782C912341
SHA-256:	90E1AE9F18C3A094D16CC4ED11AC93E3561ABB41308B0FEB0B30C166DC15D130
SHA-512:	995BD2A3B5DB4B2FF05D6796BBF1ED9014ED501E58BD118E8F4886F2EC5FF827B174E365D7D36CEE5A82120693C69B8DF1D709D93EDE78B8D3F0341AE31CD6A3
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/400x25officialsite.gif
Preview:	GIF89a.......?Ts...........;Pp........^p.BWu{.......bs.w.......iz....................hy....;Qpu........~..k{....:PoPc.L`\|Ob.I]{M`}\n....G[yH\y=Rq.........Zl.iy....Uh.........................[m....Wi....y........................gx.K_\|...........[m..................Xk....>SrMa}Sf..............m}.J^{I]z..............r..Wj.........z..{..`r.....Pd.......<Rq......@Uts.....q..du....AVt..................v.....j{.............ct........Qd.Vi.t........Tg.n~.Yk._p.F[xo.................CXvfw.EYw.........}......p..bt....fv.ar.Tf.]o.l\|.t.............p..x..........................Nb~.....\|..................m}.........9Oo.................DYw......ev...........................Re..............FZx........._q........................................!.......,...............H......*\....#J.H....3j.... C..I...(S.\...0c.I...8s.L. ..............xT........x..i..;.j.....`+..pA$....j...C.p..e..... ...Ao......-A.D`.'H.@.....)..@Hb`.+....X....[\...@....].....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\a-large[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 16 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1105
Entropy (8bit):	6.192290130492558
Encrypted:	false
SSDEEP:	24:UKr1he91WwylZ82lYSqMHYPNV+W2T3byJCpkrsGn8UdY:dqQinNuI0KJpQnZ
MD5:	664946890B46D3F72816050F1600FAD0
SHA1:	21D7E29B5B89E50FA6AE15FF2A903F947FEC4DEF
SHA-256:	A631A85CACBB5FA0C7F80F957EF2B327AE912324915B4D2B8CDE3A3F903760E0
SHA-512:	13CA53EEA65B3290F7C513DA5FF92D5168887F1092AA0BFABE951C772CDE72C34E38E07B5E1312D5866D58CA9EFEE6D1C2653B2B0FCDBADE62CAD8B043C5C1B7
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/graphics/a-large.png
Preview:	.PNG........IHDR................$....tEXtSoftware.Adobe ImageReadyq.e<...iiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:DocumentID="xmp.did:438258F0C81811E4AEFFBD7DB352EAB2" xmpMM:InstanceID="xmp.iid:438258EFC81811E4AEFFBD7DB352EAB2" xmp:CreatorTool="Adobe Photoshop CS3 Windows"> <xmpMM:DerivedFrom stRef:instanceID="uuid:7392920C0151DE118F1C842F631D718C" stRef:documentID="uuid:156814919CEBDC11A2CFD38C7E53D8A9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...6...~IDATx.b...?.%..............f......b .....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\arrow_ltblue[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 11 x 11
Category:	downloaded
Size (bytes):	57
Entropy (8bit):	4.359205803638424
Encrypted:	false
SSDEEP:	3:Cd/lfl02fLt+En:OO24En
MD5:	481110EE043514D98BD1293AF5C9AB25
SHA1:	3E578D2A402635332D857D4A5C3FD007A4A9AEEB
SHA-256:	5A25D796794B161D9F544F007A2BF016CF724D9EA39E3DF0EA704CCC3768843E
SHA-512:	270EC8E231006A3BC1AECD0BDB9AACD290D5F84198899FAB75E99E40F550EF67D525B8911ABC22BD66FDB76225162D4CE2C2D1CBFF7C12F5AC6F14A1F14049A3
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/arrow_ltblue.gif
Preview:	GIF89a..........3f.!.......,........@............0.....;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\background-hi-lite[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 34 x 400, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	384
Entropy (8bit):	6.006467429758594
Encrypted:	false
SSDEEP:	6:6v/lhPKRxWnDsin14xbG6Qt39OdUMfLNilody3m9n3c8/N/bp:6v/7SRxRi1ki6QF1Mhin29n3c8/N/1
MD5:	719E71300729BDA463838DA2B60552D5
SHA1:	7636C163A0D1EE130E07ABD02CAD0918BBC3E1C4
SHA-256:	A24D2929B0151300C46BCF87D1AF44B08166DDCA0F5BAE7AF0B818B4684245F7
SHA-512:	B4E62CF1AEDBD591558B8059966167DD097D794F97F9657D614AED2AC3D7561FD1D6306B969EAA425DE44A69D176B453F432E7139EEE00AFBBF880E6E0E75ACA
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/graphics/background-hi-lite.png
Preview:	.PNG........IHDR..."..........2......tEXtSoftware.Adobe ImageReadyq.e<..."IDATx...A.D!.DA#....H.>.H3.+...........9.W.....# ....... ....."h .f.........4.......................DG@@@..4 .f....eu......7.............3.4 ...q...............x....H.i@@@..E@@@..4 .f....1.........D.@@@t.4 :b....A3........D.L..."h .............x...._....!W......m.:fT....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\contribute[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	8648
Entropy (8bit):	5.113242529210202
Encrypted:	false
SSDEEP:	96:vR4ayh44eZhS2NlGEN2qRh8L7aaPpI+n/3z9Ge048XhFJy85tB/P/JBQvOPtS50b:vRpyhT8Si/2FLq48XlyUFgn6BFaRxUIa
MD5:	F4AA7DC965F75669BA81E2FCADB6C90C
SHA1:	ED92B90179E71ED3FB69524E04E4CB4F3C0BE012
SHA-256:	D618BD7BB0D1C11CAC61D9C0B4EA612A48489373A6438E22605B084B15CFEDD1
SHA-512:	8B3208282A6AA989C4A9023D1D4D7E079A90E671FFBF666D0A35504CE1482F59FAECAB6A0F1115A1502A24770CC3185046029B8F1F356C13D8916DC6B6F83716
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/contribute.css
Preview:	@charset "utf-8";../* CSS Document */.....SubTitle {...font-size: 125%;...font-weight: bold;...display: block;...margin-top: 25px;..}.....Bold {...font-weight: bold;..}.....BoldCenter {...text-align: center;...font-weight:bold;..}.....grayText {...color:#777575;...font-size: 10px;...font-weight: normal;...text-align: left;...vertical-align:middle;...padding: 0px;..}.....caption {...text-align: center;...font-style: italic;...font-family: "Times New Roman", Times, serif;...font-size: 1em;...padding: 0 0 3px 3px;...margin: 0px;...}.....rfp-caption {...line-height: 1.5em;...background: #ccc;...text-align: left;...font-weight: bold;...font-style: normal;...font-size:1em;...padding: 0 0 3px 3px;...}.....Italic {...font-style: italic;..}.....BoldItalic {...font-weight: bold;...font-style: italic;..}.....indented {...padding-left: 42px;..}.....indentedBold {...padding-left: 42px;...font-weight:bold;..}.....indented2 {...padding-left: 62px;..}.....indentedBold2 {...padding-left: 62px;...font-w

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\element_main[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	249009
Entropy (8bit):	5.477400514029805
Encrypted:	false
SSDEEP:	3072:uXpL1f/XaqZ4pmoNGUkaUeH/ktyU2cfRwv+9g5LydY4SeJ/5Hn:u5n/KUef8yU2cfSvCQydBJ/5H
MD5:	92DFFCE3439552F9ACEC893F2868D717
SHA1:	5C9896BAC2ECE31D9AC9EB06F987868305BBC294
SHA-256:	86207A548361E9FCDC830F7CCA9540C7C93FF4132DDE2A72FB38D23151BD46A4
SHA-512:	ED64C2CEC4BB25119747F97370E9ACF905647820F64C80F590C52694975BAD507D1085D4460E53EE26514AA32B24B8CC187A13BD9897BC23034A34D69150ABA6
Malicious:	false
IE Cache URL:	https://translate.googleapis.com/element/TE_20201130_00/e/js/element/element_main.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa='" style="background-image:url(',ba="-disabled",ca="-document.getElementById('",da="/translate_a/t",ea="/translate_suggestion?client=",fa='</button></div></div></td></tr><tr id="',ha='</span></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id="',ia='<head><meta http-equiv="Content-Type" content="text/html; charset=UTF8"><link rel="stylesheet" type="text/css" href="',ja="Component already rendered",g="DIV",ka="Edge",la="Google Website Translator",.ma="IFRAME",na="INPUT",oa="INTERNAL_SERVER_ERROR",pa="Opera",qa="POST",ra="SPAN",sa="TEXTAREA",ta="Unable to set parent component",ua="[goog.net.IframeIo] Unable to send, already active.",va="about:invalid#zClosurez",wa="about:invalid#zSoyz",xa="absolute",ya="action",za="activedescendant",Aa="activity-form-container",Ba="alt-edited",Ca="array",Da="auto",Ea="backgroundImage",Fa="backgroundPosition

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\emergency[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
Category:	downloaded
Size (bytes):	45170
Entropy (8bit):	7.975705424400901
Encrypted:	false
SSDEEP:	768:2JkGcmrkzxN4vhummv4CZgIz91xUUeFSFLBHN7/VWaJj+jB3Z6+JZJ:Z0Dhnmv4Ctz5OFSLHN/VbjYp6+t
MD5:	C60B197F794D1EB6EF8D8A73033E969D
SHA1:	4AF6B6DAA296BC4CDC72EDB6A268EF335A5CD8CC
SHA-256:	BFD7FE7E41D9E55BD6BF4B0D9914AC28A93260F09F6D932ED2177BA2178F8956
SHA-512:	EB6584956A6BC9F796502A3BE0C848A02FF9D71271520A2944AB1A130167D2227B7EEFDF8ED97CC9A7C7F894F1F4A1FC3047D92C16EFD18EB7FEE6A76C809C85
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/slider/emergency.jpg
Preview:	......Exif..II*.................Ducky.......<.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3BF68D6069DFE7118708B7A8E415CF04" xmpMM:DocumentID="xmp.did:B72AC8C146B411EA8712CF657FF392F3" xmpMM:InstanceID="xmp.iid:B72AC8C046B411EA8712CF657FF392F3" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:e0d1c088-7095-954f-aab6-b0177551b83b" stRef:documentID="xmp.did:3BF68D6069DFE7118708B7A8E415CF04"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\flags[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 133 x 27
Category:	downloaded
Size (bytes):	2907
Entropy (8bit):	7.775139824223661
Encrypted:	false
SSDEEP:	48:OiQfywiU9qoIZgTtchHBui2qZE2JXeAV1s4exJKzo70BAcophyU:LQgoc+cTuyE2JXeAVe1yzTBAcWyU
MD5:	CEFACB60C7B755E1A53603D7CEAB1BB3
SHA1:	435E52E63BEC97DCC13C2B42A25D5AE761B346A4
SHA-256:	258CC7FC6046B5AB054B2072DE33F2911711C33F49E69651E6012BE6AE33C27C
SHA-512:	535F4720AD534264EAF62DFB619B0EE190D978A8096D1C43CA2A7113F943CBEE25ECF79D532434DF3C9E3C88A497402D071A45419B67ADE444EDA1A0D673EBB1
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/flags.gif
Preview:	GIF89a..........Q\..lm...St..HH....LX.........**.......:;....m/V.ir..TT.fU......qrr.....yy.ww..........i....dd....%$...PPP.......z.11.................AAA.......<C..............L.z.n..0........[[.ii....st.........GG...y.V..~......gE...o.....+......I$...................'.......l.F...Yc.h..........t.....vW....................\.1............z....d.=...]h....._.....n..O.................).....yo)5.=I.aaa.kynllvw.\...............-9.........7.m........ $.}c.$........++q.M................11x.......&.........................=Cz....#-........Pqoo...................GR.H...._...Hj.1v7\.........k............Za.`d....a.......i..3........5D...........8......?c...........Z]....\|..~.\.kU......iff...........>.....tt......v..q..}............!.......,...............H.......T...@.,.J.H.bB..3Z$(. ...?...p..(SZ..O C.,p.......@....#..9..ZTRf.C..6..?.(v.)...8...9..@...c)P./.(p(....V..I.p.#.k.....RFW.....k".9.....5.&l*P.......(..X,J.uM...14b...E.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\flu-fighters[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
Category:	downloaded
Size (bytes):	50879
Entropy (8bit):	7.969332347625548
Encrypted:	false
SSDEEP:	768:78I+pJaYV+EgGXseX0Dw4uG8uq6UgI4MTaFk9kO2oT3mP+t1KkBTz//cIJuWioYJ:ILaggGXpXCw4u3LEQsqmoX//PtYk9w
MD5:	C6E205CAA1F6106D3F67425E4C6E8E70
SHA1:	4FA3F989BE28B335B08F71A84F9B9DC13172A76E
SHA-256:	4D07033D5B68191D651197A33C485FE6C650B1B01F8D1588F7B82BD8B12AB432
SHA-512:	320FCADF1A76D42EA443A80B900F4050F779ED9CA69F2E3BB66C1FDB0EE872B89C8CD8B7A6E8EEE47F4EF2A5B08A6A63BDC165C4329D4B22C5DFC03552AF869A
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/slider/flu-fighters.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="xmp.did:06ab1a7f-dd40-3c4f-bddc-1b0ba2abf848" xmpMM:DocumentID="xmp.did:69AB87A8649A11EBAF02BFF896AA0070" xmpMM:InstanceID="xmp.iid:69AB87A7649A11EBAF02BFF896AA0070" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:03a6aa20-2557-2d42-8fb0-f01a7fa3285a" stRef:documentID="adobe:docid:photoshop:c0f84c4e-74b8-11e8-bb6e-dc81c73ad40f"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Promo</rdf:li> <

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\googlelogo_color_42x16dp[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 42 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	7.7455040862049085
Encrypted:	false
SSDEEP:	24:do/cXeTrHaRodw+UWNhsGzRSIhAugV7unmH4ifkx08v5:K/cXeqadLUWNhNzRSMXgV7unbisx08B
MD5:	EFA6BB2BFE459BC6F4BDAFA3DB0383F6
SHA1:	52D15CE52FE50643E542C17812DE43F4ED1B6EE0
SHA-256:	6318394F737C66F0E2CCFCD88E3935C6667633A1B95FA29FBA2B75431D55EEF2
SHA-512:	E23C04D8997F5C2F92070E09261B7EE50D9DF8753F45CF66F604F0874FFA8D99E947C97C528EC02A2C3FBE8E43D840B343A7D0225532980D5DA95031216415B7
Malicious:	false
IE Cache URL:	https://www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_42x16dp.png
Preview:	.PNG........IHDR............`"....UIDATx..T...=.Mm......&[....Sl..m.m....U....;.uf..frrr...v...U)...).....2Q..`.y....U.9..;..0.^........B.......].h.^..... . L3....jQw..vB.D....<..P.4..\|.B....d..?.....Qv.....Dv..$...._.\|..@........k....`..JG...$..T.y\|T.......v.iH...yc6'...%..&.w.oI.ZS{..!6A@.Y.....a....U]..:...g-......01F........Q...k#..G\....~.+....z.>....F...}1[..~.9..r[.?..9......2~....e."1.).}[.WW.{.r...\|D..<7..t.M.`..S...8.ab..F ....n..S.:n.>1(g.p$.:k1..6...Y..@.5.8.0y.....R...;.K\. 0p...g.,r.E...............=.....!.^..Y!..D.Z.....aV.....;F.4...!.`^.L.VQ.....&...d....O.\...I).!1....{......K.f.e ....L......~.%IY(..Y.....NeA...?.^..2.C..^........P....)T.&?.zm.Sl.b..l.D...%.{.B>X{.9Y..M..:.)......EK..b.......}....\|.o..].....GH?..3F.B(.:.....AdA........Z... .L....)..@?...f.F....6......u..oQfMC.....OC.1[3..j..j.G...&..D`........@>...g....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\granite-advantage[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 150x95, frames 3
Category:	downloaded
Size (bytes):	9409
Entropy (8bit):	7.917091441614061
Encrypted:	false
SSDEEP:	192:d7F8bw8x4bUUmPrdRlYTKJDt/+FXS+8jUNe4rd9KvzxqBYJNmWHYMtT9jv:dK084UUQrtVRUS+e4rdsv8BYJNpHHtJ
MD5:	6C3A8F80884C06933EAFB4EC5FA06097
SHA1:	E76940F48B89C65B91384FB2F13BBBDE7897C419
SHA-256:	6494DEFEDB24BDCFA6D32AD4DEBC58BB064ADB5A55F03E3A6DE2DE7CEF24D04A
SHA-512:	40C3DE8DA0D3757FB76239838DBB25484C64B87EFF3BFAF3202D57921373483A3017F7EB623CB6F1460D97CF727306B4A36D1D14CE30FB5A5404CFAF9B52FFEE
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/granite-advantage.jpg
Preview:	......Exif..II*.................Ducky.......P......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:cfc4720c-3b55-0f4d-b462-f237ad27231e" xmpMM:DocumentID="xmp.did:9901221A0EC611E9A5EF8686F5A610D2" xmpMM:InstanceID="xmp.iid:990122190EC611E9A5EF8686F5A610D2" xmp:CreatorTool="Adobe Photoshop CC 2018 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:cfc4720c-3b55-0f4d-b462-f237ad27231e" stRef:documentID="xmp.did:cfc4720c-3b55-0f4d-b462-f237ad27231e"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.............................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\icon-twitter-bird[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 21 x 20
Category:	downloaded
Size (bytes):	604
Entropy (8bit):	6.242982454000789
Encrypted:	false
SSDEEP:	6:6LlShNn2Hveq2Qu79OzUV8e+gToqyj1D00UsR1HjBewOi27SPksum0frmmYxx5W1:2HUQg9x8e+g8j1ZzHtewOdsutrcxhOPN
MD5:	E102D568E8974BB0951E4196BA687BFF
SHA1:	4D019064F21C2322E537DE510F1649418FF573CA
SHA-256:	67DC276FFF422D3FD9A118EC00E8375CBD3BC036BB31507CFD5DF3D4B479D4C6
SHA-512:	5D5AEC096F090DBE608BC1381772FDBACABBC029FC95249EB359FFE91651B1A9B414CBF0395BEB2278CDADDFBB0A30EFFB6D5FB5B82E49E8FC6B85E021B1EC17
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/icon-twitter-bird.gif
Preview:	GIF89a.....W.....................................c..........................R...................(.......p.............o..........I........&.....+...................N..L........t..(..-...........(..U.......I..e............U.......Z.....#......................................................................................................................................................!.....W.,............W...............;...G..@.TUT.SK..B>..1&UV.....H......E../5<...VT-N..L .."....(..U.0.VU..C+..:..I...T...3..=...$7.T...OMT.V.,..........(.P........2B.7kT.DAd...`...bQ..'..P !.......;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\mediumA[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 16 x 13
Category:	downloaded
Size (bytes):	299
Entropy (8bit):	5.303426088371302
Encrypted:	false
SSDEEP:	6:6liaaRbZtZNf2jOWxlrt+F5d/bsF2Wt0n/n:6vaRbZf8OWPcxQF2//n
MD5:	5A98EE12BAD5586737424F8F3F58EDB6
SHA1:	1CC67DA5C621209969D0EE01EDAEDBC505187B0D
SHA-256:	43707815C4248E0946B2DB9117290955CB5EB684F8C8D3D45EA467C88EECB197
SHA-512:	2D43F687EB11C6DAA47E465CB746641C05EDAE9292E146A283F313016C71C9D19A5876F5546797D4DBB5BF092A50193CE7F3DC9ADD70DB6AC2AD386A94D4C09A
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/mediumA.gif
Preview:	GIF89a.....%.fff...DDD.........;;;............iiiIII.....................eeeYYY......sss......................===...555SSS.................................................................................!.....%.,..........H..pH,...! H....Sh ...RB. 0..G...*"%..I!TJ...B..1.f..(:H...C. H!"#C$"DA.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\nheasy-sm[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 150x57, frames 3
Category:	downloaded
Size (bytes):	5072
Entropy (8bit):	7.8154030612201995
Encrypted:	false
SSDEEP:	96:l236UtdSb7k5nQMataaEtDfpYB/+TAj+ZrNmDIWgNS:yxA/qQ/twrqBmTA6ZrEss
MD5:	62503F5C9E724CE0B0FD8DAE92EEDE35
SHA1:	05C0EC56843E278D8D58907922D5BBC08DE8F7B7
SHA-256:	3945CF14451E5306AD82AE641F105BD4EBDEBBD65F1CB0FD6F865D1F39BE7571
SHA-512:	C0E5EADE4CCCF69415D2AB1D0CCDEF85982F41B7C4F2D58F254F87F9C2AF187C6321C8040C40C0707E4C2068B332AA2166FA21A31253BC83E88368CB8CCC23AF
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/nheasy-sm.jpg
Preview:	......Exif..II*.................Ducky.......<.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:FE9DC7AFFA6311E59447A65323C12060" xmpMM:DocumentID="xmp.did:FE9DC7B0FA6311E59447A65323C12060"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FE9DC7ADFA6311E59447A65323C12060" stRef:documentID="xmp.did:FE9DC7AEFA6311E59447A65323C12060"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\opensans-bold-italic[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 65060, version 1.10
Category:	downloaded
Size (bytes):	65060
Entropy (8bit):	7.992093389930961
Encrypted:	true
SSDEEP:	1536:Vl4UBHdlaBzNVuEusOn6twV8qiKdsoK2Ua5FtvYgWC7YEf/N9zCcg:Vl9HdwBzNVuZLndV8fKl+alkEfVUr
MD5:	64CF197914FC96C7B92E54BFB7379EE9
SHA1:	255689E40B8AB1C03264425D5F5C8959E9561929
SHA-256:	259B8272F9578583660384E665AE905BAA908E6D076BBFE9D1CDCABE1E3DD15A
SHA-512:	02015DD5D42E1CF9D5EE4A82B702F4498FD83E062776648C5CEC9593132640BAC49746A7803E923A1AD6EE08E7A01B005F5DFA2345FE540633651BEB339B0037
Malicious:	false
IE Cache URL:	https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-bold-italic.woff
Preview:	wOFF.......$................................FFTM............_.6.GDEF........... ....GPOS..........>\..MGSUB............{#._OS/2..!...._...`.q..cmap.."........nZ&..cvt ..%(...b.....g.ifpgm..%.........s.ugasp..@............glyf..L...4..".\.W.head......4...6...Rhhea......#...$....hmtx....... .......loca...........X....maxp....... ... .=..name...8.......~^.k.post...8..........".prep...0....................=.......cI.......J.x.c`d``..b...`b..W.I.0.........x..........Q`.D!.3l:,3,."(B...B.AE../h.N..g8F\..FM.KE..CG..(..Q....+....Sf3.s......7o. .;...._...w..QZ)..RG....{.....O9^...)...v=.k.NT.U]8GU.J..o..q.r..&{.].......3...d].ov=...`].........sr..=.mX....O.k..m......~u.o..;...........K.<.h..u...7..k.zN.Z..am....[......)..;n....t.~.z,.....e..N..r.#\..^......s.{..0p.l..%G1....h...l.Z...c..h g7.l:...A.6.j.9..AW4..<..............>h.A.6=9...C..t..<d2{..`.b>.g.x.....G.w..'..5l.N....%[....7.X>..aSF67...a..G..i.).+F-.S..p..#'...rE.5b..1-W..i]....M.1rt...3.X...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\opensans-bold[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 70188, version 1.10
Category:	downloaded
Size (bytes):	70188
Entropy (8bit):	7.992855179836391
Encrypted:	true
SSDEEP:	1536:BlFGuO/z18Niu+LxlinBDCBbPdk+A4wt5ORBjSmAaYL:BlUucz1PwnIBrmd5yBlM
MD5:	2DCB93D58BA4D53D72CD2B63D3681A08
SHA1:	981CD70798F1E7DB1C764BBACCCEED57FE3FA938
SHA-256:	7C556BCEB86172609B85B74001EEC2D961DA6D8D9D6CEF9F6AF67184D9DA2300
SHA-512:	258439CD092A49B4CC40F0C8A31C59CB6E61181D4BD3A6D77875FF06BE5BD69D3129D5811536525F0384644F024C217824029D0D1568C69ECAF39D7C8E2272CD
Malicious:	false
IE Cache URL:	https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-bold.woff
Preview:	wOFF.......,................................FFTM............_h..GDEF........... ....GPOS..........>\..MGSUB............{#._OS/2..!....`...`.m.)cmap.."........nZ&..cvt ..%(...].....-..fpgm..%.........s.ugasp..<............glyf..H...]..O4?.s.head......4...6.%.Phhea.......!...$.).Vhmtx............"x..loca.......3...X.z..maxp...D... ... .6..name...d.......-.*..post...L..........".prep...@...........k.........=.......B........J.x.c`d``..b...`b..W.I.0.........x..........Q`.D!.3l:,3,."(B...B.AE../h.N..g8F\..FM.KE..CG..(..Q....+....Sf3.s......7o. .;...._...w..QZ)..RG....{.....O9^...)...v=.k.NT.U]8GU.J..o..q.r..&{.].......3...d].ov=...`].........sr..=.mX....O.k..m......~u.o..;...........K.<.h..u...7..k.zN.Z..am....[......)..;n....t.~.z,.....e..N..r.#\..^......s.{..0p.l..%G1....h...l.Z...c..h g7.l:...A.6.j.9..AW4..<..............>h.A.6=9...C..t..<d2{..`.b>.g.x.....G.w..'..5l.N....%[....7.X>..aSF67...a..G..i.).+F-.S..p..#'...rE.5b..1-W..i]....M.1rt...3.X...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\opensans-italic[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 65184, version 1.10
Category:	downloaded
Size (bytes):	65184
Entropy (8bit):	7.992075893557577
Encrypted:	true
SSDEEP:	1536:Cl9CBqDrD0fq12v0nMkFlQfoMSbbj2zZpoYR9zCi:ClQUDrD0S1nMKeRqbKoqUi
MD5:	7629C4119ABAE5C1279C38F4F332173D
SHA1:	910B6E1DDFD18DF34F93B88C3D3704C718F2851E
SHA-256:	A58FA6273D7383BEFF16D521694E65A5CA67A4D1D0A7617A387740848DD52411
SHA-512:	CD0C61D70A52DDAF82A4BEAB2E3B96EFEA3429FAFB040774BF9221A5F9DF8F36EC90352769E663CE1C7774FF0CE6043875DB1193CE7F8CC064488827A251F5AB
Malicious:	false
IE Cache URL:	https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-italic.woff
Preview:	wOFF........................................FFTM............_.7^GDEF........... ....GPOS..........>\..MGSUB............{#._OS/2..!....^...`.E.Lcmap.."........nZ&..cvt ..%(...W........fpgm..%.........~a..gasp..,...........#glyf..<......!...<.head.......3...6.j.Xhhea.......#...$...Hhmtx...8...A.......loca...\|...$...X.'..maxp...... ... .D..name...........Ej...post.............".prep............T............=.......cH.......K.x.c`d``..b...`b..W.I.0.........x..........Q`.D!.3l:,3,."(B...B.AE../h.N..g8F\..FM.KE..CG..(..Q....+....Sf3.s......7o. .;...._...w..QZ)..RG....{.....O9^...)...v=.k.NT.U]8GU.J..o..q.r..&{.].......3...d].ov=...`].........sr..=.mX....O.k..m......~u.o..;...........K.<.h..u...7..k.zN.Z..am....[......)..;n....t.~.z,.....e..N..r.#\..^......s.{..0p.l..%G1....h...l.Z...c..h g7.l:...A.6.j.9..AW4..<..............>h.A.6=9...C..t..<d2{..`.b>.g.x.....G.w..'..5l.N....%[....7.X>..aSF67...a..G..i.).+F-.S..p..#'...rE.5b..1-W..i]....M.1rt...3.X...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\opensans-semibold-italic[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 65888, version 1.10
Category:	downloaded
Size (bytes):	65888
Entropy (8bit):	7.99154426632837
Encrypted:	true
SSDEEP:	1536:YlNP3dgTYjSOjOzkRjFdktmP3qf1nLcZDhU9zCj:YlhqgjOWlP3qdLcZDSUj
MD5:	CC9039BD213ED3300C8D067F6B70F162
SHA1:	F15AB088A7FCED99FEE5ED257250534B170653E3
SHA-256:	248D23B4B49EB98435BAD3D34DF8872165E16654C2A79472DCFD28B08B06B78A
SHA-512:	8409B4FD4E38BC9E46A9452F3F2372A87395A36DFD66181F623B9160024FEAFE6160E3C7E533CF833E12A3859BC420453C76CD0B7AA388BFF25595D0CDFBB038
Malicious:	false
IE Cache URL:	https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-semibold-italic.woff
Preview:	wOFF.......`................................FFTM............_.8.GDEF........... ....GPOS..........>\..MGSUB............{#._OS/2..!....^...`....cmap.."........nZ&..cvt ..%(...^........fpgm..%.........~a..gasp..4............glyf..@...... .1..head...L...4...6...@hhea......#...$...ihmtx......@....p...loca.......'...XAE.*maxp....... ... .P..name...,...1...,....post...`..........".prep...X........x..%.........=.......cH.......L.x.c`d``..b...`b..W.I.0.........x..........Q`.D!.3l:,3,."(B...B.AE../h.N..g8F\..FM.KE..CG..(..Q....+....Sf3.s......7o. .;...._...w..QZ)..RG....{.....O9^...)...v=.k.NT.U]8GU.J..o..q.r..&{.].......3...d].ov=...`].........sr..=.mX....O.k..m......~u.o..;...........K.<.h..u...7..k.zN.Z..am....[......)..;n....t.~.z,.....e..N..r.#\..^......s.{..0p.l..%G1....h...l.Z...c..h g7.l:...A.6.j.9..AW4..<..............>h.A.6=9...C..t..<d2{..`.b>.g.x.....G.w..'..5l.N....%[....7.X>..aSF67...a..G..i.).+F-.S..p..#'...rE.5b..1-W..i]....M.1rt...3.X...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\opensans-semibold[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 69884, version 1.10
Category:	downloaded
Size (bytes):	69884
Entropy (8bit):	7.991788037606492
Encrypted:	true
SSDEEP:	1536:+llniJWBUUrv4ZNp5+gmeOAWg0OZSr6WFVvGg/1KFhYG:+lyWmUrv4fpAteeOAvFVN1Ex
MD5:	39534C858FE20A3FC1AAFB039B83352F
SHA1:	7ED8ECCB0B2105E1A9329B233D70EEAB879E8926
SHA-256:	1210A816BFF3871F1F998C24A681256C0965253D3309979C6A38AA18C33D13F5
SHA-512:	ACF65CF393959B9C5CD123D30368AF0A44F7A60DAD478CDF48B2751026838AFDED35F8F99E9C380335FD9121605626616852887BB1F45528C9589E5054F5CDE3
Malicious:	false
IE Cache URL:	https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-semibold.woff
Preview:	wOFF........................................FFTM............_r..GDEF........... ....GPOS..........>\..MGSUB............{#._OS/2..!....`...`....cmap.."........nZ&..cvt ..%(...[.......4fpgm..%.........~a..gasp..0............glyf..<.....A.e...head.......4...6...=hhea...$...!...$....hmtx...H...O......!.loca......./...X..g.maxp....... ... .9..name................post..............".prep............x..n.........=.......L.}......Lxx.c`d``..b...`b..W.I.0.........x..........Q`.D!.3l:,3,."(B...B.AE../h.N..g8F\..FM.KE..CG..(..Q....+....Sf3.s......7o. .;...._...w..QZ)..RG....{.....O9^...)...v=.k.NT.U]8GU.J..o..q.r..&{.].......3...d].ov=...`].........sr..=.mX....O.k..m......~u.o..;...........K.<.h..u...7..k.zN.Z..am....[......)..;n....t.~.z,.....e..N..r.#\..^......s.{..0p.l..%G1....h...l.Z...c..h g7.l:...A.6.j.9..AW4..<..............>h.A.6=9...C..t..<d2{..`.b>.g.x.....G.w..'..5l.N....%[....7.X>..aSF67...a..G..i.).+F-.S..p..#'...rE.5b..1-W..i]....M.1rt...3.X...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\opensans[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 67524, version 1.10
Category:	downloaded
Size (bytes):	67524
Entropy (8bit):	7.992783189415623
Encrypted:	true
SSDEEP:	1536:pJl+Wp+Zxz8HN2jBMgUQ9xTOL/l4YN0cUADypY7:pJl/p+ZxQHYBQQ9C4YNoADypw
MD5:	81B753A6C202063E3BBE940D13562737
SHA1:	F60C0A7A5795B8DB8FB8B9045C63239BA61D24E3
SHA-256:	163D36DD2444B0D0EAC30D110DDB2E18BE4741EB6BAEC32FFBD3A4C479E74DDC
SHA-512:	E53DAD1D7E5673CC98E3D0EE37703E7ADA29628C2847D6570E6B7CE758351D445C51CCCEECAA66B3A8226059E16E229E38889C3DCBF03CEBF660CB9A3F6453C5
Malicious:	false
IE Cache URL:	https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans.woff
Preview:	wOFF...............X........................FFTM............_[ .GDEF........... ....GPOS..........>\..MGSUB............{#._OS/2..!...._...`.6..cmap.."........nZ&..cvt ..%(...Y.....M..fpgm..%.........~a..gasp..0...........#glyf..@......3.....head... ...3...6...Rhhea...T...!...$...whmtx...x...0.....=.loca......)...X...\|maxp....... ... .D..name.............r.post..............".prep............C............=.......51.......LLx.c`d``..b...`b..W.I.0.........x..........Q`.D!.3l:,3,."(B...B.AE../h.N..g8F\..FM.KE..CG..(..Q....+....Sf3.s......7o. .;...._...w..QZ)..RG....{.....O9^...)...v=.k.NT.U]8GU.J..o..q.r..&{.].......3...d].ov=...`].........sr..=.mX....O.k..m......~u.o..;...........K.<.h..u...7..k.zN.Z..am....[......)..;n....t.~.z,.....e..N..r.#\..^......s.{..0p.l..%G1....h...l.Z...c..h g7.l:...A.6.j.9..AW4..<..............>h.A.6=9...C..t..<d2{..`.b>.g.x.....G.w..'..5l.N....%[....7.X>..aSF67...a..G..i.).+F-.S..p..#'...rE.5b..1-W..i]....M.1rt...3.X...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\print[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	28522
Entropy (8bit):	5.17542403704878
Encrypted:	false
SSDEEP:	768:Hx6uVUQyb/S8MtU2xjJ0aJj48DqWp5hQV6rJnJAJIOadL05pbknJ9dZ5IJX0zw4e:/o
MD5:	AF5C8F644AC17AC040DBA5348C6F1551
SHA1:	277C9549B4CC6D7D8A1FF99B02BBAD1D2A560F42
SHA-256:	07BFC685C04932BF25EF8506BE79F3B0539B46E55741C90129F3CFB66F87EACA
SHA-512:	C7F46CAA4FB5B923422F0C9C7CBE729C0B1FD3B674D77016BF483CC4AF302DAC999D636CEF289A99F197344C8735C014D16E685E83513474AB3E3FD99532159F
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/print.css
Preview:	@charset "utf-8";....* {..margin: 0pt;..padding: 0pt;..}....@font-face {...font-family: 'encode-cond';...src:url(https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-medium.woff) format('woff');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'encode-cond-bold';...src:url(https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-bold.woff) format('woff');...font-weight: bold;...font-style: normal;..}....@font-face {...font-family: 'encode-cond-black';...src:url(https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-black.woff) format('woff');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'open-sans2';...src:url(https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans.woff) format('woff');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'open-sans2';...src:url(https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-bold.woff

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\search-btn[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 36 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	910
Entropy (8bit):	7.633264256069046
Encrypted:	false
SSDEEP:	24:D2egDtS1EkJikc4dccRmREbM5tHjx7Lf1BvAaEKc:CeUQ1EVXQWRtDxHzAa+
MD5:	A1A1172B6955F3F06DCB37F463A2761F
SHA1:	52E918EDA5F91F36A686D2D28D57E85EDBBCF7CA
SHA-256:	BB5C7B2B21EB3601FE8E001E6454A33C959C9C7187BA1D864A0BA466D90D8DA0
SHA-512:	C5EF377A97127DCAEF1A6057AF03CDB457F327A76ACA08C02CDEB45955DC533477535CA8D4D263CC70A02AEA30EA0DA949979BCD78FD627CF37C8E2F692CBBCC
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/graphics/search-btn.png
Preview:	.PNG........IHDR...$.........D.S...UIDATX...?H+I...o..QP.F........)DI.y ..p.p.Y...P,......B,.kN...B-..F...(..TL...h$.\...{.....~..v.....fxx.w......~.+p.hVVVb..0.x....~.........~....J.@.k.@.(..N2CF.VU..!.\|..NY..B`6.)++#..pyy.. ]. .^O__.V...^.$..r#..;;;x<....%{.H..222..b.&v``.......H&....h4...f0.`.........t.L&............YXX....c@.......pvv...:777.vEQp..LLL`...........(.,.$...n.b..333.........2....477..h....t..F.....v...........^_x.,.'...ov.(J.SI........:+--.@..V.-<..........6.-..B......p8...t..q8....a..@.A.GGG@j.....o..hdrr....vww.^..\..n7...455Q__...,...\]]..F....j.ff...9..'/.@.D...y.N'v....Jzzz.Y/I.%%%y.>...B...............!H&..B!\|>..X......P.....B..^/^....@MM....D.Q....x...........a677s..A...(......P.x<.@ .`uu.UU.....8.l.(............. ...=....$....d.\.....>....r...e.sAB.\......L[[[..h:.y..K$.I.........d+U................H....l./..:5.\dD..g....u../.22...B....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\the-doorway[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 150x112, frames 3
Category:	downloaded
Size (bytes):	10721
Entropy (8bit):	7.9222857327358
Encrypted:	false
SSDEEP:	192:n7FuknE1nfULiWFwwlfoy5jtVA/wAkZ1tsMW+kLbY0sspgKtZuKchTKr2aaJdJBN:nfn08LBfRjA49psTLbY0xgiuwr3aJo7y
MD5:	C258A4DB13A03F1076CBD63293759F48
SHA1:	D710F07E70044D66A5021F9FC5A1D72DD7856670
SHA-256:	1482933B0E678AAB9D19132EE458E09FCB16A01712D9755BBA31A74B4A76FEE7
SHA-512:	9308FE2CB30AF1A309E7CDE9562A698D3D7BC67A7415318A0F2A88405B9B036A54420E86DE99521B48BCE2BA69DF4A00109DF95A9F1E772119C6E9CE7C3BAE85
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/the-doorway.jpg
Preview:	......Exif..II*.................Ducky.......K......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:OriginalDocumentID="uuid:5D20892493BFDB11914A8590D31508C8" xmpMM:DocumentID="xmp.did:E561AC3D144511E9ADD486A11D2B4417" xmpMM:InstanceID="xmp.iid:E561AC3C144511E9ADD486A11D2B4417" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:56075E5F4414E911AF80F736676497D0" stRef:documentID="xmp.did:066f07fb-c2ec-6a41-98c4-ecf3f60ffcec"/> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Print</rdf:li> </rdf:Alt> </dc:title> </r

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\trans[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUkw0Bl/Hh/:G/
MD5:	BF7D3E1972B3FE5BFE8C119FEE05E89D
SHA1:	081AF0BCFECBA29D5C4AC9025A3AEBADF79032A5
SHA-256:	5B4B97B224D9827C01D7A887A722F4C2A680195C4A66108559BAA0C65220DF90
SHA-512:	69B7926725CC19180618609A92BD27CEEC465BAF3DCE01CB6AA05C6A0EBB057DCA62AD2E5DC57FCE75F5B8B2C3B67E456EC880D6DE2B3F3C2581DB78FD6E8D7F
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/graphics/trans.gif
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\translate_24dp[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1847
Entropy (8bit):	7.840750948954508
Encrypted:	false
SSDEEP:	48:0BUfsw9mAtN6tl4XZACwezLhPa0V7dHy+1pqWv33z:0iT8+6QJcmLddquz
MD5:	BFA09D19AEA98592C45CE0A814F0EB2C
SHA1:	5DB965A451D9B6B3A5156836182ABE8240D4A0DE
SHA-256:	5FE03BFD95A2D4E640ED7D04DCB08EF991C327A5AB6F6FDB9EB06E1EFC76AF30
SHA-512:	65FCB486B6E1120FE47897BCFE75E310AC72D23213A72754729EFE89E019A431E700202A879A94407F46277ADFAF3B03B5248775645555EB5F8698AA0FE4913B
Malicious:	false
IE Cache URL:	https://www.gstatic.com/images/branding/product/2x/translate_24dp.png
Preview:	.PNG........IHDR...0...0.....W.......IDATx...s#I..{....Yf.C.L..h.0.;...f....0$..s^.I.V.JVT\....5./..'h.......G....5F'..z.%?.8...o4..zC.....v..#...5w.).Y...$.'..&x.b....m.....K...........M.#.......?..J......\Ha.\|...W.x...#...].......F.B%._.k.....P...3.g....\"0...H/...w..A.....{100..)LMMazz.W...I........M...&..F.$0$.B...w_. G........Ocff.!$. V.z{..,0.!.jq.y..K...D{..}..B............1......4...1x.".s7...........6.w.....;.v/F.&(..@.A...O.T.~......a%.w.(;. E..:..QW..^o@ty\;.b..b..%UH..I....Nw.X.C.F.(.'..B..F.m.8]^..!.,L..F.<+.p6f.=.u.c.]?.v._..5.....A.Dzy.....':Oy...zh......y.....`0..\|i..2.eUp`)?<.a8}yIr.....B!...1Dv.P..6.p..M.O7..Q.<.......-^.`0^...j..5h.G. ....R<S...h....y.Y.@`.@Aq.OB!.O....+4"+.T..31....f.xG,m.....~Q..o..}..~ .D......x..Q\.(o...R.6....@.<........./.^^1... ..!^L........e..a.'R^;._..o...U..Jd.V...L..F.R^r....]...>.F..Mj...3Q..W.)N4.(vx.q..Y.h.goEq.;.....y.....P3...hi............$..I.!...W..J.CL.OB.mq..gbR:.<..;..v;r...]..jd

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\translate_24dp[2].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	825
Entropy (8bit):	7.704648162446466
Encrypted:	false
SSDEEP:	24:ssHKYGXsIPtbm+dBUWkhweNeFb6wfO2GNzj/4vs:ssq/rldTDNd6wfoJ/5
MD5:	55FF382A8B09329E3230A1797EB8F5FD
SHA1:	026AE089006A674DA7DCC9BF6B986C5D59E75478
SHA-256:	1BB2279AED6BC1438D2B17A5FFCBAC9D37864582AEDEEEC8D301EAB162B2C213
SHA-512:	E787C75CD8F6796DE116FDBE0D7B8A3707BB09E02FE3D9F3FA15E5D783931023DBD62344D5178F547E401DBA160F0382A1204DB09EFB322273C7525E592EDD79
Malicious:	false
IE Cache URL:	https://www.gstatic.com/images/branding/product/1x/translate_24dp.png
Preview:	.PNG........IHDR..............w=.....IDATx.....cY.Fk.c..a.m.\|e.m..c.6.3......k.b...9IU..!...7....GOF.Nc.........>..[.H.9.W.:..t{........c..../.=......o.._...s9Qs......?.P(.`0(...D.~?....Y.h.(..@....<......8.....\|..@.x..,...b.$....YQNt....U.t:3.._. .wQ..T..d...g..h...1.P..E..pA&..l.......G.L...t....CZ.x.D.....a#..F$.H...9...;od.L&E........P..0............C...2..o.a....S..Kq9:2z...!s..[..#......cV4`......8.P....i,?..!...}....A.ql..............K7H..\|......$.......59.g..`A.v..~.3....N...N..J..U...W..#......p...E.......%9Q.C..(F/l......1X.V1.p8.H..HK..r...a.-<}....,r...).6.G.7..m..V.1....5z,n..w..n......>.....^....i....fM....(.Z..&...1U..2..w?.<..z....9...%..d2.b..o..3\|..O...XQw.r6....&.<........;............1......y.ZQs.... .).Vk..j...E......r.i...8...[..~[.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\YEY3408P.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	25487
Entropy (8bit):	5.083554954745144
Encrypted:	false
SSDEEP:	384:SGunySC4SJLM/Ex1v2xiJgDc0hAtgn5uB+ec2zgrjeAhiN:SGuFyLMMx1ux/Zh6gn5uB+deAhe
MD5:	5E7BD12E328C4AE593734E1AE2AB3317
SHA1:	5E1CF57202212E5A99323A7728FD8D2B5489C244
SHA-256:	D0E97980D5E7C8609F31EDD59D321A0F9A22E44464929387251959EAEFF56069
SHA-512:	962C34614EBC31A9680FAB8DF4CCFF71B9C5B57E9D012B84CA7FBFA1BE466958B2DD3083CD6171DE1D45886269DD07AD9B52FC3B326565BB99738F32CD074CC8
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml"> InstanceBegin template="/Templates/home.dwt" codeOutsideHTMLIsLocked="false" -->..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />.. InstanceBeginEditable name="doctitle" -->..<title>New Hampshire Department of Health and Human Services</title>..<meta name="Description" content="Welcome to the New Hampshire Department of Health and Human Services" />..<meta name="Keywords" content="health, human, services, dhhs, new, hampshire, nh, nh medicaid, tanf, child care, substance abuse, wic, child support" />.. InstanceEndEditable --> InstanceBeginEditable name="head" -->.. InstanceEndEditable -->..<link href="css/base.css" rel="stylesheet" type="text/css" />..<link href="css/contribute.css" rel="stylesheet" type="text/css" />..<link href="css/print.css" rel="stylesheet" type="text/css" m

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\arrow_blue0[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 11 x 11
Category:	downloaded
Size (bytes):	56
Entropy (8bit):	4.564221148126157
Encrypted:	false
SSDEEP:	3:CEaiQEllIpbjuE:zaiQElyb
MD5:	8B3611F88D6E07154DFE8D4A742873E1
SHA1:	614D6285952ECF50A5F0F1440E9D21BBAFD1CB2E
SHA-256:	A3933D871CF7DAD771954B3BF4FB984C0212903943C88873F0E3439E85285F06
SHA-512:	5905DA1FB768EA3B2C5AFC29601BD6A78A68C94E79373AF8B826795839F6E986D85459209D3C96713E29FABA92C4C041A450F47FA61A89138077C311C458B165
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/arrow_blue0.gif
Preview:	GIF89a.......R.....!.......,.................ta2...4..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\arrow_gold0[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 11 x 11
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.381328385912461
Encrypted:	false
SSDEEP:	3:Ct/00lIh3uJT+H:Ac0ydUTm
MD5:	D7A4D95354A5FFDF666AFFE4F7516A0E
SHA1:	E65484EB06115E888D29C35C3864981BE8EC9D42
SHA-256:	3F4D9CC02EB84C4BC1BF181F3452386B2FFC1D64E62FDA21E03F3B6D94CF0866
SHA-512:	EEE1B4350B08CAB3FEF1ADD3DB67F90F527F289BF64C3EA8D22804A297EA2A830A8426F17348B123E39EA9D6F44E055DC0D334816311BD9D4B0BD41447F52FE7
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/arrow_gold0.gif
Preview:	GIF89a...........",.................t`2......;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\arrow_green0[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 11 x 11
Category:	downloaded
Size (bytes):	48
Entropy (8bit):	4.381328385912461
Encrypted:	false
SSDEEP:	3:Cpr3lIh3uJT+H:43ydUTm
MD5:	FBD0E6E9B04C2C0F0DE3B9B372EB91FF
SHA1:	FF07B76F9896AF9DCFD72E2DB5167C5C7064B0C9
SHA-256:	595D5753D57518C1235FAE639F2665608B8639BB8E12D12DE33339EC4CC9760A
SHA-512:	2D513B0C0A2A18CDB51BC04E8AC900A9B34C378CBFE70A3A0D764D92358F25F34EAEE2CA56AB80F3A314A4E8BBF347117EC05FBCA5C7E04FCDF2E132071E827B
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/arrow_green0.gif
Preview:	GIF89a..........>.r,.................t`2......;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\button-sysc[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 149 x 121
Category:	downloaded
Size (bytes):	14621
Entropy (8bit):	7.825199065619867
Encrypted:	false
SSDEEP:	384:yTq9/R62zTbh9Nj5Jg8mf5FBh5R4xJWEEpRO/PK48:aq9gKI8mRFBSdf8
MD5:	BCF9D8B990427A3FD6076D8B828DC634
SHA1:	249E51075BA8E049CF92373FB31175F03950A54F
SHA-256:	2CADB2795C254C1BC18A7FC3E766D5AB760C9566F323E2DA3A60629E8028A88C
SHA-512:	910AE8C8A959BC19AB332916CFE338999121DA1D7450F0AE4BC1224DE1CC66030D92282DA0F4B6FE3B976C25B456286984E443DFC038E9104E04833BFBB51E3D
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/button-sysc.gif
Preview:	GIF89a..y............."&..!.........47(.l[........\|\|\|......CCCy..)3'Xdd...sYF...TWK.............v8E57EWdT........C71Rb+.......gtv+)#PQPCA<..........HSU...IU...GTG...0+'...........<CB.....IS8...+,+40iji.!....gO=.....T[7..."#!...qti...dddCHDEHIIKKgpl...<=9amk120...KIB.....QMG...~.\|#)#.$!\|bRRZZ......qspad[...[\[$+):;1...k}.191.....GEB{_J........DFGfa7.......YE9...iidGD=AJ...................CJ<"'.(%"glr..............V^`bhd3;8HMQRYR...............\[R...;3/p{z..O\+......\|..?K3HK>....._hH...........RUW.....ple:>?..................AA4.........>O).............rt{......358...~v\'......03 .........WTQ>O5.{o...hea......L@7...qxqIN2.........bghSMQ5-,;3:... ..@?>ifj...wvpYWX$''(...................0>)oooMGL,''............................!.......,......y.@.....a.D.2..\....#J.H..."EL...c."T....dE....M.k.".{.h..G%K.>rR.D..5=....d...Z..4e....N.F}......fEbUkU.Y.b.#...L4J-(e@-.:X~.8q.....(;q...:.Z....R.n..W.!C....d... .."GD.4)h.%...Y4.....d8p.@....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\carbon-monoxide[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=12, height=292, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=600], baseline, precision 8, 515x251, frames 3
Category:	downloaded
Size (bytes):	129790
Entropy (8bit):	7.890919421015789
Encrypted:	false
SSDEEP:	3072:ie2ke28EzJw9Hew+CLsGU+/7jX94hXGLVjFrRk0:i1k18EzJGHew+CLso7jXOh2ZRrRV
MD5:	C83AD720C9E8C9FF4099CD8A74F63990
SHA1:	EB99ADBE8DC292769D7550A97A0236BDC2F46592
SHA-256:	176E7581B8833A56D160D6CA01B0C29D4951086689BB1293C767DC6F30725181
SHA-512:	55E9CA1348F7065B1D6495CEF4343106DB6ABE7C0DFE13EE216B2004711FD03AF7ABBC67D3A7F0EAAB5518753C987B5352BBECC52B4DC017A15523F237B85395
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/slider/carbon-monoxide.jpg
Preview:	......Exif..II*...............X...........$...........................................................................(...........1...........2...........i........... ..............'.......'..Adobe Photoshop 21.0 (Windows).2020:02:03 15:10:23............0231................................................................n...........v...(...................~...................H.......H.............Adobe_CM......Adobe.d.................................................................................................................................................N...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...1......y.8X8.e.....X....;..h.........2....L1..X.W n....${P. .54.1.HFr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\coronavirus[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 525x295, frames 3
Category:	downloaded
Size (bytes):	54750
Entropy (8bit):	7.970078713308231
Encrypted:	false
SSDEEP:	768:dnY8WF3kuJcWl0OdwWFu9cWU6C+YQFgLVKwZLPpnyw60Ma5qbTRNliAQV2OXVB:/WleYwiu351F2JRnywTMbAPJf
MD5:	956167D6912A4B6EFC08FE7C6A8C1EDB
SHA1:	1B2D9ABD46E8F6CFC2F40D236592149A63AF6439
SHA-256:	AFD9A3BD4278B33407F7064C304320416ADF34F1C4CF0FE8198CCCDFD4803001
SHA-512:	8898335B7A458594C8521EE1BC591C61E4D58624513F8C171901568913AB4D3F45405F02CF65413C332F13843F085CDBECDB870587728BEBF561DD68F8ACE8F3
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/slider/coronavirus.jpg
Preview:	......Exif..II*.................Ducky.......<.....\|http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="27E344336F4118BD4DD0D1DA5195F882" xmpMM:DocumentID="xmp.did:4762E0641D1111EBA05BB25D5D4E51D8" xmpMM:InstanceID="xmp.iid:4762E0631D1111EBA05BB25D5D4E51D8" xmp:CreatorTool="Adobe Photoshop 2020 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9dbb5d76-670c-014a-b1c7-009a273515a6" stRef:documentID="adobe:docid:photoshop:cff643a1-c15d-9f45-bd4f-e8d01e934abd"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\covid19[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	235
Entropy (8bit):	5.136589458286182
Encrypted:	false
SSDEEP:	6:pn0+Dy9xwol6hEr6VX16hu9nPjL8y+KqD:J0+ox0RJWWP0T
MD5:	8AB10AA878C6260D9465F86284A645E9
SHA1:	A3AECE8220D35AB422B15A254D976576CAD5221F
SHA-256:	D8C83817C808A1D7CD8CA3EF9D291C728FF566D3277718641AF8306E492D421A
SHA-512:	D31733023270C2C7715C2E71B925C59B95A98A4A732A2D80A530364882CB7EDDD446AC5C48D84AF6BA18A77B87A7AA9FA020178E9B02985E3C3A4A4740384A5A
Malicious:	false
Preview:	<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>301 Moved Permanently</title>.</head><body>.<h1>Moved Permanently</h1>.<p>The document has moved <a href="https://www.nh.gov/covid19/">here</a>.</p>.</body></html>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\current-map-small[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 296 x 371, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	53362
Entropy (8bit):	7.993417790305679
Encrypted:	true
SSDEEP:	1536:7wjcii1HaGZ+xJqtUrNut7m1ktLSkBV9uN9Nsvm:scjZbZ+/qtUwwktLS0nyLsO
MD5:	B2A76796AD77608C8BB5C335A8BA63A9
SHA1:	CE5BA1744FE032CD0240612BB9251FA37929E6FD
SHA-256:	5B49CEB3EF060B51549A47694A8D59F61F72240E21CF1EDD34C27ECFAC7E1C18
SHA-512:	CA1010040FD21C4257A82336D5FE5E8CC7A290547998BB36EB1FEA7413CA42F8ADEB96484E25CAA44DC4052FCC167916DB69E838D2C7D73B4DE76C587EB1BC0A
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/graphics/current-map-small.png
Preview:	.PNG........IHDR...(...s......,.z....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..`....0..jW... 3s...p..'m..^..k.z.^...zmzM.p.p.... ...YZ.2....HZ.d..d>u.yogggg.;..{..X..AAA.........GP.CAY.P.CAY.P.CAY.P.CAY.P.CAY.P.CAY.P.CAY..\..#........`.V..d....9.;.n.\8....o.c\../`0..n.8..}H........Q0...'..ZA_....s..q...h........Q.y..........V......>.3..:.>..<.._.#........./.[..}ng...l.w.a...=..J]'.l.^......m.\......\.0..tk...^......s{..K.l.p.......FzfN.y..S.....B~(...........t...O...}..q. .3..+....^....o.Y .......?,X...S....e..h.f.;....../...U..\{;._.m.Ft...i...Pw.].4]oq..>?...6..."W.Es......:.G....}..E\|.U....G?E..Y.....a.7.D:...?......[,...V...............N.K...5........iN.X.:..J...~.....rf..l.sW.l...{g...........iy...PV.....u....22.H....#(.w....Zq..f.o...s....y.......[]]..........C...n./.w...u...o.W.S..E.>r@w......f..Ga.n......s...wx.+..K._..S}....j...{wd.?.y...@..=[...s..zs2..F...MUW....!g+0.>Js....&8..C.......A.......m~.x..o.r.../.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\encodesanscondensed-bold[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 70596, version 0.0
Category:	downloaded
Size (bytes):	70596
Entropy (8bit):	7.992124290610587
Encrypted:	true
SSDEEP:	1536:uHsmb+/BmrCSStlF8kfpKhtTJvAiEK3rcwKcRK/9kS48:u3b+aAHF8yKhtFvAi13+2AiSr
MD5:	1CA756A9691BD7FAB6B37D5B4CFCD1CF
SHA1:	8762A8E359C72FCFF098468821E70B3240C2CF10
SHA-256:	795CCCA3255FA08FCDF3F55BE7D69D9D8D87234D5EA653C0074F7AB48676A382
SHA-512:	8B214F2827D0191185DFF85B929D0D0BE1804642ACB4540EA23DB47AF884EF3D990E2B27AB07BA84272E2CF1D7551EC919690268CA5192784ACC095D7226BB45
Malicious:	false
IE Cache URL:	https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-bold.woff
Preview:	wOFF........................................DSIG................GDEF............f.f.GPOS...d..)Z..s."x.~GSUB..+.......).s.bcOS/2..<....R...`s..cmap..<.........2(.xcvt .......]......vfpgm............vd.\|gasp................glyf..C.........T..thead......6...6...Jhhea...... ...$.X..hmtx.......s........loca...L...,...j.f..maxp...x... ... ....name...........t..{post........../%UFT.prep............s.2x...+........r.I.1.&.Jb.....7.......".Ia...]z....7I2.C<........&."i!68..\.Knl.[{....ak>..?.WcH..Z..6....W.....>..C}..A1.m[.=..=.+{.O.9^l?^. ;.w..l....^>. ..$r:.m....\F...v-.l.....nv.{...;)..x..y.p.Uz..~..F...^.Mn1...{eCt.4nS.b.....e....2..i...;u.._t.e\d\.X.c.u.-u....c...Y.+...M.n...v._.}..;1.YV....w....9.9.<.9'..E......D..z.....Z..&"..D..H..wq.u..P...[P.y......n/..n.]....*...n......./,.7....^...RO.b.&.t%....0.F..G0.E..`.....X......L....e.>..P.......`..&.&O.l7.....W.`...h........&.&.LV.....&.\d.N...........M>a.i..\o.5.o..nr..F......W.U.}._1....E.b4..Z.s:fb..(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\heart-month[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
Category:	downloaded
Size (bytes):	38518
Entropy (8bit):	7.9666917785850115
Encrypted:	false
SSDEEP:	768:8CZFzY4kWAMvZ52+a+yUXBfYKBEOnguKIieeHSg75ncf:J3zY4kWA+pafKBEOgcix7Ra
MD5:	138058CA58F83B75F25F09454E7BF9BA
SHA1:	AD842387E5B44D3B08EB30A63E34D558AF87BF83
SHA-256:	F677978867311882735247A034E6A16E237992510302412FC3F1FEC723586246
SHA-512:	BFF4792ED6174E3CD7739300F460F66BDE930587202D11E26BFE21E8551DB7576C098210455F76A96124EBF3FA5DA65C80A7CE0D146CC061DCD523E6A356D116
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/slider/heart-month.jpg
Preview:	......Exif..II*.................Ducky.......<.....mhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:994155DDDDD4E5119D159C69CFEA293A" xmpMM:DocumentID="xmp.did:ADE14043014C11E8A225EFB984F909B2" xmpMM:InstanceID="xmp.iid:ADE14042014C11E8A225EFB984F909B2" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A0E157214C01E811B0E59950AED94F4C" stRef:documentID="xmp.did:994155DDDDD4E5119D159C69CFEA293A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...............................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\icon_flash[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	607
Entropy (8bit):	6.150874141816269
Encrypted:	false
SSDEEP:	12:+4fBVm3RLxgpY2CRBs1XGeozZtLTnsO6RSORKPwcXxBmG:+WBMhL+psRy1luXHvs04CBh
MD5:	F39970CEE0E709A2C6225C686E877E23
SHA1:	37193D45B1BD8C7B81F2B50B5BAF80DC3DFA998D
SHA-256:	74F8DF3D7341D6CD60F342F3EFD6433FEA89B34AB60BEBEE6EA17AD728B05360
SHA-512:	BA3AF5CD5A886530C2AB81B7EC6457FE3ECB842F9A552A199D55120F340F705AEDF1759C90203ABFF2B97FC7297B5FDBC98A6C11A3EA473E514E238E78C25E56
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/icon_flash.gif
Preview:	GIF89a.....R.......................<A.JM................[_.......tw.......up.IL.~x....xs.\|v.<@............`c....mi....rm.`a.............WZ.HL.......xr.............eb...........\|.......@E.QV....9?....rt....5;....xz.......?D.JO.\[.WY....:?...............................................................................................................................................................!.....R.,............RR PO.......PKNQ..K(..ON......Q,5.ROQ.L.4%..Q......L7$6..A.QO.Q3H.).....D..=;.BINK...8."G.10Q..+..O......ML.....-.<..LLK.&.#9C'68q...}O\|8(".G...#.Rq .....j..D.../x...K..&#y1."...D0.@)...;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\jquery-1.2.6.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	55805
Entropy (8bit):	5.229448793359489
Encrypted:	false
SSDEEP:	768:0csXS2yYCzATBLK88E1o2z33c8yrtz0GBU3+ySk+f1:0cs1ySToR2T3Fyrt0GBG+Nk+t
MD5:	3D5C23458FF980BD76BEE32E76FAAC86
SHA1:	FE16C08BCEF433F057A253330C3548F46F2DFECF
SHA-256:	FF8FE30E152C0EDDAABEB0738FD227DABB8BF538773A7D5E58875C49B53A4A25
SHA-512:	872FCF4EC4BC114CFCECB16DF3352DA7E9D28B0249A7950183DE8CD90D99BDC4103B126976E22CC3D711019058AEC4282D12A4E3489F2111C68CF0F79637EEC0
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/js/jquery-1.2.6.min.js
Preview:	/.. jQuery 1.2.6 - New Wave Javascript.. .. Copyright (c) 2008 John Resig (jquery.com).. * Dual licensed under the MIT (MIT-LICENSE.txt).. * and GPL (GPL-LICENSE.txt) licenses... .. $Date: 2008-05-24 14:22:17 -0400 (Sat, 24 May 2008) $.. * $Rev: 5685 $.. /..(function(){var _jQuery=window.jQuery,_$=window.$;var jQuery=window.jQuery=window.$=function(selector,context){return new jQuery.fn.init(selector,context);};var quickExpr=/^[^<](<(.\|\s)+>)[^>]$\|^#(\w+)$/,isSimple=/^.[^:#\[\.]$/,undefined;jQuery.fn=jQuery.prototype={init:function(selector,context){selector=selector\|\|document;if(selector.nodeType){this[0]=selector;this.length=1;return this;}if(typeof selector=="string"){var match=quickExpr.exec(selector);if(match&&(match[1]\|\|!context)){if(match[1])selector=jQuery.clean([match[1]],context);else{var elem=document.getElementById(match[3]);if(elem){if(elem.id!=match[3])return jQuery().find(selector);return jQuery(elem);}selector=[];}}else..return jQuery(context).find(selector

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\jquery.jshowoff.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	6579
Entropy (8bit):	5.228753253129017
Encrypted:	false
SSDEEP:	192:O10Rasp42ZbGDt2rflgINP/iVxQTA39KyJArB:g4pjZiu3/iv1t8B
MD5:	AF1015158867ECB3BC8B923ABA626215
SHA1:	DE5FB1BB2BF305F070A706DFBEFF57249753ECF3
SHA-256:	F40473668CB3C72EF3AC8EDDC7945A672DFF271BF54351F639E704FDE2101237
SHA-512:	FB6BE27AA9899FA322A971C11E8BFE248D5E66B7FDA37952372E45E0F7859FE26CB80444B63850E55BA70943FAC3E0CA39838114F3166D01EDAE0519617EB26D
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/js/jquery.jshowoff.min.js
Preview:	/....Title:..jShowOff: a jQuery Content Rotator Plugin..Author:..Erik Kallevig..Version:.0.1.2..Website:.http://ekallevig.com/jshowoff..License: .Dual licensed under the MIT and GPL licenses...../....(function($){$.fn.jshowoff=function(settings){var config={animatePause:true,autoPlay:true,changeSpeed:2000,controls:true,controlText:{play:'Play',pause:'Pause',next:'Next',previous:'Previous'},effect:'fade',hoverPause:true,links:true,speed:10000};if(settings)$.extend(true,config,settings);if(config.speed<(config.changeSpeed+20)){alert('jShowOff: Make speed at least 20ms longer than changeSpeed; the fades aren\'t always right on time.');return this;};this.each(function(i){var $cont=$(this);var gallery=$(this).children().remove();var timer='';var counter=0;var preloadedImg=[];var howManyInstances=$('.jshowoff').length+1;var uniqueClass='jshowoff-'+howManyInstances;var cssClass=config.cssClass!=undefined?config.cssClass:'';$cont.css('position','relative').wrap('<div class="jshowoff '+unique

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\jshowoff[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3468
Entropy (8bit):	5.130714868268042
Encrypted:	false
SSDEEP:	96:gxhTzrJZwi5n3ao8FZpNNNisHrymo4dG4QjRk1:6TvJKi93ao8OHez
MD5:	EA8F627844489B0D84EA383588E13730
SHA1:	D86649EC726D7009B075FEA0DD76C87B73F28857
SHA-256:	28BBAE52F137499A252D25447764FB3A84EE0E6A1C46406C3A62B5E494A6BBBE
SHA-512:	F43F917A7B1E9B32D77017E1A37BD46B463CA829E304C7DAC29459ACC624E22FD7BBB7DA1F34AA211A499621BE92094B92BCD0DFB72132950DD39065E0498787
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/jshowoff.css
Preview:	/This CSS is for the home page slide show script /....img {...margin: 0;...padding: 0;...border: 0;..}....#features, #slidingFeatures, #labelFeatures, #basicFeatures, #thumbFeatures {...background: #efefef;...position:relative;...overflow: hidden;...width: 515px;...height: 250px;..}..../* These are used to round corners in Chrome and Firefox...-webkit-border-top-left-radius: 6px;...-webkit-border-top-right-radius: 6px;...-moz-border-radius-topleft: 6px;...-moz-border-radius-topright: 6px;../......jshowoff {...width: 515px;...margin: 10px 0;..}......jshowoff div {....width: 515px;...height: 250px;..}..../ These are used to round corners in Chrome and Firefox....jshowoff div, .jshowoff img, .jshowoff {...-webkit-border-top-left-radius: 6px;...-webkit-border-top-right-radius: 6px;...}.....#basicFeatures, .jshowoff.basicFeatures, .jshowoff.basicFeatures img, .jshowoff.basicFeatures div {...-webkit-border-radius: 0;...-moz-border-radius: 0;...}..*/......jshowoff div p, .jshowoff div h2

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\lg-screen[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	44485
Entropy (8bit):	5.189370576255165
Encrypted:	false
SSDEEP:	768:Xx6ueLyHrZ8gibyGuNDxM5471agocPo8/XJNrJuJeM8vpozzClIQFigfR5pjlrkD:gCiH8zoCW3
MD5:	DAD356F86F56E708A1C5FD5E7CB84AD8
SHA1:	FE76597102EC78611A459C7FCA92EA8CE25CB8F3
SHA-256:	982D717A4E58C664E5FAC75EE42D3DF8C7944A91F9075614FA5738E0477960DB
SHA-512:	2C8ED8F722D97FF144ED2BDCB6E36A5BE61A8F72A9227BBAA5D051AAF73504DEBAC7D566125AF77F47FE58792F7DDCC57991C50664A38E7E94D0D77559193AE5
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/lg-screen.css
Preview:	@charset "utf-8";....* {..margin: 0px;..padding: 0px;..}....@font-face {...font-family: 'encode-cond';...src:url(https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-medium.woff) format('woff');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'encode-cond-bold';...src:url(https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-bold.woff) format('woff');...font-weight: bold;...font-style: normal;..}....@font-face {...font-family: 'encode-cond-black';...src:url(https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-black.woff) format('woff');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'open-sans2';...src:url(https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans.woff) format('woff');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'open-sans2';...src:url(https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans-bold.woff

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\mcm-logo[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 150x79, frames 3
Category:	downloaded
Size (bytes):	17436
Entropy (8bit):	7.969509409078188
Encrypted:	false
SSDEEP:	384:EqoYu66PdIkt3rziZM3jzl9sQ3YRYsAfSjebHrm2eG0bUNs/WxZfzCIC:9UPdIcrzyM3jzPICfSCi20oGexlzCP
MD5:	E561CBE87F6A44380263CA3ABB7C1E2C
SHA1:	DDD632CDD5F527DDE481A3FED8A2888E08D59045
SHA-256:	AFB1AB303CA752AEF90361ABF3F0357B6A84E7B99FD6A8540314A8B737BB9285
SHA-512:	AA4A0E08183659214E004A633FB88145F4ABF672A758F5C50107E368DB077D545FB1AEA91061D47075EF0E31A112DA0B8A9AA9FB1B3E5C90F29001753DA2643C
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/mcm-logo.jpg
Preview:	......JFIF.....d.d......Ducky.......d......Adobe.d.................................................................................................................................................O.....................................................................................................!.1.AQa"..2B#.wq..r..4t.78.b3..(........................!...1.AQ.aq".2B..5...R.#.t..br.3s..$%...C6.c..d.u.7............?...Y..:.f9.c1...u..s..c.f3......9....\|:.R....Z\|"......N....._R..i....f.p."..."`V....w..L.. .U.i..'#C...AT...k.\|.j.8.{...y..3B.:.......Uj.1E8.7.as..#e9.6.I..jjB..T$eRh.>y...5W..6.f..H....-W..+.1.>..[.S..L.t....e......v..JH.....6+..9R.m..)v.;{..m.(H..B&..V.$.......B..9...5.-.\\].ZI.q....H...2.s..~...U2T..K.#.o...MS...z....xm.3.-=.)a)N......b.."PT.A\.Sa...$..m..8"..Q......Z..r`r...8..KdY.&..N....kJf.O..w.E.[.0...X.}.Z.b..e.$..oO...S...SI.[\...y...m..,.p'+...~..m.g.Ywk..m#Q Ed.u...*u.......k..E%.r.....L.[._....V......y.r.......]2.l....5<....x

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\menu-triangle[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1725
Entropy (8bit):	6.010293208125424
Encrypted:	false
SSDEEP:	48:2/6r11L4knA9WIiRw5V/c0871a3h3b4HHRy387KVH6p9bs9:2SB6knmWIiK5V/wCVsHR+VH6p9I9
MD5:	79F1FE2A0BC31410409C9DFCC2F7E76E
SHA1:	0927D2E088597BC195FCBC2C4638151B5F4A425A
SHA-256:	53C79F3AAE1173AD214BF0D3AADD33D3D83A595BAA45332B4C94110416B884DA
SHA-512:	8051C3A6B20B4ED91F45F02E785971E524C57A07C18D562E3F356BE8211F279095D43999572B79AAE1A96CB545CE70F7525738C1801B3A9379FF28EEF84F4FDB
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/graphics/menu-triangle.png
Preview:	.PNG........IHDR..............H-.....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)" xmp:CreateDate="2020-03-12T14:30:24-04:00" xmp:ModifyDate="2020-03-19T11:02:12-04:00" xmp:MetadataDate="2020-03-19T11:02:12-04:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:52004830-5682-c041-919c-d66e2f27fcfc" xmpMM:DocumentID="xmp.did:ac96bb68-fb65-3e41-88dc-3c50d73e6f15" xmpMM:Original

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\office[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 300x150, frames 3
Category:	downloaded
Size (bytes):	16557
Entropy (8bit):	7.956386766435145
Encrypted:	false
SSDEEP:	384:4/65fha80xWNegyyZioAFikUkJarKhSH/PiLwO9l2u6pb:1tU8yWNegXivF/UGITBO9h6pb
MD5:	D8CDC6D6E056F4A1FEED452196E47D89
SHA1:	E10CE7AB1ED5ED55BBE46EE18C2BF9DCBAEDAB32
SHA-256:	D803225F1F2A6E5B267C8DCF448605D5F7122DD30FF37FAAAC185E044FA291C2
SHA-512:	281DE0385296DC0C319ABF5FBE691BB346953DB1058726BFB631C4D4EFB11FADD77DCA2583BC21D177E85E3DE0028083B3CE4CE10646C4DDD2607E96F83F47D0
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/about/graphics/office.jpg
Preview:	......JFIF.....H.H.....C....................................................................C.........................................................................,..".................................................................................\|..v.R$...\|.$.I).9..#..$S......WI.n..Z} ...<..6Wp.%[.\|0.S....Z.%.w.H.R$..$=.ZM\I..8....zd..l...x...Z..0o..z.<..V\...\{..H.loC.)._.4:4[..p.m%...R........%v3V.L.X.g.83A..#r.Ul.o:k.y..../x?=.$.K..e9.X.\........yZO.=.\|....!7...qD..!.W.[..1.a..ua.C:M.n.j.u...7....Pd/.{.0..Kf.....3..dz.....+..S.0....m.8.w..5..W."..=..EI.1..l....O$...J.c...........].HX4.4t.F...t4..B....Q..-.p.k..5`....z.n.._T.}.........F...^...k..v.px....c.;"3G...&..k..]I....).([~..X..EQ.y...p...h.O]..............+..W.......1..o8.&....c+...0.Nt.!..5.^lS.#}m.Z..8./...M..QM..H`x...I..L!.MMd..]...%...N....$...H.V...\|W .:..}.AE...)7.I..+.XH....sa.A...".T..m4..@un...=`.&8....4...no...M3.n..N.pr.....Q...."].Hs.Y.s.n..n.q..v.."v.}...q.2...{0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\print[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1015
Entropy (8bit):	5.201179617626621
Encrypted:	false
SSDEEP:	24:Po1/EPH0dRU5PNRxYIpm5t16DRW3BT/jmHTnhcJ1DA4hipBf+v:PoqUdS5FXg1D3B+HTGLAK4p+v
MD5:	32C7EB2120D98C96C282E7A824E7694E
SHA1:	7CDB846962FC7D84DEDE41B922AF71AB8E652134
SHA-256:	9136B91FAF455180E6E18CB97C04C2B79E812DA891B83EB84E30DE87E7BC108F
SHA-512:	7A210A3F212E7059D24174C35D4C265B5834CA820F34D51369FC194C21F3994CEC16A3D8A13978EA9D4A055E94B3104480BE3AA949128B5108B77568B2E6D7FE
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/print.css
Preview:	@charset "utf-8";../* CSS Document /......../Reset Style/..body {...margin:0;...padding:0;...line-height: 1.4em;...word-spacing:1px;...letter-spacing:0.2px;...color: #000;...font-size: 12px;...font-family: Arial, Helvetica, sans-serif;...background-image: none;...background-color: #FFFFFF;...}...../Remove Element/....nhgovheadercontainer, .headerNavbar, .headerNavbarDS, .agencyheadercontainer, #google_translate_element, #addresscontainer, #leftsidebar, #rightsidebar, .footercontainer {...display:none;...}...../Show Elements /....contentnarrow {...display: inline;...}.......pagecontainer {...border-right-style: none;...border-left-style: none;...}......../ Show URL /...a:link, a:visited {...background: transparent; ...color:#333; ...text-decoration:none;...}......a:link[href^="http://"]:after, a[href^="http://"]:visited:after {...content: " (" attr(href) ") "; ...font-size: 11px;...}......a[href^="http://"] {...color:#000;...}...../Break Page*/...#comments {...page-break-befo

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\sm-screen[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	36845
Entropy (8bit):	5.191778062616621
Encrypted:	false
SSDEEP:	768:cx6u65i3b2rZOcDGoiXVGudMsi71agocPH8/KXEaIJNrJuJmM8vpozzClIQVDGeY:XiS8nokclL
MD5:	110D28B964599E5C1D4374333CCD4A28
SHA1:	3ED13E84CB7C8592C5F6F4FFE46C4C4F7D526A4F
SHA-256:	3F16367310BDE403841A1B9789F42936DE4B27A113821BBDA9921114B00B2C72
SHA-512:	78B69D8F6AC604AD07C52F5E13A7CE0F3270FC42023DD3E49EC901D36CCDD61460DFED35021A8D215CFCF63FBEC8597D66F971B95F67D2E520040A0B9771C8DC
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/sm-screen.css
Preview:	@charset "UTF-8";../* CSS Document /.... {..margin: 0px;..padding: 0px;..overflow-wrap: break-word;..word-wrap: break-word;..}....@font-face {...font-family: 'encode-cond';...src:url(https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-medium.woff) format('woff');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'encode-cond-bold';...src:url(https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-bold.woff) format('woff');...font-weight: bold;...font-style: normal;..}....@font-face {...font-family: 'encode-cond-black';...src:url(https://www.app-support.nh.gov/nhgov-fonts/encode-sans/encodesanscondensed-black.woff) format('woff');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'open-sans2';...src:url(https://www.app-support.nh.gov/nhgov-fonts/open-sans/opensans.woff) format('woff');...font-weight: normal;...font-style: normal;..}....@font-face {...font-family: 'open-sans2';...src:url

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\state-seal-20perc[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 290 x 272, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	176189
Entropy (8bit):	7.995265529394209
Encrypted:	true
SSDEEP:	3072:Zg6TSbZaVpaMWowoFTELiokiPI2emGUhu30Y0gYl8kSpECwHImBwLP+IgLsIE7hl:ZDTSKaJoT/HiPI2WKxsQ1BO+Igrio0
MD5:	0B20ADAA7A352B28E7094F9CBD58B18B
SHA1:	0F8210B0491CDB022CA8E150A15E6F5793CBAA65
SHA-256:	E39A2FA14D90DE7F6FC614EFFBA41A5A523295DE9497F28949FAD44F30985FDF
SHA-512:	F40C9708761F96816167290255CD1E4C25E6764FA31544ABEC0CC5BEE8A2AA8EFE89705436CC2784619BF2351493FC1B69C9427C3C157FF1909F924B05F7C6DC
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/graphics/state-seal-20perc.png
Preview:	.PNG........IHDR..."...........y.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..w\|.U......%.9.FB..R.....b..;vQ_.b...`.A.D.....jzo'...k.9I..~....._o...9S.^.Y........o_.$......w.&..?....d.b>t............._.N....2D;&..p...(..CX..@....Z....`{U!.W8. ...3"R...._C...W.......(.p.0...... ]..1....&.....c..m8......Y..t.f]'DQ.....;..Gm...V#'...e-t.n...o...2.{...Ep.........4Cg.........9..x.P.". ..d.&.......cxr....-.=.7Z..Cj..f.....`HB..\vQ)...9d:..e.v,\|.^4...:.....W_.....kTP...-...w.}'.6[ut...p......'a..CoMD....o..~......!..6........UP.W.Y....$HllEz....D.5#.G.....Y.(...4..DzMU.m\.?...+.&.$~......o...#..{...v..-......)."mx..=......Ct..H.Ev+to.dE....t.......=..3.~..'f.....BX.......c^.8.."H..4.Xs...<..n.......Y.A..yF.N\|mF.H...5!..'n~..L..C0Hs....j%#.\|.....m....K..A~.3+._.&C...8.V4.....S7...d.....k.p.x......-.1#.>.:cf......o....F../..{W..d.......4.,!......W..G....).l.U2..&.\..'.t..Oq.......0..').....~......{.%..n..`u.N...R..........Wgo...0.m..y8R5.n_....Y

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\trirong-bold-italic[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 104636, version 1.0
Category:	downloaded
Size (bytes):	104636
Entropy (8bit):	7.994372920279513
Encrypted:	true
SSDEEP:	3072:UFMAyAJh4p6VbL0JGHXmAIaYH1lgIReZK:rAyAf4p6VHMG3FfYVpReZK
MD5:	B319D127DA5E19FFB74114611F565BA3
SHA1:	E679B91CB5E993D3F22FC6157DCE53961E29625E
SHA-256:	69CFCC5923557F154D05913A99D8A42349473C90591FCBB014E2D4049C1303B6
SHA-512:	C3B82228A2F0B36B43E8AF5AD5F986CF8B2631EEA96AB20C3DB4D1325CB86B39629A83426AE76430FB323EBC309C00BEBA66479B6453A010C2D3F017DA4D1CEB
Malicious:	false
IE Cache URL:	https://www.app-support.nh.gov/nhgov-fonts/trirong/trirong-bold-italic.woff
Preview:	wOFF........................................FFTM............q...GDEF.......z..../.-?GPOS...,...F..0BU...GSUB...t...p....6.j.OS/2.......V...`_...cmap...<.......N..8=cvt .......f......:.fpgm.. `........?...gasp..&$............glyf..&,..E....0..head..k....4...6..zIhhea..k....#...$.K..hmtx..l..........\|..loca..q............xmaxp..y.... ... ....name..y....}..7.C!].post...P.......X.<..prep............?.z..........=.......U.......j,hx.%....a.Dg..xQ...D4.~$.........b&g.....i.MGMY..U.........s..7..'....aFJ......c..5/..K.Y.}...s..^...........\|..g"b..x..y..U...9.^..^w.=.Ig..1.$...#..d'd....h^.(tF.....g....[J\...Z...........;....B.R..b&...s.{..5.N..k..w.{.}.......9...-"..Cn.....m......t..-...rIqU...w....o..!..o\..q=..j....I...n;"#...;\|..A..+.:Z.w.\.....~.Z:.w.?3..3{.:.9.Rm..+.y._;..gm..R..:....[.....Q.m..557.U....0..x..I...b..sE.4fZ+.-......tQx...<...,F..IcY..gZ.p.aTfU..M...6..7...L.-...w..T......o...........o...F*.q.(~Y?.8c.y.Kv.z.]..Z...n............c...$.}.WW..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\trirong-bold[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 92188, version 1.0
Category:	downloaded
Size (bytes):	92188
Entropy (8bit):	7.994132078924214
Encrypted:	true
SSDEEP:	1536:oj63PgyTzsCtGbDFZy+62kHiyk1QVeomuttkSV5j6rmLW2y7Mvqmy6BimyqCDgzc:oWthABZy+Ebk1QJmunvWysoqmDQmUgzc
MD5:	D06A96C19D63EEB1ECED3019275A55C3
SHA1:	2D67881AB1B55AFE06F30C3A319D1A171BDA9D00
SHA-256:	D00B15BE78ED504B4A71B0EB09A634C79D8722FD7D35487B4E4B50DD8619FEEE
SHA-512:	E17224EF3B7E323888E041B2DE4C5CE8F7BB457D8D66AA1582BFA3D292ED83EE9FB852ED6446FF9E71B2644D67370D6BAFF23634B09D79DB248FD77DDA646150
Malicious:	false
IE Cache URL:	https://www.app-support.nh.gov/nhgov-fonts/trirong/trirong-bold.woff
Preview:	wOFF......h.......(T........................FFTM............q...GDEF.......z..../.-?GPOS...,...-..0F..QGSUB...\...p....6.j.OS/2.......T...`_...cmap... .......N..8=cvt .......e......;.fpgm.. D........?...gasp..&.............glyf..&....M..qHs9..head..;`...2...6..zMhhea..;....!...$....hmtx..;....Z.....:.{loca..A.............maxp..H.... ... ....name..I.......8...Hpost..[........X.H..prep..gx........?.z..........=.......U.g.....j,]x.%....a.Dg..xQ...D4.~$.........b&g.....i.MGMY..U.........s..7..'....aFJ......c..5/..K.Y.}...s..^...........\|..g"b..x..{..U...9.=..N...I&..;..B...$$0y.B................U..8K.".R...5K...?.e.[....1R...".bz?.t.LO2....Vm...s.........s....F..I..Uk7..{.sH...=..RIqU.E.w....o.....]....u...;k0&5.o..8...2.........h-..s.2.k3..k.....7{}:..F;.Qj-.{D3..kG.Y...l....j.4.h.5...DS{...h...y..>iH..\%.f,S_.Q..U....+.>.j{...z..,.,C..+...BfB..z.. ....._+xG.PC*.AK.......T....[.........;....CA_.KR....>....b.l+.M......r.. ..\|.\|.\|.....'...y]U

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\trirong-italic[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 97836, version 1.0
Category:	downloaded
Size (bytes):	97836
Entropy (8bit):	7.992812856165301
Encrypted:	true
SSDEEP:	1536:oztrIeRrHfnKXXlmskBvETVgmHT/TKzCcOmbhSszaetnPO+MyaRw4WT6z0YN/S:otEeR/neXrkq/THclzaetG+MRZOY0YN6
MD5:	8B9E98B92DCF4E9A700678A91745C669
SHA1:	6B40C2B9268FB260AFB3C294E77AF47968FE7356
SHA-256:	F9B1A7B8D47D2D7324A13B088BD6CCA6ED4B8BB105545F0F2E00D0FAA46484E8
SHA-512:	0473F5F4EBF3532DA731759A4364E2CED367D1713A05A6A244AF39C520CD1A53F7E43778DB9B36E174BCE51ED646F9F26E49AB9FF898EDB364882402F5A4D529
Malicious:	false
IE Cache URL:	https://www.app-support.nh.gov/nhgov-fonts/trirong/trirong-italic.woff
Preview:	wOFF......~,......2<........................FFTM............q..2GDEF.......z..../.-FGPOS...,....../....GSUB.......p....6.k.OS/2...\|...U...`^...cmap...........V....cvt .......b......9.fpgm............?...gasp..%.............glyf..%...<.........head..a....3...6..z4hhea..a....#...$...thmtx..b...........(.loca..g.............maxp..o.... ... ....name..o........8....post..q........bf7..prep..}.........?.z..........=.......T.......j,.x.%......Dg....J%.h(..BG.......s...Mv......ud..@C...+W...^y.....K.r&.....r..\.[..)J.e..V...5......;........."q..x..y..Gu._...cvg.`u.....,dYWD...iY.V.-.....!@ Elc..R1.L.6.l....c.%(.^.C..."..2.......-.Eh..7...vWK.JU.......~.......{W....Sn..u.wJ.C.<!....CGd.$....FKb.[vN..[.mF....w.\|g..D%q...NH..C7....G....vEL.....K.X...-.2.q{...NZ}nv.T.;.S.4.^q.w......K_.....6]{0}2.\]k.L:sc.].'...B..B.d..t,c..+.=...ep...=..D:..Y.....'c...ed.<....~~..[.5F...c.......~.........z0..A....k..w......G.{.~....e...S.6i...n)..V..p.. ...08......=n]1.:..b

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\trirong-regular[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 91200, version 1.0
Category:	downloaded
Size (bytes):	91200
Entropy (8bit):	7.99415993124143
Encrypted:	true
SSDEEP:	1536:8cemqsJMY88ViCR23M/yu4EUfM7gss4QOaRAUYQZJthAVA8Pu1Y2PxcFWE:8cemq8Vx23OyAUfM7gstQOjAHth4AQuO
MD5:	E69DE951CFE0745B7DD409C22361ABAB
SHA1:	EF6600CB946058DE66822725CFC60F536925E9DF
SHA-256:	FE728B3EF76B93A90F08C48B3CBEA9E3652F70DEDA41192120AB87DB4EB3C207
SHA-512:	58486D3D089DCB5BC216036C402D5FDA723296BFDA25E7937A2565B84E1A3E2BEF839BA66A4FBE2297AEA8D19D3FF6922877998E6FDE909F4B9E2D4B03904895
Malicious:	false
IE Cache URL:	https://www.app-support.nh.gov/nhgov-fonts/trirong/trirong-regular.woff
Preview:	wOFF......d@.......<........................FFTM............p..TGDEF.......z..../.-?GPOS...,....../....1GSUB.......p....6.j.OS/2...\|...S...`^...cmap...........N..8=cvt .......d......:.fpgm............?...gasp..%.............glyf..%.......b.. \|.head..7....2...6.xz0hhea..8....!...$....hmtx..84...B....HO.Tloca..=x..........klmaxp..EX... ... ....name..Ex...Z..7..\.post..W........X.H..prep..c.........?.z..........=.......U&a.....j,#x.%....a.Dg..xQ...D4.~$.........b&g.....i.MGMY..U.........s..7..'....aFJ......c..5/..K.Y.}...s..^...........\|..g"b..x..y.\Wu..=.=.Y.{f.].i..hC..,.....bY..Z..b.Z.U..B.(c.p.@.S...,....6f..bYm......E...pM...pTB..=.z.#.H...}.;.v....w.....F...Kj...[d...o?,.o.....\.\.rY.].%...[:d.k.7_.....zg..D%u......C{o; ...8t@:..V.]<.(c...P..M...z..s]...9G...nnZ\..v.E...+...}.....aO.....7..6f.d.}.F......}5r2..5&267.F:s.<.W...P.3.O4.."KrW!k.elU.>7..\#.m."w....-.........lx..........Z0..........q8..Im.....Y...+.=..\.v.Sj..-...p'......\|.........[]...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\xls-icon[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	1060
Entropy (8bit):	6.5523064400854745
Encrypted:	false
SSDEEP:	12:WnfJ2E8aiGIb63CYUEbTzgCO7adD7qfDXSct4SmgoM5DnElf37Zan8wmD5MGznIw:UAtf0RX1O7atS1fhDEF37ZsEINS5zTq+
MD5:	3DBE760EAE2C284187D535C8A88D4AA3
SHA1:	512CFF45B5F642A453EB5E8FFCFC855E4CF8A587
SHA-256:	ACEB0FFCA43ED21666E999200E07E44CD3C3EF35BCC899393BC47A06825CA6B6
SHA-512:	E938AD3A944D45579E7EB1C1184DFCD3F55E5ADFECF2962512E6239C0AAB2FB470B4BDBA356C434F865AD54AECA4D5C3A2B78A59B24C98DAB5748FF33353FF60
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/graphics/xls-icon.gif
Preview:	GIF89a.............U..6k.c.T............6j..........3u.5j.......}..n.[5i....E.....].H_.Ji........W.V.....U....f..U...........U.....`.U...........d.P............t.]n.Y}..q.a..........j<t.H.:...O........\.I.........M\|.....tj.aq.]...H..b.b.....x......7l....;n.3u...............B..3t.3u....X.D.........Az....d.Q...h.g...Z..R...qY.D......e.WB\|....@w......k.a...p.h7x.L.....C..n.[...[.G...R.D......\|..u.gX.C7k......d.W...`.KF..[..@q....K..H..L..k.....I.2t..............f.Y..s...U.q..............A........i...........c..Mz.f.Ss.l....v..mE.6.............................................................................................................................................................................................................................................!.......,............e...H.A.">..S@.CY.........EhDj.....N.9Q...C.2pDcf...U.......KVd..@..YD....RJd.Y.....2f.X.d..Nwd.....+...q..D.Q.......A(T.8.#..G.... G.5I......#Y..H....A].X..@R.Y..L..gN.&G.y...O.....u.N.L.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\1000x100-jpg-header06[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x100, frames 3
Category:	downloaded
Size (bytes):	17925
Entropy (8bit):	7.961742262047726
Encrypted:	false
SSDEEP:	384:OnDrAMst9mJecX6TYfTLSNyB+bNU0fxhy4dZXHmHdNvh:Ovzst9uXz7uEB+bD7Lavh
MD5:	5A2DC4F484EF0A7390493900283BF3EE
SHA1:	051CBC0963BB50413B4D30F156B4C4356A82F924
SHA-256:	6BBDA937684C997DDE4E58722C1E6A3EF7850689E47F774E8B36FA02E5ED10F9
SHA-512:	E58C1CF2F2F30C11E8FC017A40B3B66E670B73B3BB88779D8A8235AC53FEC3A93679E09F949B4C522D82C34440311034EA38D116F3B9021FB803E227936EBC2D
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/1000x100-jpg-header06.jpg
Preview:	......Exif..II*.................Ducky.......(.....)http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:A3E037A50DB911E4B50BCB33DADB8763" xmpMM:DocumentID="xmp.did:A3E037A60DB911E4B50BCB33DADB8763"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:A3E037A30DB911E4B50BCB33DADB8763" stRef:documentID="xmp.did:A3E037A40DB911E4B50BCB33DADB8763"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................$$''$$53335;;;;;;;;;;.............................%......% #...# ((%%((22022;;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\button-glencliff[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 149 x 121
Category:	downloaded
Size (bytes):	16961
Entropy (8bit):	7.722181974036868
Encrypted:	false
SSDEEP:	384:0afxFf87Kr6PQeaKHSYheY+oLey9TuVnCLQoWql8cr0a5mI:tf7f82r41hevQru1o5rbUI
MD5:	C39C3037DA3701E35E53688A1BE5D566
SHA1:	D7CEF2CF7147252F060E80939F18B4557903129A
SHA-256:	1DAE627C236A85D5A1C4E0B5BDC8E8D086A0A4BD613670E75A9AC6FB04D702A2
SHA-512:	4C8A2B3AD40AA7B58D97D68E0946506D7C899A70F6B592564D651B677C2D0A4F8D527549C89DCEF8F08A05702450A29F022F6FBE13AA9D60F61D2B379066155F
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/button-glencliff.gif
Preview:	GIF89a..y....M7,..K...nh5..........VVVzzz56%...kV3y.O....{rMK..V$).......[.......n7FEFefe..Y..v..a7F+...1!...FF5VY6...%)".....X.L.hh.QN....yYe6..........j...994...wwvE.{y..a........?XWG..w...DC)GU5.srffD....zD..l....zT.... ....R3.ss..f......zyU....giZeDZG5..I...W[_...=AE.xB.....G..b....j.\|......ujD..cdcW...[:@vwi..v.{..e...iuBwgg...fiq...{..m:..m...yt.\|w....43...GQ+79F.xx..u^`bSKF.....q.rjVV+....k..i.kh...n[d.{Z...dC.zAIKQ.>E.uiyx..$ '.....OQR........UH)4(#........y.wd...iU.ut..irg..c...i.Q3uhU.......k.zD.NL....a:...%.%...mo........"..P..d.]`&%/...........,21..e.M....{{oss....J....vkqkt.f=.zs..i.......b\MRA...lsW....RWKX.ns1+0................s..K...........I................GB.......]`........................................uv..D......!.......,......y.@.....(@..<x..\....#J.H..E....X..G.....@.....x..f.&........ ".....##.E.Ae..M..hi1..1...2.D.%.-M.i.G.H..{........&.rQb..G..h*.j...Z.Q."...s...........!.E..5.......{&.H.....%..S0.....>..Y....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\button-nhh[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 162 x 127
Category:	downloaded
Size (bytes):	13794
Entropy (8bit):	7.8213130255442085
Encrypted:	false
SSDEEP:	192:DYx89BJjCA890Z/K0B9Ljs7LtGGv/atK++BELUzaYIoSJ82s02Wkv9M29kAL3g:D6aJjC7wPjWLtD/h++BEgIvq2sMkvn7g
MD5:	8DF72335578FD65D2DA9759530E147FB
SHA1:	140CC7ACE1A5883659674FA2679C47F89B744412
SHA-256:	2790E88A1BF3D336DBDD2200DF5D072A6B7B9BC64EA577AFF2739DAC924FC840
SHA-512:	C4D02AFCF99CF0CF50487F3DFF71153E634B2F0A0CB88E8F95DA535EF54C2E7199E3CFF898168AA2DEFA72221186A07C446E9AB6A9CD67E6E9984563D13BF9F8
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/button-nhh.gif
Preview:	GIF89a..........DEBRjo...7GI...Zt.........q..3F1...PiOu..h.l......BI:................lmm........5;6)5"...z.........#/.UVU...DYW......)46...dwyu..uzwi.........#.......h.........28(BWB..}H^f$)$.........t.........$$...bh]s....u../=AZ..tsm@=7`xc........^..PTL...........ANR..._mv..."-/...one...g..MMI.....y......l..\|.....0.(.....~~w...........^_ZP;>..............u.........U.....!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:929FEC153A1411E6A662F62ED57C5719" xmpMM:DocumentID="xmp.did:929FEC163A1411E6A662F62ED57C5719"> <xmpMM:Derived

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\calendar-graphic[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 170 x 126, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13037
Entropy (8bit):	7.9638596412762785
Encrypted:	false
SSDEEP:	384:7UUVbS3J79HLEmDVxE+i+HGWAXg0eV+V1fJkm1bT:gkbSTrDZx2+HJug0Y+ym9
MD5:	6452F1EC1866D5ED498BAC41660565B5
SHA1:	B1232C23FCC3A911400E6E6AB9437C14D20D72DD
SHA-256:	87D61DAD66681572B3AC12B40CC346BB37D0FFDB9BB83CCF9482C55CED44386C
SHA-512:	96281ADF7AAFB026E0824671ED1E6F04466CF919F772A78B1623F33C67609BEB9AC941548BE4D329FE1BFAFAE554B92AFA0B8D9E067DCCA2C87D86145712ABE4
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/calendar-graphic.png
Preview:	.PNG........IHDR.......~.......... .IDATx..w\|......i....)...J/.W@.C(.@..)6.zE..^D...(...E.....kTP.H.@.M...Bv.........$(...d..9.9g..y.3....?....?....?...g....\}..S'...=...~.......Wb.T.....%W.V...w.N..RR^EX.....~."...\..$.r9@(P.T.~....-Q...Rd.'.C'...G..j.......HDr...[.r.%...EJJ......%...RUQ.... .(.......-Q...OB]....K="a.?Q..:`..-A.N...D...k......+b.gyo.....b.p..\|..(/l.B....30.O}...O..a..g..$..0.........1.qa.......f.....8."..U...1A<ps#..G`... =+..K.0.#...4..t.j.W.~../j@.3..f.......}.Y.=.Ao.]..n....LY....({..MX.gbl..}p..Ub.R.{.c..X..(...5..#..p}W...m....U?`.. .a...'06.T.O.?k.r1Ag..R.%.....W...Li.O.y.......4..7....:[.+.6PXT.V+.......K.........}O...?}...7.GpL"_..d..S,{.vf.k./........B......8.Z.@.....Np.A{}.p.&=.&:C..ub...`0F8..f..ov.X.!..q.....(.C`mt].....<\|...IB.Z....U.'G7'.A3..tz....1.#..n...sW+...=.V.....q..&c0F...2i.O.SKJ..!,.6...T.E..M..k~#.Q..C . ..6..0Bb........?.......+.........`.K....av.DR.5...H?.....!$.A.......\.,......eb.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\covid-19-collage[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1170x283, frames 3
Category:	downloaded
Size (bytes):	143308
Entropy (8bit):	7.973656679323932
Encrypted:	false
SSDEEP:	3072:5Jja7cG6rjN0cASdhuaCN0d4GetkLDUD2eMoLr6/3cRh3sSuBKN3KFZ:y7cz/N0cDdhuBN0d4GekNeMoL2/2h3sh
MD5:	26C0D88A73DDAF3A968D1843E51C6089
SHA1:	92500765685752564704229DDB3DB920F017C295
SHA-256:	4580309A26E683FFC37F95E1C0F2B5A7F9CB3F786E9E03BACB0A69F7C6E1CCAB
SHA-512:	AEAB175551D97FF2F50B5406AAEAB71916EDFF6D817F3BB1E06E39F675F32A4F3D40620EF76A99FB770C0E9E25396A0997F43B9E4A71AD66B3E0740E6C36063E
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/graphics/covid-19-collage.jpg
Preview:	......Exif..II*.................Ducky.......K.....\|http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164352, 2020/01/30-15:50:38 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:74a41400-ae58-8741-a221-759c506f2baf" xmpMM:DocumentID="xmp.did:635DF94A6DF211EAA057FEC637C4FF70" xmpMM:InstanceID="xmp.iid:635DF9496DF211EAA057FEC637C4FF70" xmp:CreatorTool="Adobe Photoshop 21.1 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4ce68ec7-9ab9-3548-b2a4-74b238e8ead6" stRef:documentID="xmp.did:74a41400-ae58-8741-a221-759c506f2baf"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\covid19[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	21687
Entropy (8bit):	5.047664886846948
Encrypted:	false
SSDEEP:	384:uhnOw8I44Wq6yzCjAO9eF3SofwQRLcPbDjNlCy:uFOU5zCjAOQQQWDvCy
MD5:	0B60D9DC633A3261EC79768E730832BA
SHA1:	BEA2EFD5CB5389E478190C74DC952C6B26D66E8C
SHA-256:	3658E067B02ACE6D9E8150C278C7CDC593332EBC6D083D774F00DEDCFD9CF7D0
SHA-512:	A076A11F12BA66D6AC04FDB93D8E11F7BFF49AF319AD5FEA52A2FCECA6EB4B36871C2E351C27351F728BD982F8BCDF95EDCB1234AF9A3058B0BCDB2508E51C98
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/
Preview:	<!doctype html>..<html lang="en"> InstanceBegin template="/Templates/main-w-box-new.dwt" codeOutsideHTMLIsLocked="false" -->..<head>..<meta charset="utf-8">.. InstanceBeginEditable name="head" -->..<title>Home \| COVID-19</title>..<meta name="description" content="All Information on the Coronavirus Covid-19 in New Hampshire" />..<meta name="keywords" content="COVID, 19, coronavirus, New Hampshire, NH" />.. InstanceEndEditable -->... [if lte IE 8]>...<link href="/covid19/css/lg-screen-ie.css" rel="stylesheet" type="text/css" media="screen" />..<![endif]-->..<link href="css/lg-screen.css" rel="stylesheet" type="text/css" media="screen and (min-width: 730px)" />..<link href="css/sm-screen.css" rel="stylesheet" type="text/css" media="screen and (min-width: 320px) and (max-width: 729px)" />..<link href="css/cms.css" rel="stylesheet" type="text/css" media="screen" />..<link href="css/print.css" rel="stylesheet" type="text/css" media="print" />..<script type="text/javascript" sr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\cumulative-map-small[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 296 x 371, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	73630
Entropy (8bit):	7.993771788542376
Encrypted:	true
SSDEEP:	1536:bqWhE2FDOvSxWE08YCmDcsh1HfqgSUd5dUopmtN9w4sthdO01nD:425OvSoEWCOcsagxUoEtAm+
MD5:	F4B170A46A69188BAC5F80B18592576B
SHA1:	2617C9F08505320375D737A8D3B2DA57A93243DE
SHA-256:	4EBD24BAC47AFF2EECFFA9C724898BC23931EFB9443520287A5C4FB984BFF45C
SHA-512:	DD55310011D9B9C483C6C451AB7552BC4E45B24189CB89B40F24C74CD884F755894AAB7325388DA4C7794AA638591797299F853BF0CB46F6387EDB51E790EF94
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/graphics/cumulative-map-small.png
Preview:	.PNG........IHDR...(...s......N.-.. .IDATx...\|T...g..d......!D$`.Yb.....R.Z/.Z.Uj..b...+-Z+.V..+m.Zl.t... .l.U..% ..$!d_f....gf...D.....G23g.y....}..}.EUU..D".Ct.H$.pE..D".[.@I$..E..D".[.@I$..E..D".[.@I$..E..D".[..@y..p.YI6.E!v.d.8 >X.lEA...i....V.....^...h.Q..,l.Zv.}....0[A.^...Zm...f...>...,)m.M..E.F.z7.d...%.6...d4n.y.......e...X..-.;.^....+.0.w...[...Yv.........l......]q.o...I..5,..d..6]..u.d~.}E....l.lc..!..l..8xn/.V.k.(...l.M6....>.b[...Z.....ju....FQ.i~hM.l.~..ly.k..`.>.]..J4.]......}..V.u...a3...2t.?a...G..8..d;[?+...mo>..y[\......T%...6..e..xT.E..OW61......=.Bwo-....G..r...~%Lz.E&...{...UE...{m$0...^/.......7%.V....d..\|.9.Q......X..zS.....u>J.%..j.^..>...7.i.G...0.......g2}.....5.6yJ..q.K....w....1....u.[..ES...rf~.@u\|.{.2.E.o{K......vym...:n.y..@^..\|.X....f.AC.....[u......L.#.... )..i.jJ+...n$^...w.H.>..#7..v..........*............./..G.3.L.?..tV=+W..........0,.G.....u>.5W^..~...y.q....o.....iL..m..1aB.V.n.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ds[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 3
Category:	downloaded
Size (bytes):	41
Entropy (8bit):	3.4960271529727103
Encrypted:	false
SSDEEP:	3:CWoflBlll1nE:ow
MD5:	45FAFCED0B565CC5670032533B890B13
SHA1:	91CE14BEAE79694AC4E4BAA8961E92F8BA54A2CE
SHA-256:	7DF51310F47487A4B39B74D302FCDE64FE1AAFCA56299E3D05280965FC659C5F
SHA-512:	C083B8EFF67F31D5D8A77E522A1E04DE0AFED525F1FEBE53DF9B8F88E46741CD05235007143D43286003F25624E7DF45E866317D0EA8874F62912D6E16E5275E
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/ds.gif
Preview:	GIF89a.......@@@.........,...........DT.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\facebook-btn[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1051
Entropy (8bit):	7.784068898473082
Encrypted:	false
SSDEEP:	24:g5+eqQVZSnL0wOkwS9VmIAcIKSrT1lW2dsuL:g8nQswSi1cWT1tFL
MD5:	6248318A2E3768B22BC34535B7E4AEF1
SHA1:	FB41113AB2C8D731648039C78D9C956DC73C6B05
SHA-256:	7B7E5063A7E9A1A8ACC87AC9529D33A27EF1299E08FE7E792704F824E19C39B9
SHA-512:	D4E8F7B6CEF0B4624FC9A0EB6C9D5283702FB34EC9A8DF332D2C3818AFA50AADB3DD45E20014315882C2AEFE886395BB9E77A71ADDDA994517C4351D3E664C26
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/graphics/facebook-btn.png
Preview:	.PNG........IHDR..............[....IDATX..]h.U...3.n..6.Y.M....[,)X...}..R.,.(.... ..R....l@..>X..Z...M...i.n.~dC.6.f..n.cf\|..v.3....L....;..9?.=....E$......... ..@._.]..r...~.#.h^.W.>7r".....xo.h$.+fv9GfA.X..w....].....UF...$I...1.+....Y..]..rGw.CO<Mb F...}..O.....&....@.a4..fuE&y...ZB.%_@.y..3<....{.J......2..-.#.H..$..!...W[U[.4...D#ADi[;....n ..CR.,.h{..9km..z...@.......#...d....}%.L.f.W:.....l.b.A_80.{.#<.;f.pi.7...."..H.}.[9.G^{..o.^._@..O.6<.}.'Z..pV..J..../.;f.r.a..9...M..}~.G.:...J~.......&%....s.>.[L...m..Q..=.Q.!.nl.4................'..m.....d:k..'.zJ]....~#Rr..7\|7._.:_....!v.........P.9...*..C}6Pk.F.9DTt..a9mOnl;D.5.Nrc..Z.j.....E..m.......W.%...Z6UM'.Z.k..tg..xO.....h.f{....[...ua...).^K....-..6.Pg.fp......]..=a2.2J.....i.\....Y,...e..1..9.r..Y.........nb F.v.y..;...u.W.ZfAf1=1.h..<....y..g....{6........M.s.?........}..w.....?.......l:.M...4p....ZA.(0..a.'waT.D...J..<p.H.WL.u.W1j.ku@..>.....b.M........>.%..`.O......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32x32
Category:	downloaded
Size (bytes):	3638
Entropy (8bit):	6.009925075904024
Encrypted:	false
SSDEEP:	96:Ojt6bYY7X9x0wVjcyvpx4GW8oAnUyu5o:OobYY7P0wVI8xL/Uyu
MD5:	819BA8DE904F2B86056DCC32A92874A4
SHA1:	5128B5AC8EC1CE19E81A928A516FDEE3C1DDA332
SHA-256:	5762EB82D249E88BAE39E8B719EB5F577EEA6C611313332721D7D3079C1ABB7D
SHA-512:	30A17BD3631201641F5D4AC42B327E7A18114ECD8CF54E56768BC0EFEE31FD11856BDFE13464FD69FAD1312F9FD6749B7BC63CE5A7EDBA640EA7E670AFBD3B60
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/favicon.ico
Preview:	..............h...&... ..............(....... ...........@...........................R...{....Is.B(B.....B}R.........{.s.s...kUc.)m...41.....1Ec.Ru{..........e..J.........)..AR.)}k.Z.k.J]R.....!}...U..c...Z...B]s.........B...),J.....9}..)01.JIc.)as..as.s.......9q{.R....u..k.s.Z....m{.!8Z.!Ms..<c.....!.{..Y..Rik.cq..9uc.{............Ak.c...k.{.k............u...e..Z.c.94J......().)ec.....!y......R.s.....s....M{.c...J...Juk.9}s..]..s...{....i..1u..............)AZ......Us.!]..k...c.c.R...Z....$1..M...Mk..]{.c.......{...c.s.Zys.J.{..............U{.!Ek.!U{.k...!ek.1Ys..u..)e......J]{.Jms.c...!,).....!<c..a...}..c.k.By..Zu..............10J..Q{.)Ic..a...Y...Y{.)Qs.R...k...!.s.!i..s.s.)u..Ba{.R.k..................Y...e...i..JQc.)a{.)}s.........)u..1m..Z.k.s...s................................Ik..Q{..]..!Qs.JEc..]{..q...e......c...Jqs.Z.k.cu..c.........................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\footer_seal[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 25 x 25
Category:	downloaded
Size (bytes):	936
Entropy (8bit):	7.566861187240718
Encrypted:	false
SSDEEP:	24:uDFM0rnx1/PBYjz8hxGmhKAKIqlIxL7Lqpg7NVzOQSAAo7fZv:uZMm1/PBYzgJ0AK9lenLqoNJpfzfV
MD5:	3EF0AE339337F22320D8CCAC504A8449
SHA1:	C747754A317B308869186DEBB10DDB77E756D7E5
SHA-256:	33A14A6CB3939700FE78DEAAFD649992667C7247A84639E627B7168902557367
SHA-512:	2D4B7D0FB58E8EB2A7AC364DACF57B2456317133CB3F24CBA9EFB005C9664486A63DE488326E0839FD5CBD04D3C22B53F02DCF81BD9D605806C647CFB9E3246C
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/graphics/footer_seal.gif
Preview:	GIF89a.......x-..7..B..S%\|2..=..U..i..^).G.G3.Q/.Z .d..]..@.=.NX!Bn-6x93.M%.YWJ.D.H#.X'.N-.gH.p...............s]'>.Nw.{p.p......n^.aq.u.e.W5.._..x.............r.S=.b...............[{]m4=..........]...........x..p.s@......8.zP..{.i8.s.].{t..s\V`]Vm..t..^NVzyt...[.zo...".pQN.3.w...~..m$.i..!..0....>..._gm;...s..T..M..>..{5VsI.n...G.8.[}~O...a...}[f..lu]{..agJ.k]Tqmu48...!.......,.................................................................................. !."....."..# $%&'&()+,......-../.'0.01/234......566.77'8N..q#...x`p..B..,B.P.....8~.......x..... %ll..c..!..l.A$..]...."..F. q....v6.,x0.....x(Y....%C..i"DH.'1d<.2.@......"...U...R.K.,Z.......P.PP.2.K....tQ@c..,X. ....0a..C.L.1\Bs1C$...(<.j...0i..Q#f..6m.q......]x....3n..Y.\|N..t.P`0`. ..$8h.a..1......;g.Ph.J........"E.=[.........4...P.G.Q.A..]D...\|......`......R..\|.....W...X....HP`."H`...<....\."...A...4@....R...$.$..D....;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\gcd-seal[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 180x64, frames 3
Category:	downloaded
Size (bytes):	4342
Entropy (8bit):	7.896707732925293
Encrypted:	false
SSDEEP:	96:dXLzANaWDn78v5e76bppPbea/wjGn36TBY9P3rBU:tLsNdn7K5i6bTfB3QBe3rBU
MD5:	07C2F782572AD5329109465D24EBD913
SHA1:	225F2226243AFFAF4BD532E5F648B2EFB7FA5ACF
SHA-256:	395DD501874DA9003C8A81010C9F8ABF42EAA7E4BE9BFB2012292777B6C088DD
SHA-512:	E29FD2215EDA48B98A8E9B6E8C4A775C2C21B17C056A078AB03B1C5F17B3C742DD91CDABFE06E314A5E0B2C181F5D883F9393BA25CC2C59E6C27BA99ED95E88E
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/dcbcs/bds/graphics/gcd-seal.jpg
Preview:	......JFIF.....H.H.....C.......................................................""""""""""...C................ ! !!! !!!!!!!!"""""""""""""""......@..............................................O............................!1."A.27QRaqt..#35Br......$4Usu.....Vb.......6CT................................(........................1A...!Q2BRa.".............?..m.o.'.Sa..}bkj..5.[i.M..RUT^......2................=.9..-7...y.....=...].T........Se..D$.u..Rv....}.T....fZ...........x.J...GM......o....+v\....`5.vs..jo..............<d.3..#..f...b.I.g..Kmj.)jD.DT..X.r.M...s..NQi..U...V...=.9..57...y..=6s...i..e..x.fJ..Ij&k..3Z.f.=.#~..DpS..tU3.1..Jg.VQ...q.n.v.v.x/W.bx...tbg.['J2.....kX...o...T\|I~^..............\m@I{.V..k..W.w.'d.......{;v!J..:.2...t.E...pUN)..<8<....q(..._.....g......A..X....QJ#.&D.rpT{/.\|X...f%:.Y...lx@...O.;..tZ..+.Xf.Z#3a.I..H.p...]%t.`...f..g..........v.B.T..X..0..7...$[.K..'.&.'C........\|...%Z...@`..}./.'.=..f...\.LUP._...\|..y

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\icon-fb-like[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 42 x 20
Category:	downloaded
Size (bytes):	1461
Entropy (8bit):	7.587767048114994
Encrypted:	false
SSDEEP:	24:R/MmkxSj6vKf4EQtdZ2VWN3+Qj5dejWfSZgDBsWgLhNk7pavk9HzU49t9iIo/E+n:cSjfytOVi++GC9CDLhNigigIo/31
MD5:	E8DFCB236B83526AF6EB96348B06F0C9
SHA1:	B741A536E0D2AE5C828D55DED39E17A60D5E1FA3
SHA-256:	614EB76A4DD29D91EA72883E702C609CE3E2AE3E12C2E5F96B2FCD32AA87860D
SHA-512:	4A64AB2C2A3B3705CB93D80ADF95A96EA5E257166C979972320884BA1105EFF25F1CD6FA15CBAAC7D31240F2FF09A5BCA8B93F6B5527F63D7631D9BF915194F8
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/icon-fb-like.gif
Preview:	GIF89a.........v.....u...........................n..............................................r..r............q..h~................................................................................x......................................................................x........~.....q.....y....................................s...................................................................\|.........................Uo............................................y......................\|...................................k.......................................................s..............................................w...................................................................................!.......,............}J.....OB.X......#J..(.?..Zh....-6zl,.%..(S.,w..?,....I.J..!l..7c...@.....D.I;i.!".c8.J.Ju.~BX$..oG.g!\T.K.*..S........d...Z..Y.3.p......<i.).M#9.`.Y..}5h..`....l.4...nk.5...)".<.`......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\icon-sp[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 19 x 29
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.478946144941852
Encrypted:	false
SSDEEP:	3:Cq//Rewltxlu3uXU1xn:T2KU1xn
MD5:	BE84D93A3126CAFBBA9E92D25F139F7B
SHA1:	55F18DA72A71AC3F4CF7B4A6FB3053ED0169FFA1
SHA-256:	B264D426F9B80C2C02B49123C628B62AC446AAEAD5F4874780F900AB024228AA
SHA-512:	98089AA6627FFEA2E2B302B1E5B29CB8B64518183D124B66FA731A1B9B40D771C4E5882E3B7350AE547AAA6EF73BF55E32BED5CB3738464FDC2E88220FB36DB7
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/icon-sp.gif
Preview:	GIF89a.............!.......,...........................Hn..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\icon_pdf[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	6.298893633281494
Encrypted:	false
SSDEEP:	12:U6LzEJau3+MTkA0iZzRnwAjM3s9RR0KoRxW:U6SLbh9HAsaK0xW
MD5:	47FD53FA9278B645A64B42C31F0A7068
SHA1:	E4293C1BA08413FBCCCA5CC67733F2A972A31869
SHA-256:	72293FE33F7F462A579E0297AB625D20AA53470ABF7A77B5E0AE5112FADA4F4C
SHA-512:	92D277ABA7A5B8F8BCEE6285285B055C5E1CD7125651EDEBF33955665B5483E6FF4A481A312A57CDFF438D78AC8964CE8B895FF273CA7DE281652B5AD645D244
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/icon_pdf.gif
Preview:	GIF89a.....U.....................................................^S........e].........8-....le.nf.\|v.z............t....UL.i`................vi....UO.......h].UP.......um..j`.....qm.x...............B=...............PF.yr.}w...s.vl................................................................................................................................................!.....U.,............UU0SR.......SPQT..P+..RQ.=8..."T,@.URT.N(....T..)....-!...*.TR.TQ$6QP.A....T2O....1.TB.9......7. '.T.....E&5%..J.K.P.L.M>G?C..t..5..$..D.0....2` b......A..GI..,...)..,@.R......;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\iconseal[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 25 x 25
Category:	downloaded
Size (bytes):	936
Entropy (8bit):	7.566861187240718
Encrypted:	false
SSDEEP:	24:uDFM0rnx1/PBYjz8hxGmhKAKIqlIxL7Lqpg7NVzOQSAAo7fZv:uZMm1/PBYzgJ0AK9lenLqoNJpfzfV
MD5:	3EF0AE339337F22320D8CCAC504A8449
SHA1:	C747754A317B308869186DEBB10DDB77E756D7E5
SHA-256:	33A14A6CB3939700FE78DEAAFD649992667C7247A84639E627B7168902557367
SHA-512:	2D4B7D0FB58E8EB2A7AC364DACF57B2456317133CB3F24CBA9EFB005C9664486A63DE488326E0839FD5CBD04D3C22B53F02DCF81BD9D605806C647CFB9E3246C
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/iconseal.gif
Preview:	GIF89a.......x-..7..B..S%\|2..=..U..i..^).G.G3.Q/.Z .d..]..@.=.NX!Bn-6x93.M%.YWJ.D.H#.X'.N-.gH.p...............s]'>.Nw.{p.p......n^.aq.u.e.W5.._..x.............r.S=.b...............[{]m4=..........]...........x..p.s@......8.zP..{.i8.s.].{t..s\V`]Vm..t..^NVzyt...[.zo...".pQN.3.w...~..m$.i..!..0....>..._gm;...s..T..M..>..{5VsI.n...G.8.[}~O...a...}[f..lu]{..agJ.k]Tqmu48...!.......,.................................................................................. !."....."..# $%&'&()+,......-../.'0.01/234......566.77'8N..q#...x`p..B..,B.P.....8~.......x..... %ll..c..!..l.A$..]...."..F. q....v6.,x0.....x(Y....%C..i"DH.'1d<.2.@......"...U...R.K.,Z.......P.PP.2.K....tQ@c..,X. ....0a..C.L.1\Bs1C$...(<.j...0i..Q#f..6m.q......]x....3n..Y.\|N..t.P`0`. ..$8h.a..1......;g.Ph.J........"E.=[.........4...P.G.Q.A..]D...\|......`......R..\|.....W...X....HP`."H`...<....\."...A...4@....R...$.$..D....;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\index[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	11358
Entropy (8bit):	5.081230966440111
Encrypted:	false
SSDEEP:	96:1AAl6lD3R0m3BGTvVrGNI643LJ7jIWqqyapxC8bB4/fxvLLmyySbxo93ILPlUIiK:SaMR0m3mz9oRHa9R54uEBukeX2oK
MD5:	7FAC353FD6E72A2C75820F2276D522D5
SHA1:	DEEC13C8F8CFB6A44E92FE15A5BBB4D18D1EB539
SHA-256:	B8FF55F1551A2611F3890196A3E6EA69D579D2DF441AA6AD6141F84F39511238
SHA-512:	CFF7AEA083A5B873FEB9F8D122BF4C02705FF7FE21135F7D13AAE5AC79A57879E2F56F07A22D5938B8B2C12B6B504E2381A5789347D5F5C2677837C802F1DE81
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/about/index.htm
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml"> InstanceBegin template="/Templates/main.dwt" codeOutsideHTMLIsLocked="false" -->..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />.. InstanceBeginEditable name="doctitle" -->..<title>About Us \| New Hampshire Department of Health and Human Services</title>..<meta name="Description" content="The New Hampshire Department of Health and Human Services is the largest agency in New Hampshire state government, responsible for the health, safety and well being of the citizens of New Hampshire." />..<meta name="Keywords" content="about, health, human, services, dhhs, new, hampshire, nh, nh medicaid, tanf, child care, substance abuse, wic, child support, food stamps" />.. InstanceEndEditable --> InstanceBeginEditable name="head" --> InstanceEndEditable -->..<link href="../css/base.css" rel="

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\mental-health[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
Category:	downloaded
Size (bytes):	33303
Entropy (8bit):	7.974316717561031
Encrypted:	false
SSDEEP:	768:0Oqj4xMlnGpUqpxt29uVPD/4M7DWXM5Vz2fWQhVhz:a4elnGLtCy/3OXeqvz
MD5:	96D4920CFCAF9ABFDCAA8522656A3137
SHA1:	7B2B2F6ED65D0F633DE370711A2F762D18D9AE59
SHA-256:	18F1A2D6CB258D5F92E9EC463EC03D785EBDAC35A24A63B213FAB634871D7570
SHA-512:	E4A4DFB75D01B676383026B81A826C90CAE51AAF64257FC12093A806FAB2D96531A4126537F35B13503B349C312BFCC4B7A9164D99260972343C5FAD0C24E016
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/slider/mental-health.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:64228f6a-a50e-46b2-b829-8abc1f531c88" xmpMM:DocumentID="xmp.did:5636845C1E1011EB8809AFE341815D76" xmpMM:InstanceID="xmp.iid:5636845B1E1011EB8809AFE341815D76" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:aa4471f1-b7a0-ed43-97bc-895485e21ba5" stRef:documentID="adobe:docid:photoshop:db8248d2-086c-6a48-94d3-0a1aa0928de9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\pdf-icon[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 16 x 16
Category:	downloaded
Size (bytes):	1302
Entropy (8bit):	6.880653223666133
Encrypted:	false
SSDEEP:	24:8Sal1he91WwylZ82lYSqMHY1yVUNT3byJvGY8Rov+P:iqQinNuWy6NKJvL8yv+P
MD5:	0E58756A31693898401D549A6FD8747F
SHA1:	6AE148BAE1D9B4EA9CF8353B5A563FD96C2DB62F
SHA-256:	733985E128D61935A5CBFC671CB6A8A055952FFF6503A69DE543BF98F980DF2A
SHA-512:	87F4FBEE7AE08899B26BED3EEC36E72B205BA5A69AC2E90CB93F25CAF63641A4625E2E836970C8DC5491D67082374F747BAD8ACC38A34C29416F540930C68E8F
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/graphics/pdf-icon.gif
Preview:	GIF89a................. .MMh..y.....s...88......>>i...UU...!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:DocumentID="xmp.did:9570A76A214211E39888F760BBA09AA4" xmpMM:InstanceID="xmp.iid:9570A769214211E39888F760BBA09AA4" xmp:CreatorTool="Adobe Photoshop CS3 Windows"> <xmpMM:DerivedFrom stRef:instanceID="uuid:C792EF2B1576E2119B42C2924AD253AB" stRef:documentID="uuid:D01E3487E275E2119B42C2924AD253AB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..........................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\school-safety[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 150 x 49, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	10253
Entropy (8bit):	7.972468978592324
Encrypted:	false
SSDEEP:	192:eMFTvtFRw3WygedNX9P9+5z51HN4diI0c7aQWIAhCRdBnthIsTb4BVsECF7:1FLtPYWwHW9HmtaQnAhavzIsb44Ei
MD5:	4E5DEEFA8F279F99BB93C9EBECFC7B11
SHA1:	C335E28675D5623D124DB3C6874E09DFCA2E4C0F
SHA-256:	51A3393B9B1D0D215CBE3AECC4B772679AFF02C9581B07DF09035B1D0AA2C651
SHA-512:	627CE68930400103E8D3DFBB0FF91F504609442192732D431AB98DF9815B478D8EDB2C2F313F89F8009FC5915F8B4F279DA25D1AA3B43B9907C8263A8C200DA5
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/school-safety.png
Preview:	.PNG........IHDR.......1.....8.P... .IDATx...t.....[..M6.C.$!!...z...W..\E...6@.."\EE..A.l.{EE....B.5$..4.7.lv.;3.......?gI.y.>...f..B..C...Sy...Z....../.$.....@dpH.4....@V&....Oww.z7lv;.CVZ....~...+(.... ..!.G.%.....'......P..Z..q.n^].1#z.....4....&...3}.G.....).0.L..EX..<4.5^.?......f.s..\|.....j !2........3.Gi...<G.W+.{...h...D%1y.<.>.,I#.....q..c... ..2..:...w.u{...,.6:%4.K#QT^.I..........<..>..q1.]....s2/...D..r.l.....e+......l........_..FL`.-"".o.g...EK.....P:'.......OO.<...R.$.V...H;\|.C9g..5....8x.....kF\hXm.2......9!.~.i'r..s.3...P{";.....Mq..F.k.[XZ...........'.ss.P^V..l.@AE9..cp......M{....G..I....i.^.\|\|..\..9..l=....@.&.@..8.q.Oo/.B`.....DbLlm..Y..9u.....T..x....,^....:.Mu...C...CG.[.....=i...;M......1#..{.[n.C...ae%..M.h.-....~.V.}..........}+ArsAT.@.H..[.......;{.zn1...V.V...,Hi-..:Rg.}.yP`D<........o..../.7......q.b....M_. .K...:......(..V.....K.."N.6....E........E.. .R........D..J...c. "H...)...;.;...F..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\seniors[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	13573
Entropy (8bit):	4.988504258614964
Encrypted:	false
SSDEEP:	96:1AAN6R0m3BGTvVrGNI643LJ7DoWK3aS6pxVHbh4DfxvLLmyySOLrgneinOI6VHtt:SnR0m3mz8Y8RH+/EUh1ymGDb242oK
MD5:	884814DBA14EF841EC18FADE7145DDF7
SHA1:	F8B9924FD70BA0B42959DF852C0FDB2F6B6980B3
SHA-256:	D2A61C184CC788FC32DCE676C1E0D8FB6DE2EA465981069C875E50A60812EA76
SHA-512:	584E41FDC4A54866B919A5802A19632C6CA36B108C86C5F93043B4456CD43AAA3BA9EF2581712D4FD76B672BE3593D556836361227E3A75ECFBC58C37D85AFFB
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/foryou/seniors.htm
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml"> InstanceBegin template="/Templates/main.dwt" codeOutsideHTMLIsLocked="false" -->..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />.. InstanceBeginEditable name="doctitle" -->..<title>Services for Seniors \| New Hampshire Department of Health and Human Services</title>..<meta name="Description" content="DHHS services for seniors." />..<meta name="Keywords" content="seniors, elderly, health, human, services, dhhs, new, hampshire, nh" />.. InstanceEndEditable --> InstanceBeginEditable name="head" -->.. InstanceEndEditable -->..<link href="../css/base.css" rel="stylesheet" type="text/css" />..<link href="../css/contribute.css" rel="stylesheet" type="text/css" />..<link href="../css/print.css" rel="stylesheet" type="text/css" media="print" />..<script type="text/javascript" src="../scri

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\smallA[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 16 x 13
Category:	downloaded
Size (bytes):	185
Entropy (8bit):	6.185375227859527
Encrypted:	false
SSDEEP:	3:CxatOa/FA2P/OOlllMJRfyazQy38lDKKNkaaaRrExZd/7S17/Johi13sdvaDw3rR:ZtOW/OKQRfyyYDK18pExZde17Bohi9s9
MD5:	6F8CB4A1EFB4DF5320B6E70E53577E59
SHA1:	22845864135E6938A5DD1B7CE5C7AA44624F1318
SHA-256:	0C45128E99EE08762E4CBB4333C5FFB0C95149B8C3BCCED7A84FB37423CE8C33
SHA-512:	BAADE3D47511B8FC9BFE0EAB9C60AAF9104749544B7A24C7A8BE076B1F3F4DD4C2CDAF9902E8C096907CED9B7FDA11CABF6951A45BB758947DFD429498A94BE7
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/smallA.gif
Preview:	GIF89a.......999....................vvv...SSS......ccclll...............UUU............BBBWWW......<<<???...!.......,..........6.'.di.h..$...7.A\...&......XA".I...T,..&..hD.N.#.y....;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\teens[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	12135
Entropy (8bit):	5.0121308162835
Encrypted:	false
SSDEEP:	96:1AA1GR0m3BGTvVrGNI643LJ7DoWK3aS6pxVHbh4DfxvLLmyySCM5hlAea2c9Wcy0:SLR0m3mz8Y8RHNvkth62oK
MD5:	2705710F50F1FCD80BBE013CFAF39709
SHA1:	31A4D90A2A00B3C49F16FB0997601E47C2B53E01
SHA-256:	7DDE0955645983167AD367FA1C4997027D8DC8743E7DD25556DFAB48C8FF680F
SHA-512:	6A108689C5B6C5A1295BCFA241E49A0801493D57A76CFA9DF08B2D6C15C91DE97AFE0FB1F65C0EF002C54ADDC126F1529066FCDDAF85E8623BFCBA290CADC6A5
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/foryou/teens.htm
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml"> InstanceBegin template="/Templates/main.dwt" codeOutsideHTMLIsLocked="false" -->..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />.. InstanceBeginEditable name="doctitle" -->..<title>Services for Teens \| New Hampshire Department of Health and Human Services</title>..<meta name="Description" content="DHHS services for teens." />..<meta name="Keywords" content="teen, health, human, services, dhhs, new, hampshire, nh" />.. InstanceEndEditable --> InstanceBeginEditable name="head" -->...... InstanceEndEditable -->..<link href="../css/base.css" rel="stylesheet" type="text/css" />..<link href="../css/contribute.css" rel="stylesheet" type="text/css" />..<link href="../css/print.css" rel="stylesheet" type="text/css" media="print" />..<script type="text/javascript" src="../scripts/textsize

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\textsizer2[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9400
Entropy (8bit):	5.085927853718149
Encrypted:	false
SSDEEP:	192:0VKJv9DBzBv6YMTFQOln1aCj9ZWL270OLyodQXtK2PYvC8RrR0Y3UpHqsh:0VKJlDlV6YMxhEKbOEyodQXtK8n
MD5:	FA5AFDC96A59C9AA5A98DF57BC45A39F
SHA1:	5E596B4E91600A002A11F7CA90B8D55CC9FBE0DA
SHA-256:	656F1D9D07AAB96BAD6BF14A06A823837AD32C79F94B4082AE01221E233B26BD
SHA-512:	1D059FB79C04E90F56B1309C92500EEEF1922683BE8334F7A9F4DEE6A8978F6E61F59CCD457CB90180054374C449FFF453F1A9864F9BC75F2953DDDDFD573B8A
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/scripts/textsizer2.js
Preview:	// JavaScript Document..../* .. -----------------------------------------.. text sizer State of NH, Web Services Division.. created: 02 Nov 2010.. ----------------------------------------- ../..../ .. *****************************************************.. BEGIN user-variable section.. DO NOT change code outside of this section.. ********************************************************../....// Specify stylesheet elements to exclude from resizing..// these should be identical to the individual elements specified in the stylesheet..// ie., classes should be '.classname', id's '#idname', tags, such as div 'div'..// Note: if an element in the exclude list appears anywhere in a stylesheet definition ..// the entire defition exluded; ..// Example, excluding tag 'div' means the following stylesheet definition ..// would be excluded from resizing: body, div, p {font-size: 20px;} ..// ..var arrExcludeStyleSheetElements = new Array('.search

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\textsizer[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5219
Entropy (8bit):	5.046059813833912
Encrypted:	false
SSDEEP:	96:8IRZqnvtiIkyEwmNeYMvAxerL5J6B82o231/BgYrCDgZrSvJLj0zE3bdCAHEsh:8IRZsv0E5mNofr6rF3Ra8CpR0Y34AHE2
MD5:	62BC4FEA155137DB1B998918DD1E30BF
SHA1:	D91108573500AD5AF21159209A97A4C097B43737
SHA-256:	6C4417DE30F53EB52ED26D95EB080F7A14F9F3DA1E522901443A8EAC5B3A8F0D
SHA-512:	1F714211545A997C483622B23D54AC2BD8AFEF12223ACBD5DF9427D860DDAD9C82A8EECC9BF4E59539F66A76C6005FD673F17EA8E006C2C1D27743387AEFE2B6
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/scripts/textsizer.js
Preview:	/------------------------------------------------------------...Document Text Sizer- Copyright 2003 - Taewook Kang. All rights reserved....Coded by: Taewook Kang (txkang.REMOVETHIS@hotmail.com)...Web Site: http://txkang.com...Script featured on Dynamic Drive (http://www.dynamicdrive.com)......Please retain this copyright notice in the script....License is granted to user to reuse this code on ...their own website if, and only if, ...this entire copyright notice is included...--------------------------------------------------------------/....//Specify affected tags. Add or remove from list:..var arrTags = new Array('table','span','div','class','td','tr','a','p','h1');....//Specify spectrum of different font sizes:..var arrSizes = new Array( '8pt','10pt','12pt','14pt','16pt' );....// global cookie name..var strCookieName = new String("SIZEPREF");..../******* begin functions section *******/....// this function just calls the regular one without any fuss, did this so can customize

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\1095b[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
Category:	downloaded
Size (bytes):	38861
Entropy (8bit):	7.965890707861492
Encrypted:	false
SSDEEP:	768:0E0ydRJvF/yLfSRIrdGXij8NNLSwfNM5YFv1eMa:Xja2pSjGZHfG29a
MD5:	0EE5FD39F46045C84BB6EBECBF8035D6
SHA1:	8BC1DEF29E22D9F2480272E0948644564F6480F9
SHA-256:	79B552F5C7B43E7184AE479DE4E41DFDF311D326400FAC2AA60A895C02C0E3E9
SHA-512:	9E431D5D89D3B7966838A0F9BE231400B0DA798B7600C83D09C9923607C029B00C04F51523BCAD5BDD304A048409B8E473C4A3AE51B0671968E933CC1A0AA0EA
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/slider/1095b.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:64228f6a-a50e-46b2-b829-8abc1f531c88" xmpMM:DocumentID="xmp.did:8BB39165601311EB89E3DE696AE0C59F" xmpMM:InstanceID="xmp.iid:8BB39164601311EB89E3DE696AE0C59F" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:6558f1de-c874-3144-b2b8-91ae52843863" stRef:documentID="adobe:docid:photoshop:db8248d2-086c-6a48-94d3-0a1aa0928de9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\a-med[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 16 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1101
Entropy (8bit):	6.1898529070992145
Encrypted:	false
SSDEEP:	24:UKr1he91WwylZ82lYSqMHYmV0+T3byJCpkrsGp+qqxk:dqQinNuLu+KJpQiq+
MD5:	2198620B55C9E0808BD423C218843660
SHA1:	B1976497D135C384A95412550A6579FF96459935
SHA-256:	5E51CC6743CA4A799CF3C90E5B39563AFEFBA89216DB4937CA127068E6260810
SHA-512:	631A13D759EBB57E77F4053B70338E299B0F513F9E9EC0E7ACCED6614CFB9BD8393297307B4615E0E71E679C25E6AA747122A77DAD997AD917A62D879043EB2A
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/graphics/a-med.png
Preview:	.PNG........IHDR................$....tEXtSoftware.Adobe ImageReadyq.e<...iiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:DocumentID="xmp.did:53E95500C81811E4A644EEFA9DDD0BCD" xmpMM:InstanceID="xmp.iid:53E954FFC81811E4A644EEFA9DDD0BCD" xmp:CreatorTool="Adobe Photoshop CS3 Windows"> <xmpMM:DerivedFrom stRef:instanceID="uuid:7392920C0151DE118F1C842F631D718C" stRef:documentID="uuid:156814919CEBDC11A2CFD38C7E53D8A9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..OQ...zIDATx.b...?.%...B@.U@.r.n.*@^........P.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\a-small[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 16 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1119
Entropy (8bit):	6.171306254385598
Encrypted:	false
SSDEEP:	24:UKr1he91WwylZ82lYSqMHYjAQqV1Q+T3byJCpkrsG5vlM94b9:dqQinNu3zTDKJpQl94b9
MD5:	185F7A43C690C8A0D73568B61A751161
SHA1:	FB523EDD5FB90035890C85AE341A6F1661410D97
SHA-256:	F8A7A8A27A10AAB2211459D24E83D801F3FE140D898E47417A85E00A8E3DA5B0
SHA-512:	8EA917CEFE5ACAA3C1C0F8406AA2748130C8F6EA02B1AC850CDED26CE7785A84860036FE35BE54359CCE0E47440D76CEFBD4F87914FB2F14FDD10D8E2664DD32
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/graphics/a-small.png
Preview:	.PNG........IHDR................$....tEXtSoftware.Adobe ImageReadyq.e<...iiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:DocumentID="xmp.did:69539324C81811E49A758A5BB4F8D573" xmpMM:InstanceID="xmp.iid:69539323C81811E49A758A5BB4F8D573" xmp:CreatorTool="Adobe Photoshop CS3 Windows"> <xmpMM:DerivedFrom stRef:instanceID="uuid:7392920C0151DE118F1C842F631D718C" stRef:documentID="uuid:156814919CEBDC11A2CFD38C7E53D8A9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.b...?.%...B@..,x....../.....8.... .

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\adults[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	12691
Entropy (8bit):	5.051305468378174
Encrypted:	false
SSDEEP:	96:1AAzGR0m3BGTvVrGNI643LJ7DoWK3aS6pxVHbh4DfxvLLmyyS4MRc/jl0Meqm7mM:S/R0m3mz8Y8RHvksqjBT3T2oK
MD5:	85B0F79695E7ED054B29DB8302CA25D5
SHA1:	658F62645B373DFDBEC811C65C03EC4C86251468
SHA-256:	191244EEE601C101C32E698C4D89F0AF93254DD857A98C205EC63F68985FEEA1
SHA-512:	EE9AC9A00284C15B5983E0E47FAB8095D6F085E24A47CAFE1F0C6DC9C6094CE80681976B4A707522254FB1FAE8B7946F4D14B7AA4EC45351AB98BE1D36F73FA3
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/foryou/adults.htm
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml"> InstanceBegin template="/Templates/main.dwt" codeOutsideHTMLIsLocked="false" -->..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />.. InstanceBeginEditable name="doctitle" -->..<title>Services for Adults \| New Hampshire Department of Health and Human Services</title>..<meta name="Description" content="DHHS services for adults." />..<meta name="Keywords" content="adult, health, human, services, dhhs, new, hampshire, nh" />.. InstanceEndEditable --> InstanceBeginEditable name="head" -->...... InstanceEndEditable -->..<link href="../css/base.css" rel="stylesheet" type="text/css" />..<link href="../css/contribute.css" rel="stylesheet" type="text/css" />..<link href="../css/print.css" rel="stylesheet" type="text/css" media="print" />..<script type="text/javascript" src="../scripts/texts

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\base[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	23278
Entropy (8bit):	5.176641778480364
Encrypted:	false
SSDEEP:	384:UfbUInNntQDokhteIDViTVckNj+3MZh5+l33q7mSB/mm6U23gqK4Gg4R3Va1LhgM:1InNntQfhEIDUTmkNj+3MZh5+5q7mSBW
MD5:	13E2FB1DBE808B94F25CFD15AEE41B5C
SHA1:	E45D3AC77A426E9D1109B2646733F7CC42FCA786
SHA-256:	84DB1D2BE46F6A48520BFC629BF41A4CD1142AD91387836B4764E328F1922233
SHA-512:	DB13392584C1090A7EEEC8B65ADC02836ADAF1AA85A6E02B4B4982E756644541A81C936F4CC68E64C8E1F7F9107280B953DF0D7246959A45BC383A25BAE90732
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/base.css
Preview:	@charset "utf-8";../* CSS Document /....body {...margin: 0; / zero the margin and padding of the body element to account for differing browser defaults /...padding: 0; / do not change this /...text-align: center; / centers the container in IE 5* browsers. The text is then set to the left aligned default in the #container selector */...color: #000000;...font-family: Verdana, Arial, Helvetica, sans-serif;...font-size: 70%;...background-color: #CCCCCC;...background-image: url(graphics/blkbk.gif);...background-repeat: repeat-x;...background-position: left top;..}....h1 {...color: #6699CC;...font-weight: normal;...font-size: 175%;...margin-top: 1px;...margin-bottom: 5px;...line-height: 1em;..}....h2 {...color: #6699CC;...letter-spacing: 0.1em;...font-weight: normal;...font-size: 150%;..}....h3 {...color: #000000;...font-size: 150%;...font-weight: normal;...font-family: Tahoma, Verdana, Arial, sans-serif;..}....h4 {...font-size: 125%;...font-family: Tahoma, Verdana, Arial, sans-serif;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\blkbk[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 10 x 1500
Category:	downloaded
Size (bytes):	3561
Entropy (8bit):	7.743642852097257
Encrypted:	false
SSDEEP:	96:gnvfnvfvH/y5xp3IzQhiLai5/ZbX+UQ5vPChVcfB4DmL:gnnnnnWHA2o/d+U2PChWWmL
MD5:	5DF60B7A94DFBA01BC3D5BA68D251FE8
SHA1:	E565D5D502D3D67A21BF6F1F9E548A8B001D31EC
SHA-256:	1EAC78A2FF61CA6D0C15A9F234AE8F7D9A3F5DB355CCC6ED6E076C8CE9DC63B1
SHA-512:	BCC6484286FB925954768DD840600F10CC617E731889836529E3F91F18556EB14BAF074C6284AFAE6610D04520EC4367A1234BFB7F02EC844E81E118A56F33AA
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/blkbk.gif
Preview:	GIF89a....................................................................................................... !!!"""###$$$%%%&&&'''((()))**+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{\|\|\|}}}~~~...................................................................................................................................................................................................................................................................................................................................................................................................,...............H......\....#J.H....3j..... C..I..I..R.\...0Y..I...8s.$....@.......H.*].....P.J.J..U...j....`.".K...h.M....p...V..x..........L..a...+^.....H.L....3Wv.....C.......S.^..5..c.M.v..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bullet02[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 10 x 10
Category:	downloaded
Size (bytes):	166
Entropy (8bit):	5.033559159767338
Encrypted:	false
SSDEEP:	3:C8iX1oBbNTRPVZT4QQ3ZDpP8RalltLy0eFdBus9uYuaD2t/Ch:tikRTjt4FZgqtEdBus9FHD2Qh
MD5:	13124C1D196F71BFBDBF3B68247C2621
SHA1:	23A19F2D059EE561894A7384CBE9CEA240365902
SHA-256:	AF96E242BC1EEA19BFBC52436761ACD8D1E7B4BA4307BD051D2EDD1E04C026AC
SHA-512:	613E32FF84EB6065B97BC39C28EEA7470B631F66D1F0295BF8C4CDF8A186864FC4955AA7A4B11D530C0067BFE5A9F7294BA52BFD2A39F9911DCA6EC5C520BFEF
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/bullet02.gif
Preview:	GIF89a.....................................................................................................!.......,..........#.$.di.@ ..Y.G..I.+.b...(6G...HZ..)..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\cms[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1851
Entropy (8bit):	5.168144793468175
Encrypted:	false
SSDEEP:	48:6LPJS7cOU/NJZEoGNJZy4NJZ+JZS5/62R5TS:GPJS5mJOoYJUuJAJ6h+
MD5:	0FD46200B79D1D34178BB1E98CC4B637
SHA1:	CDCD079438584DA50686E48BBD7595E4A212F247
SHA-256:	5FC83EFB4EC5A3A3DD7DDB5442F497D49A118DE8A59B5508045935BF56CA61A1
SHA-512:	364A80857ED00F8A68AD914BA66FEB696D43770C88870AC8B56BA6E6EDBB13D220BC164B709435B46CA1DB6D8F8183ACB977C16CD84387EEB58EA809FCC22F1A
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/cms.css
Preview:	@charset "utf-8";../* CSS Document */....h3 {..}....h4 {..}.....red {...color: red;..}.....center {...text-align: center;..}.....right {...text-align: right;..}.....left {...text-align: left;..}.....smText {...color: #000000;...font-size: 10px;...font-family: Verdana, Arial, Sans-Serif;...text-decoration: none;..}......indented {..}.....indented-more {..}.....noWrap {...white-space:nowrap;..}.....noWrapLeft {...white-space:nowrap;...text-align: left;..}.......photoCenter {...display:inline-block;...margin:0px auto 0px auto;...border: 1px solid rgba(88,71,56,0.50);...padding:4px;...text-align: center;...color: #003366;...font-family:Verdana, Arial, Helvetica, sans-serif;...font-size: 10px;..}.....photoLeft {...float: left;...margin:3px 15px 3px 0px;...border: 1px solid rgba(88,71,56,0.50);...padding:4px;...text-align: center;...color: #003366;...font-family:Verdana, Arial, Helvetica, sans-serif;...font-size: 10px;..}.....photoRight { .. float: right; ...margin:3px 0px 3px 15px;...bor

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\covid-alert[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 730 x 50, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9978
Entropy (8bit):	7.955383730621116
Encrypted:	false
SSDEEP:	192:CtuvpBwiUiTYc7VcQVgkcBGQq7Pn0z4z9UwrazRNoBqR:boK7CQDwGF7P0zq2earR
MD5:	59B7681053FC2B1C2C65959FB27A4070
SHA1:	DB31AAE7E08B2094C011ACA0A5154440D65ACB83
SHA-256:	7749ED0E11D5E9D973396ED23D5D430BEB9EE9A0211F5A6B341E716FD38A6C18
SHA-512:	7E9F19A43A3C2C295661447A967C9720CD860C60C8649B2CDB104154976A2D7223AC942ADA2912B3B266D334C4C0563B6426A1767BDC72A5B84A16FE9E1AB302
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/covid-alert.png
Preview:	.PNG........IHDR.......2.....bf\|... .IDATx...xU..._H !!...@..e.. EQ.......b.\?..._..Z.Z..V...m.Vx.hQ.............!a.....\|...}O..=.n...=O...{.9...wf.-...... .. ...4....A..A...G.. .. .. D... .. ....Dh.. .. .B...-.. .. .Q@.. .. .. D... .. ....Dh.. .. .B...-.. .. .Q@.. .. .. D..........n.........h..R.. .. ...M..{.hIn.]?A...9G(3-.F.n&5K..A..A8c.....XMc.7..uRbcz.R.. .. ...M...Z........._.BF...9..3....m.b.... .. .g.Q.....B..`..}...... .. .. ..4....b....8.4.F...~7..T.n.. .. .g....}..f...Ty..vt.....V......mA..A...L..&C"..E6D...H..=..UG....M;j.7..e7..C\|#.....s....&.Q$....R.........$..A..!.4.G."y...vL.......1t...]CE.1..T?.. 0.....Yc)....$Q.-.....OG.>.\|.Bl\{.p.j....BZ.v.S.f=@.....3....j..x.g.p.3e%.t.*....\tB.[uw..{..ZH[.....8.6M...i.U.......u.y..U.e.....{6....Sb.U....@..x....A..i.E.in.-...,.r..8.w8,Y]I];.6.?..~Gg.w'.4q....;.....R4.h.._.H1.1.>.....@.q..../.Nms..;.2...........w<..u..u..i..VZ..UT[.[..O..Y..g.yZ...U..WB9.'..8~h.......J....;r_r......5r.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\december-hours[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
Category:	downloaded
Size (bytes):	35871
Entropy (8bit):	7.9589827305889225
Encrypted:	false
SSDEEP:	768:0GKo2aQAaXODyURhlL9Cz1xp/ZlAVLAo1GP54XOdh/Fo:LNTnRhK7/ZlAVEeMdo
MD5:	ECFB185FF12D8F7DE124CF7E8BF0D634
SHA1:	8B2B7B850D1DAFAE39EDF206B31ABB0521A3917C
SHA-256:	BDAFEB1081CA5605A9A4CA075B8D2265D1240EBDE0C68975456C9A99DE9955B9
SHA-512:	248DEBFCE25100EED319ACEAC5965B2F15223C081043D3014F81176092D1E74334597E661499DE17AF8C1EA658825C6ED94366314C08C6762DEAA1920A13B217
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/slider/december-hours.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:64228f6a-a50e-46b2-b829-8abc1f531c88" xmpMM:DocumentID="xmp.did:1D4389D2494211EB8037D991BE1E167C" xmpMM:InstanceID="xmp.iid:1D4389D1494211EB8037D991BE1E167C" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3577775b-b57d-b348-935d-a236a2fc5864" stRef:documentID="adobe:docid:photoshop:904d25cf-8cf2-ca4f-b9ee-5d5bf23fc086"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\disabilities[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	10146
Entropy (8bit):	5.031839379944935
Encrypted:	false
SSDEEP:	96:1AAOeR0m3BGTvVrGNI643LJ7DoWK3aS6pxVHbh4DfxvLLmyySBa3Zej2kFQc+7Yy:SleR0m3mz8Y8RHgk7d2it2oK
MD5:	2E6BFC98C1A69CF7AF7CB106EEACF2C5
SHA1:	B63D9DA9EB752D4D9D796C52C4BC486649181B7D
SHA-256:	21391118F3550181965D8E741186A81F40D3C9D7F769FD2697D1399125914E48
SHA-512:	1DE7B2D08AFCFBC685AC07DD62C213B31E292280170CD2D62731C6DED76B8BAB3C133B282D5CE8CF7EAA73C52DE0540E07920F62A17DFE22D9CB640E7A2A7A29
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/foryou/disabilities.htm
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml"> InstanceBegin template="/Templates/main.dwt" codeOutsideHTMLIsLocked="false" -->..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />.. InstanceBeginEditable name="doctitle" -->..<title>Services for People with Disabilities \| New Hampshire Department of Health and Human Services</title>..<meta name="Description" content="DHHS services for people with disabilities" />..<meta name="Keywords" content="disability, disabilities, health, human, services, new, hampshire, nh" />.. InstanceEndEditable --> InstanceBeginEditable name="head" -->...... InstanceEndEditable -->..<link href="../css/base.css" rel="stylesheet" type="text/css" />..<link href="../css/contribute.css" rel="stylesheet" type="text/css" />..<link href="../css/print.css" rel="stylesheet" type="text/css" media="print" />..<scr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\families[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	14882
Entropy (8bit):	4.996850145254629
Encrypted:	false
SSDEEP:	96:1AA26R0m3BGTvVrGNI643LJ7DoWK3aS6pxVHbh4DfxvLLmyyS3vM5s/9ml0GZGeg:S6R0m3mz8Y8RHUdoyGiZhl5+rs92oK
MD5:	0E04DAF9A1FBC9411CAA3AE7B492F94F
SHA1:	0D34BD0339F12ECCBDAAAA8ABD0A0059878F7035
SHA-256:	5943A3D48401734486E22AA810F54D142DB12E3F94847981F80B416113B937CD
SHA-512:	348A779D9CCB41D3FB90A7B5D4B499D9FED3626B577D5322F328B9BE9E30606FD8F29AF7CBAB80389D47841E159848CD7918E5524CA5891A2181F84875A5F0F8
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/foryou/families.htm
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml"> InstanceBegin template="/Templates/main.dwt" codeOutsideHTMLIsLocked="false" -->..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />.. InstanceBeginEditable name="doctitle" -->..<title>Services for Families and Children \| New Hampshire Department of Health and Human Services</title>..<meta name="Description" content="DHHS services for families and children." />..<meta name="Keywords" content="family, families, children, health, human, services, dhhs, new, hampshire, nh" />.. InstanceEndEditable --> InstanceBeginEditable name="head" -->.. InstanceEndEditable -->..<link href="../css/base.css" rel="stylesheet" type="text/css" />..<link href="../css/contribute.css" rel="stylesheet" type="text/css" />..<link href="../css/print.css" rel="stylesheet" type="text/css" media="print" />..<scri

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\flags-translate-transp[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 80 x 21, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	839
Entropy (8bit):	7.698071657829339
Encrypted:	false
SSDEEP:	24:OrqV1tHnagl+iZZOUfpCPie2/kjMURz+7vYjh1q7:4qlZ74aereWh1q7
MD5:	3024CC0252B96A1313D05580ABE21086
SHA1:	C9FF9F1BB523C187625339110621A663603EBE01
SHA-256:	A2BA29D1A5559619D4E717E54104CDDEC46DA9F024D0868287EC49EF8207E96F
SHA-512:	4102931E49DB2504EA3A50212C92EE4659DBCB6BAAC3E26C4182C877F38E22F53AD73FF891EA8AF5C632B229DBDBE41DB4667A8261705749A54F7DF53552C1B4
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/graphics/flags-translate-transp.png
Preview:	.PNG........IHDR...P..........ir....IDATX..?o.F...J...F.(..vI....!-:4..C.%.. H..E3t.ROi..h.d..5_.(.f2.0....&-J.(R...e..."iXUQ$....\|.....;.2e...1:...%.{......q6L.y.=.. ........@'n..........N/...L..;W.k.?..i.Ck.......S.}H....E....g.iN]..}\C.2....l..0......aLx].N..q..J`Y..I.N.....;^4VM...?v.....:Y....6.;..F.f.......g%s.>.....$P...V.hI......D..9..e.5.<.R.).....;^..7VM..~..8....:.....KiNS.(i...~.....v.h..yi..g...#...C;1..w.Tl....xeAy..;q..)..l...a@.k.....o.:2(.50@.....'.\|........._.'..Xi^.l.0/-.....D......J.?.....UJs......$.....9.-...........z..F.t..........]....x....5p.1......P."....3.......w.NR.............9KhIB._...)%k".v'/6&..e.Ml[X.!.n.y....x.k... ..]..-..9".J"....l.\|..L.4...(.. V.u2.:.&.a:..OD.y....z..7..Qd....6./!.2....y{...s.<.....*.....2r.:.:y.V.yF.D..0r.?.:S.L..x.e.~...?.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\fostercare[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
Category:	downloaded
Size (bytes):	42156
Entropy (8bit):	7.979736476744958
Encrypted:	false
SSDEEP:	768:0xrv7jn9kM+2bzi5DXC9HuWyrevaEDqUYw3mZqFi6V16hFn7mLkaQmAa:k9kMZaebKeitUYw3m1v7mLkTmAa
MD5:	6FE5C99F3AD40EBE00993B05EC5D7F32
SHA1:	E860C4ABE558DE616D9397EE7CFE998350E8E3D8
SHA-256:	96D49E04118C68C4A484AF79321C1A5A2971BB7CF9D999087907D482DED392AC
SHA-512:	3FB3441153120265D3B318560470A1DB68FC8A88D99F4743C652494FD115EF925BB8246C632F1BB978BC3720152002094B8390A54F323AE55C2FF964E227972C
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/slider/fostercare.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164360, 2020/02/13-01:07:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:64228f6a-a50e-46b2-b829-8abc1f531c88" xmpMM:DocumentID="xmp.did:A8E878BF1E0111EB80CE8DB8E0E14A81" xmpMM:InstanceID="xmp.iid:A8E878BE1E0111EB80CE8DB8E0E14A81" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:47456615-15d3-3e4a-9ff2-3fe1b03c56fc" stRef:documentID="adobe:docid:photoshop:cecd2e07-56f2-da40-acd0-42bfbfb743b7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\icon-html5[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 14 x 16
Category:	downloaded
Size (bytes):	1049
Entropy (8bit):	6.541958901655976
Encrypted:	false
SSDEEP:	24:X8dIcGQ8m5JNsX3kwqfh6fTGVRTuCX7TE:sdIc18EJWvqfsxSw
MD5:	55CD44DE3D9F59E354724A9B8F596480
SHA1:	E7475B120C2BFA0C2FCA178A529CCAE8CA59C79A
SHA-256:	ED67A9A6C7C62F034582E52E78B5D49CD905C7F74826515EB57EF8DE44FE0E9E
SHA-512:	03691100D2C1A6391EC1E5709C0BAF19616A34E48DD2F0168B321F5E0BCAD25B6E206DDC3812936FCD2E4CBAEF85A402BD2431BF1969B15A9584C7A5D30FA723
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/icon-html5.gif
Preview:	GIF89a........K#..........J".N..C..M&.E..............B..Q+.L%....r.A..C..B......b'....T..U-.}`.}b.lL.y.=.....N!.L#.W...........>.....O(.A.................g....f&.M..M..T%....v....H"....y\.S&.......I!.tV.[.....h).]..Z5....{`.^........oO.....6............R".....e....t=.P........Y........M..R..A..N..@.....L.....B...I"....n4.^$...........K"....b%....T.f....F...^....B.....Z..y.......iG._ ..p.~.V1..l..y....s.d%.e%.vZ....M..\6.P+.a=...........qR....pP.l4.y[...........S"...d&.........~._.G.....W..[8.......eB..wZ........................................................................................................................................................................................................................................!.......,........@...I...h......X....:....6..pH...MY^.X....L.....@. R..Q#c."[..<.@ ..9....R...%.hE.s(..9....b...UBRa.C...2.l......V.x<:....[l..h.@.......rQ...:.pQ....1........NP...H.......f.(N...5f.%Y....Q....0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\index[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	25487
Entropy (8bit):	5.083554954745144
Encrypted:	false
SSDEEP:	384:SGunySC4SJLM/Ex1v2xiJgDc0hAtgn5uB+ec2zgrjeAhiN:SGuFyLMMx1ux/Zh6gn5uB+deAhe
MD5:	5E7BD12E328C4AE593734E1AE2AB3317
SHA1:	5E1CF57202212E5A99323A7728FD8D2B5489C244
SHA-256:	D0E97980D5E7C8609F31EDD59D321A0F9A22E44464929387251959EAEFF56069
SHA-512:	962C34614EBC31A9680FAB8DF4CCFF71B9C5B57E9D012B84CA7FBFA1BE466958B2DD3083CD6171DE1D45886269DD07AD9B52FC3B326565BB99738F32CD074CC8
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/index.htm
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml"> InstanceBegin template="/Templates/home.dwt" codeOutsideHTMLIsLocked="false" -->..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />.. InstanceBeginEditable name="doctitle" -->..<title>New Hampshire Department of Health and Human Services</title>..<meta name="Description" content="Welcome to the New Hampshire Department of Health and Human Services" />..<meta name="Keywords" content="health, human, services, dhhs, new, hampshire, nh, nh medicaid, tanf, child care, substance abuse, wic, child support" />.. InstanceEndEditable --> InstanceBeginEditable name="head" -->.. InstanceEndEditable -->..<link href="css/base.css" rel="stylesheet" type="text/css" />..<link href="css/contribute.css" rel="stylesheet" type="text/css" />..<link href="css/print.css" rel="stylesheet" type="text/css" m

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\largeA[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 16 x 13
Category:	downloaded
Size (bytes):	309
Entropy (8bit):	5.2708689646625055
Encrypted:	false
SSDEEP:	3:Cx9lyRTYgRO3p/o//nee63zyaaFij00Cjf/FYqtLy0yrtwlIqldJrDsFRkFcipcE:8lyR7c2eVyHTFt0rWIeLERkFTpcTzM
MD5:	BD22ACECC5B91E4BC9207FC9D6EAD4AB
SHA1:	C0503CC700CFBD52477ABBE82987B1A15E4C7AA7
SHA-256:	3FB0331CA28F01CAA741C42F84B0ABED4928B3BD2EF108666C6A1CA08CDD323A
SHA-512:	6E0F48FD273EBCDC3F3FACDEF42DD0C6750F14DCBBEAE806FD7B6C85B433CE46799EAD0F7067670A37714A0B4B64FB179BDDB25B029A2A4FB5449E2FEB7D61DA
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/largeA.gif
Preview:	GIF89a.....#.]]]...===.............................ZZZzzzggg;;;..................GGG......lll___...FFF......>>>XXXhhh.......................................................................................!.....#.,..........R..pH,.G.@@p,...&.`8 .BA .X`G.@..x`.^H .].......T*....Q...M.......oF...D..G .!D".DA.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\main[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	4053
Entropy (8bit):	5.401733199652954
Encrypted:	false
SSDEEP:	96:RBJabc3cCahrQN0JxlehAJdQceRExLASPjfm6u2M8tmV+:R2bC7apiaxleh0dQJ1SLfm6u2Rm4
MD5:	8399EAE5D919815405DAECDA2A1C379E
SHA1:	AC81F99AC35067FDAE2A27EAE6DDD46DB00ECB95
SHA-256:	D42383B5324502731C01F9F7A3E006A19287ABD6035519E3DA33F9861FEF1C24
SHA-512:	C4187970DF792A8290A5F4EB32BDB2AB033C2984304B531AE7CA326F115C4E158B1F74F22252A223A1DD54489329A6A8817277E2B7B7144B04540B70D1944C75
Malicious:	false
IE Cache URL:	https://translate.googleapis.com/translate_static/js/element/main.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var c="Translate",e=this\|\|self;function f(a,m){a=a.split(".");var b=e;a[0]in b\|\|"undefined"==typeof b.execScript\|\|b.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===m?b[d]&&b[d]!==Object.prototype[d]?b=b[d]:b=b[d]={}:b[d]=m}var g=/^[\w+/_-]+[=]{0,2}$/,h=null;function k(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&g.test(a)?a:""}function l(a){return a};var n={0:c,1:"Cancel",2:"Close",3:function(a){return"Google has automatically translated this page to: "+a},4:function(a){return"Translated to: "+a},5:"Error: The server could not complete your request. Try again later.",6:"Learn more",7:function(a){return"Powered by "+a},8:c,9:"Translation in progress",10:function(a){return"Translate this page to: "+(a+" using Google Translate?")},11:function(a){return"View this page in: "+a},12:"Show original",13:"The conten

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\nh-carepath-logo[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPCM), density 28x28, segment length 16, baseline, precision 8, 150x120, frames 3
Category:	downloaded
Size (bytes):	6776
Entropy (8bit):	7.898236158393633
Encrypted:	false
SSDEEP:	96:fEHKyVthL/7zY31KiN1+/SDE8uLYe60p2sm8eMWwpxPqBOw9JadyE7WWVd6:fwKWjz41K+E8uLY90gshxPqqdRpVd6
MD5:	B0C94593EF1C63C0CEAA714BE26132A6
SHA1:	95B1CC7C6E2BE75109866570C9BD0431567A1720
SHA-256:	0B25A99E9C77709FF905B89C867095AE8E2572FE981F1C15D6C402D9F01F8A29
SHA-512:	CB28616424C93E976D2C861A7D08C2FF79429B0CFEFD362EDD11EC32984AE54D3C9E79583D3BF857FF2735B494615D7CDEC066B13842BDC659D98155C386D873
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/nh-carepath-logo.jpg
Preview:	......JFIF.............C..............................................!........."$".$.......C.......................................................................x...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....(...(...(...(...(...t.......j.S..^.T{...\[.f.A.9.......]x..}...~....qy..Z.F.S.l0. ..q^.^.F.%R7V_.KO3...iN.h...&...m..+.#...H.P..r.H. ...6.u.....o.L.......cb.d.......>..z...Cs.......n....v..$z\|.....Nc........Tp....r.?+.4L..(...%...3[M....h]O._H.T:J.......6q..=..W......w.!...]..^..1.A,.0#.yl.;............N4....'...O..sP.\W...,.=A...-..^..........n.}%

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\official-nh[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 347 x 31, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8583
Entropy (8bit):	7.935526940506291
Encrypted:	false
SSDEEP:	192:7INxqz3yZYnN+CLKIB2Cx/psD3bcR45YnKH6z1Ws251fT:7exqP+Cr2GArcy8KZ1fT
MD5:	24504828C3D502D4C8BA406BB522901E
SHA1:	CCAE3409168C49D512263DD27A724E467136DF40
SHA-256:	932641E2110326BDA37D79D487A6B47B805E2DB3DF9A2D67953D3A3E1E8A4ABB
SHA-512:	778C845768BDB7C3DBC9C726CD23F3C658B6D168957038D472D17E97D358F7A69FDBE7C0F8BDCD3AE2CA00B5DC14F31C42255FCDA1F2F597631068B5973E1105
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/graphics/official-nh.png
Preview:	.PNG........IHDR...[.........Iqn#.. .IDATx..y\|TU...R...$.Y .fh......A.mQ:H;..@+t..}.j.(..Cc....k.J+.(.....0.H.$A..2W..R.i.?.9P.W}=....\|.'Uu.^...^{..>'.E.QD.E.QD.E.QD.E.QD.E.QD.E.QD.E.QD.E.QD.E.QD.E.QD.E.Qt..}+.!..<.e...s.z..K...s.%.@.P. ....^.B0.........3f.(..B..?....I5.L...Ac(..wtt.t..}.............P(..BH].t..0.!\..~QD.$}o../..?...:...h..8.G..YYY.p...{%I..!Dlll.S.v..8..#G...1./P][[....q...3..A...`H)(((...<h.a..'&....;V>k.V .v.S.v..g.v ,...,Oq:.F.....~.'..j..t..(*Zv.u.}.r..999...../&&f.,.qqq..=..&`,....l.~.H......y..w^(.~.Naa...n.......L./..."..x..........].>\|.9.~Xk7....r.\|...b...y...v...\.....R@.B.".....p...:...\|.ke...?...\.r...W...g.l..YO.Q._@..ou.l.UBEyy.Y`.......W.!.~..b...@..~{8...B...Y.......o.-.....B....x.._.}..,.k.n... ..v.....!......\..E.C...!DMM..............A....,#..~.v....;..B.......v...k.,..T.c..B..n..Z.#....u@.......!...ku8......nN.s...s...Py%....~.....s.=.s.w[[....7m.t.,._hzv:.......[.h.......1..Tu.ZQQ....$..m0z}...}..P.........l..@.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\search-icon[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 18 x 18
Category:	downloaded
Size (bytes):	1518
Entropy (8bit):	6.996843137132655
Encrypted:	false
SSDEEP:	24:HTM8VEZ3al1hJIwWwylZ82lYSqMHYKq9VyJT3byJeyCZ+47aGY8eJsx:oKkNinNus94JKJeyCZl7aL8B
MD5:	5BE960805AA62A3CFB8CFDC14C115507
SHA1:	32A3B1D41AC4289D2F5D20927049E5F14BB75250
SHA-256:	48173769D629B75D62E6AF43347CFBAA504A8A40B96B01D59B81149775235B91
SHA-512:	EA7506A9414197E4626954B39979ABDEC0A3D5A8262B496522A40D7BC23B8B26B4E650EAB7474F7EBF4B7D1C1DE3F6AF452C0B98F8C61418E7279EA9B1D1AE3B
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/css/graphics/search-icon.gif
Preview:	GIF89a.......3.....f...\.....O#...6A..........*.}..H5o$.k}i. .ayW.!.blX......>#.E..?.....G0....K~j....]5.]G.'.t....5M#..z.yX..i.z.J6p...kW....$.F[G.F#....0..Y5.-......................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:DocumentID="xmp.did:B7F8255DCF5B11E5AA99C19543BEC705" xmpMM:InstanceID="xmp.iid:B7F8255CCF5B11E5AA99C19543BEC705" xmp:CreatorTool="Adobe Photoshop CS3 Windows"> <xmpMM:DerivedFrom stRef:instanceID="uuid:52AD6615EE7FE11186B7C365868D3B59" stRef:documentID="uuid:32F48556EC2AE011BC6EAE981EDE

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\trans[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.292508224289396
Encrypted:	false
SSDEEP:	3:CUkw0Bl/Hh/:G/
MD5:	BF7D3E1972B3FE5BFE8C119FEE05E89D
SHA1:	081AF0BCFECBA29D5C4AC9025A3AEBADF79032A5
SHA-256:	5B4B97B224D9827C01D7A887A722F4C2A680195C4A66108559BAA0C65220DF90
SHA-512:	69B7926725CC19180618609A92BD27CEEC465BAF3DCE01CB6AA05C6A0EBB057DCA62AD2E5DC57FCE75F5B8B2C3B67E456EC880D6DE2B3F3C2581DB78FD6E8D7F
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/trans.gif
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\translateelement[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	18724
Entropy (8bit):	5.0229050341109795
Encrypted:	false
SSDEEP:	384:Z6/FpzOTH+pUwFQQFzosq6yzGy60wQHZAOcUcmMt0wGq6K:Z4FxskUwFQdcUcmMp
MD5:	DBC4C9FA52A475411EB75595DA532797
SHA1:	099407F8C66BC19CC7DA10EFB2715EAE0373C966
SHA-256:	6149F95C1EBDDE5391898E22A79821A810336F6BD74318291B4F49F23FBF0FA8
SHA-512:	81EBE7593D3856D282F9C581BA3DE18B1F3F0E42D3B912235BB36ED80CDB7FCE08CB91A0FB537CC5BB751F7FA161635B380C78FD0905E4A5B0395A30A64C9E86
Malicious:	false
IE Cache URL:	https://translate.googleapis.com/translate_static/css/translateelement.css
Preview:	/* Copyright 2020 Google Inc. All Rights Reserved. /..goog-te-banner-frame{left:0px;top:0px;height:39px;width:100%;z-index:10000001;position:fixed;border:none;border-bottom:1px solid #6b90da;margin:0;-moz-box-shadow:0 0 8px 1px #999999;-webkit-box-shadow:0 0 8px 1px #999999;box-shadow:0 0 8px 1px #999999;_position:absolute}.goog-te-menu-frame{z-index:10000002;position:fixed;border:none;-moz-box-shadow:0 3px 8px 2px #999999;-webkit-box-shadow:0 3px 8px 2px #999999;box-shadow:0 3px 8px 2px #999999;_position:absolute}.goog-te-ftab-frame{z-index:10000000;border:none;margin:0}.goog-te-gadget{font-family:arial;font-size:11px;color:#666;white-space:nowrap}.goog-te-gadget img{vertical-align:middle;border:none}.goog-te-gadget-simple{background-color:#fff;border-left:1px solid #d5d5d5;border-top:1px solid #9b9b9b;border-bottom:1px solid #e8e8e8;border-right:1px solid #d5d5d5;font-size:10pt;display:inline-block;padding-top:1px;padding-bottom:2px;cursor:pointer;zoom:1;display:inline}.goog-te-gad

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\twitter-btn[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 42 x 42, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1571
Entropy (8bit):	7.878071064801448
Encrypted:	false
SSDEEP:	48:bb/fuQAa+qjVokqjGmQ/eOalA7ChCMv9g29W:b7qa5+2eOa2pMv9BW
MD5:	1DD23BC04C2474694E87F34315A06316
SHA1:	D6F9BC6637C33A080FAF2199E4FE9872B9481C44
SHA-256:	B071078C029B3C32F8E7763301B1E52099391568FC6B58028700376076376F9F
SHA-512:	E158B13D79210FF7BFC105AABD22C4EC13008288AE66608903C251CB157FEF23BDEE63EF7A698933389E2E7C469098534FE13C80D70A7836594C2D30EDA0B788
Malicious:	false
IE Cache URL:	https://www.nh.gov/covid19/css/graphics/twitter-btn.png
Preview:	.PNG........IHDR..............[....IDATX..{lSu..?..v].h..........w@$....8"1.."<......h"..#.D...1!j.......h.<..9...{...[i..>...kwo.l..or.{oO..............8.=0....V..V.......K.........A..4we..,%....^.z\|.o.o\x..Z.....#....n.?X[S........'-.J..g..E...6.y.../...Z.n`@..-.[WV...Og.2.j...,......3WY..............V.n1..5Kqq...j. Ii5.#.^f).........n.f../. ...V..T....X."I...@6....a..e.......=....4....n.i..8....S..~\.?y`....UU%...4....c..-@G...S.)..[...r.....H..].!...I....D..\......5e....`S'.o.5`.M........,)u.....S.y....q...w..4...f.%.....U.P.....?.}}...,(O.\...o/.DE.@SW.....!Jl<\|.....O....y\|..t.<.(......N;........S).q....A.d.....t#.mv...OT.k.#.83A.YS...9.WjJ..R..D1.j+.yy..,Z..%J.{.............y..$.\.a....X..M.VMuS..ar.V.]f.......E...M.%8.....^......B..5...7.mC.....TU[...."........k-J&...r. .!}.A..{".......<Y.E.,.ca.I..5'....._...d/0.....!.6...f.3..........R.';BtF4.^.l=..W...<}.6...D...........%@gxh$W..g.aX..(4.3.9nH..=...7,.......o`.......7{.9R.u

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\vape[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 515x250, frames 3
Category:	downloaded
Size (bytes):	44153
Entropy (8bit):	7.96830520540272
Encrypted:	false
SSDEEP:	768:2GYdZ9YOhSRJYGw8kLwAQa2+oljqrenGSDYA8P5xzg8MsizwPGJ0C0t:JYXhciLRQa2+dCntCZMF07
MD5:	BBCCABB443E88E5AFA596CDF3FC323AB
SHA1:	D8CFB0DD1C1E2691C6011D6316EE9B51104A799E
SHA-256:	36E3C7459F9614AE918519CCB7C020AAC80C58F3C69300BF5B04ACD3E17F9C3E
SHA-512:	E73C184836E1E1CF8A63F6435C9296D4E6625DC5E750BF01D3B2C83FAC9439824B7DF25D2061524F5CDDB3226F470BF35B8B7622DB164EE724C3A0279F5F30C6
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/graphics/slider/vape.jpg
Preview:	......Exif..II*.................Ducky.......<.....qhttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:AB269C91A3C9E911B6D5E52046A14E0C" xmpMM:DocumentID="xmp.did:99A2F8BA46B111EAB138C2FF5C17A9C3" xmpMM:InstanceID="xmp.iid:99A2F8B946B111EAB138C2FF5C17A9C3" xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:d7d9797c-5149-294b-b62c-190b65be5894" stRef:documentID="xmp.did:AB269C91A3C9E911B6D5E52046A14E0C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\women[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	13071
Entropy (8bit):	4.9799957899156935
Encrypted:	false
SSDEEP:	96:1AAjGR0m3BGTvVrGNI643LJ7DoWK3aS6pxVHbh4DfxvLLmyySaM9xs/3lCseG9cU:SHR0m3mz8Y8RHV92Gk6h9rXdR72oK
MD5:	86AB93FC9FDDA269C5974261A1D1EB1E
SHA1:	3A0B4753FE80FD8D67F965DED7906DA9C996EBD1
SHA-256:	57BBA8778C55549B83883E7750D4D5E2D18459E8F6C77106063B08ADE2C7B4A3
SHA-512:	3533ECD1066C0C84F7A54EE3689559AC664520E82D483531F23257C3630272074D9476B84F1406124E26918084770F4C8AB1F5DF3706E42D4B613A6ECF744D4D
Malicious:	false
IE Cache URL:	https://www.dhhs.nh.gov/foryou/women.htm
Preview:	<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">..<html xmlns="http://www.w3.org/1999/xhtml"> InstanceBegin template="/Templates/main.dwt" codeOutsideHTMLIsLocked="false" -->..<head>..<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" />.. InstanceBeginEditable name="doctitle" -->..<title>Services for Women \| New Hampshire Department of Health and Human Services</title>..<meta name="Description" content="DHHS services for women." />..<meta name="Keywords" content="women, health, human, services, dhhs, new, hampshire, nh" />.. InstanceEndEditable --> InstanceBeginEditable name="head" -->...... InstanceEndEditable -->..<link href="../css/base.css" rel="stylesheet" type="text/css" />..<link href="../css/contribute.css" rel="stylesheet" type="text/css" />..<link href="../css/print.css" rel="stylesheet" type="text/css" media="print" />..<script type="text/javascript" src="../scripts/textsiz

C:\Users\user\AppData\Local\Temp\~DF3D4A1489E2E6071E.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13077
Entropy (8bit):	0.5097471473742954
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9los9lo89lWtHyGK6ulJ:kBqoIXx6
MD5:	5CC36D43505E9721D21B889018BCC642
SHA1:	5B0C11C5B5A82B8879389C07176240BBED0ED0F1
SHA-256:	A4AE816B4D8BD58F177449EA175776415E5A48D48867D488A3467CE14E8B9E7E
SHA-512:	EC9EF5936E88100FD14D59C88D38DC0DC079C1A64C02E0FEE7B90F6C4BB28FE577E50CB8B214C7C61EA9FDAD452C36B3B6DBF567C921FD9E597EC4437E02F195
Malicious:	false
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFD9E6F99855018120.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	0.27918767598683664
Encrypted:	false
SSDEEP:	24:c9lLh9lLh9lIn9lIn9lRx/9lRJ9lTb9lTb9lSSU9lSSU9laAa/9laA:kBqoxxJhHWSVSEab
MD5:	AB889A32AB9ACD33E816C2422337C69A
SHA1:	1190C6B34DED2D295827C2A88310D10A8B90B59B
SHA-256:	4D6EC54B8D244E63B0F04FBE2B97402A3DF722560AD12F218665BA440F4CEFDA
SHA-512:	BD250855747BB4CEC61814D0E44F810156D390E3E9F120A12935EFDF80ACA33C4777AD66257CCA4E4003FEF0741692894980B9298F01C4CDD2D8A9C7BB522FB6
Malicious:	false
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFE0551548F1A31EE1.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	140085
Entropy (8bit):	0.8755511196380525
Encrypted:	false
SSDEEP:	384:kBqoxKAuqR+9DhAjjdQW/qgXmEtwZ0G4YI9G3CMSFPM6MtMXwH/RLhR8cRDg6IYg:aW7bF5LC6
MD5:	FD29DCD55707A52157F747E542957C4C
SHA1:	B0BA06293AA214E53F1EE6546CC8FF562FD195A4
SHA-256:	32166FC51A105934B128E8318BABC2C2F8045B39908F0387FA39744084F5AB2D
SHA-512:	534E479A40316F5F5439C5C24BEA81EDFD512825FEEFC4F8E39DE2B0BF236F20184607CD2EB1CAA31C1F5BCAC686C16B0F6B9AAC0D5A2BC3345D8176954AE35F
Malicious:	false
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\COVID19open_closedPodsVACCINE_LETTER2B.LNK Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Sep 30 13:47:09 2020, mtime=Tue Feb 16 23:21:38 2021, atime=Tue Feb 16 23:21:35 2021, length=22673, window=hide
Category:	dropped
Size (bytes):	2410
Entropy (8bit):	4.7525078103426
Encrypted:	false
SSDEEP:	48:89oaaXrVTxgK52VTY72B6p9oaaXrVTxgK52VTY72B6:89GrVTzIVTJK9GrVTzIVTJ
MD5:	7F8C2460AB02E896CCACF1D6CB8E834C
SHA1:	0F2D1B588E7EDC623A5C111B3EBFA8DFA26C5165
SHA-256:	71D6886A743E965193B633144B4FBDC40446B7C04D449150C082B709F32E2DD0
SHA-512:	AB83CAB181F6C7CB9852895B2440F4B19525C816A927C381B96616F57BCDFCEED2EAA2471E4C6AD8F0C7440B1F5893DC720C5DEC0782CBA2039997F642A387B3
Malicious:	false
Preview:	L..................F.... ....v..8....3...............X...........................P.O. .:i.....+00.../C:\...................x.1......Ng...Users.d......L..QR......................:......B..U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....T.1.....>Q.u..user..>.......NM.QR.......S......................Q.a.l.f.o.n.s.....~.1.....>Q.u..Desktop.h.......NM.QR.......Y..............>......7..D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.......2..X..QR.. .COVID1~1.DOC.........>Q.uQR......f.....................v.h.C.O.V.I.D.1.9.o.p.e.n._.c.l.o.s.e.d.P.o.d.s.V.A.C.C.I.N.E._.L.E.T.T.E.R.2.B...d.o.c.x.......r...............-.......q...........>.S......C:\Users\user\Desktop\COVID19open_closedPodsVACCINE_LETTER2B.docx..B.....\.....\.....\.....\.....\.D.e.s.k.t.o.p.\.C.O.V.I.D.1.9.o.p.e.n._.c.l.o.s.e.d.P.o.d.s.V.A.C.C.I.N.E._.L.E.T.T.E.R.2.B...d.o.c.x.........:..,.LB.)...Aw...`.......X.......841618...........!a..%.H.VZAj...vXt.+........W...!a..%.H.VZAj...vXt.+........W...........

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	154
Entropy (8bit):	4.977349550230721
Encrypted:	false
SSDEEP:	3:Htq97PbkK0C0xg3XLBVo+07PbkK0C0xg3XLBVomxWtq97PbkK0C0xg3XLBVov:HtPVjg3X3dVjg3X3ePVjg3X3y
MD5:	F90450B9BEDBBE7298CFA132E86C4FED
SHA1:	4B3F0F9887698DDFB7C58973F52068A1ADB56F34
SHA-256:	268B002D9E13BBA709B6533A2E3B276022AACB56D0CB130A2837E2E12A47BEB9
SHA-512:	0BC9C4A3A5FA87743BEBC043892EEDE80638B4FD4EDB054A4D111F9BF50FDDA9A73B59EFA9BCC8CBBCD1A7853ED78F8AE0FFB3EBAD785D8BA2C4085077247272
Malicious:	false
Preview:	[misc]..COVID19open_closedPodsVACCINE_LETTER2B.LNK=0..COVID19open_closedPodsVACCINE_LETTER2B.LNK=0..[misc]..COVID19open_closedPodsVACCINE_LETTER2B.LNK=0..

C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	2.439025766620559
Encrypted:	false
SSDEEP:	3:Rl/ZdbtC6QHlqemvlt/XolFptB1X/n:RtZZw6pvno7nN
MD5:	1775954A91A11EF12FD21128C55C0613
SHA1:	8ABD8885DA6B4B1733F8465AA1055F9855D5E225
SHA-256:	462B2A3022C4BB3EFEC4671B5C125A15A0C36A6EA7D6DB2EDD4246EA8C20031F
SHA-512:	63D8179A06BB540933997F2A9DE8E0569FAA2925AA37DC5D6F4478437614D0F51AE25976D06FC2235A3F7155C1F9B00BD22FD464DCF37A4D7B08FAF3816BD327
Malicious:	false
Preview:	.pratesh................................................p.r.a.t.e.s.h...........g_5...........H.......6C..4.4...k_E.............................o_................

C:\Users\user\AppData\Roaming\Microsoft\UProof\CUSTOM.DIC Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	Little-endian UTF-16 Unicode text, with CR line terminators
Category:	dropped
Size (bytes):	22
Entropy (8bit):	2.9808259362290785
Encrypted:	false
SSDEEP:	3:QAlX0Gn:QKn
MD5:	7962B839183642D3CDC2F9CEBDBF85CE
SHA1:	2BE8F6F309962ED367866F6E70668508BC814C2D
SHA-256:	5EB8655BA3D3E7252CA81C2B9076A791CD912872D9F0447F23F4C4AC4A6514F6
SHA-512:	2C332AC29FD3FAB66DBD918D60F9BE78B589B090282ED3DBEA02C4426F6627E4AAFC4C13FBCA09EC4925EAC3ED4F8662FDF1D7FA5C9BE714F8A7B993BECB3342
Malicious:	false
Preview:	....p.r.a.t.e.s.h.....

C:\Users\user\AppData\Roaming\Microsoft\UProof\ExcludeDictionaryEN0409.lex Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	Little-endian UTF-16 Unicode text, with no line terminators
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:Qn:Qn
MD5:	F3B25701FE362EC84616A93A45CE9998
SHA1:	D62636D8CAEC13F04E28442A0A6FA1AFEB024BBB
SHA-256:	B3D510EF04275CA8E698E5B3CBB0ECE3949EF9252F0CDC839E9EE347409A2209
SHA-512:	98C5F56F3DE340690C139E58EB7DAC111979F0D4DFFE9C4B24FF849510F4B6FFA9FD608C0A3DE9AC3C9FD2190F0EFAF715309061490F9755A9BFDF1C54CA0D84
Malicious:	false
Preview:	..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\M3FZ67K18CPBR90X7AEC.temp Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	5149
Entropy (8bit):	3.18838222037554
Encrypted:	false
SSDEEP:	96:+oPTL9m9SyAJYoPTL973SyAfoPTL9t9SyAf:+mmVmGmt8
MD5:	14549F0647FA8D8ADCF0304E0326A982
SHA1:	265763CA1E0222D89AFF2F3F8DAEAADCF54BE5E2
SHA-256:	0D96F48B27937303B5C1BED6CFC2BF2201C701D56383A0DF69DAFB4D20BC7B31
SHA-512:	267947A9CA15C693A480A3ECD6BF50A76A0890DC4CAA1D12E4F6B56BC3FEF1F55E6CF637A993FD183F641FD69248F67645B129689EB1DCD94516115B2F6CDBE8
Malicious:	false
Preview:	...................................FL..................F.@.. .....@.>.....U.......?.c................................P.O. .:i.....+00.../C:\.....................1.....>Q.u..PROGRA~1..t......L.>Q.u....E...............J.......I.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....l.1......L.J..INTERN~1..T......L.QR................................i.n.t.e.r.n.e.t. .e.x.p.l.o.r.e.r.....f.2......L.9 .iexplore.exe..J......L.JQR.......R..........x.............i.e.x.p.l.o.r.e...e.x.e.......^...............-.......]............[dz.....C:\Program Files\internet explorer\iexplore.exe....-.p.r.i.v.a.t.e...C.:.\.W.i.n.d.o.w.s.\.S.Y.S.T.E.M.3.2.\.I.E.F.R.A.M.E...d.l.l.........%SystemRoot%\SYSTEM32\IEFRAME.dll...................................................................................................................................................................................................................................%.S.y.s.t.e.m.R.o.o.t.%.\.S.Y.S.T.E.M.3.2.\.I

C:\Users\user\Desktop\~$VID19open_closedPodsVACCINE_LETTER2B.docx Download File
Process:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	2.439025766620559
Encrypted:	false
SSDEEP:	3:Rl/ZdbtC6QHlqemvlt/XolFptB1X/n:RtZZw6pvno7nN
MD5:	1775954A91A11EF12FD21128C55C0613
SHA1:	8ABD8885DA6B4B1733F8465AA1055F9855D5E225
SHA-256:	462B2A3022C4BB3EFEC4671B5C125A15A0C36A6EA7D6DB2EDD4246EA8C20031F
SHA-512:	63D8179A06BB540933997F2A9DE8E0569FAA2925AA37DC5D6F4478437614D0F51AE25976D06FC2235A3F7155C1F9B00BD22FD464DCF37A4D7B08FAF3816BD327
Malicious:	false
Preview:	.pratesh................................................p.r.a.t.e.s.h...........g_5...........H.......6C..4.4...k_E.............................o_................

Static File Info

General
File type:	Microsoft Word 2007+
Entropy (8bit):	7.5515864823583705
TrID:	Word Microsoft Office Open XML Format document (49504/1) 49.01% Word Microsoft Office Open XML Format document (43504/1) 43.07% ZIP compressed archive (8000/1) 7.92%
File name:	COVID19open_closedPodsVACCINE_LETTER2B.docx
File size:	22673
MD5:	e65769cca6ce8214adf674a8001d83b4
SHA1:	d3800da27e0aa660f04da269b5392fb3f4c26eb5
SHA256:	b0ecb837f4df662ff941ce2cdb64cea78b07c22b1e9ad0d328229aa9dd9f1996
SHA512:	4fb1b69222aa92bd97145eb707a9249ea97a9dfd535cb4adbd0b0debc6c5ca715534d1409db3046d922281187e76eb215e540141d2cbc7a2db444aa9150537a6
SSDEEP:	384:T18xovaJhkQ80FRJNtdpzUbXA530bw0uBGM/xhQl9lce0DIdPuO:BcMaJhkQ9T1eXwEbwZxhQlwe0kd/
File Content Preview:	PK..........!.i...o...........[Content_Types].xml ...(.........................................................................................................................................................................................................

File Icon


Icon Hash:	74fcd0d2d6d6d0cc

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 16, 2021 16:22:12.025783062 CET	49723	80	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:12.026664972 CET	49724	80	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:12.174304008 CET	80	49723	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:12.174515963 CET	49723	80	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:12.175271034 CET	80	49724	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:12.175415993 CET	49724	80	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:12.611895084 CET	49723	80	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:12.764082909 CET	80	49723	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:12.764265060 CET	49723	80	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:13.104409933 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:13.252722979 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:13.252826929 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:13.263142109 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:13.415457964 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:13.415497065 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:13.415649891 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:13.415676117 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:13.415740013 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:13.653018951 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:13.661058903 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:13.807749033 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:13.807909966 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:13.823383093 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:13.823434114 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:13.823455095 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:13.823474884 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:13.823494911 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:13.823512077 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:13.823714018 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:13.823772907 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:13.983458996 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.000679016 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.002768993 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.057692051 CET	49724	80	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.058132887 CET	49723	80	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.124123096 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.125866890 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.126341105 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.126430988 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.127008915 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.127039909 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.127062082 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.127079964 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.127088070 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.127113104 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.127121925 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.127134085 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.127150059 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.127187967 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.127213001 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.127314091 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.127338886 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.127362013 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.127365112 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.127399921 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.127410889 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.127424955 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.127449989 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.127453089 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.127499104 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.128088951 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.145584106 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.145872116 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.147062063 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.147326946 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.199623108 CET	80	49724	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.199675083 CET	80	49723	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.199862003 CET	49724	80	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.199923038 CET	49723	80	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.270086050 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.270126104 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.270144939 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.270308018 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.270359039 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.270360947 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.270649910 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.270685911 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.270708084 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.270728111 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.270735979 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.270798922 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.271720886 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.271858931 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:14.276675940 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:14.276870966 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.399796009 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.400649071 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.401540041 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.403879881 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.405005932 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.407011986 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.407972097 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.433610916 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.541562080 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.541749001 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.542059898 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.542177916 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.543102026 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.543135881 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.543224096 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.543308020 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.543318987 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.543411970 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.545072079 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.545216084 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.551229954 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.551415920 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.581176996 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.581223965 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.581248045 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.581258059 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.581274986 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.581301928 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.581315041 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.581326008 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.581350088 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.581357956 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.581422091 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.581485987 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.599423885 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.602627039 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.603310108 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.603882074 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.606442928 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.617434978 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.620337963 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.620728970 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.621077061 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.621459007 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.625078917 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.630776882 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.634918928 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.743133068 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.743325949 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.748248100 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.748456955 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.761976004 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.765857935 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.765898943 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.767044067 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.771301985 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.771539927 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.771558046 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.771584988 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.771645069 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.771652937 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.771701097 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.771744013 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.771887064 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.771933079 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.771956921 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.771972895 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.771981955 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.772006035 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.772016048 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.772027969 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.772077084 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.772324085 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.772352934 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.772407055 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.772469997 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.772520065 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.772543907 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.772567034 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.772598982 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.772634983 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.773447990 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.773488045 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.773509026 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.773530006 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.773552895 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.773571968 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.773618937 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.773746014 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.778902054 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.779119015 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.915133953 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915179014 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915199995 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915220976 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915265083 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915291071 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915374041 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.915426016 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.915461063 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915491104 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915518045 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915544033 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915544987 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.915568113 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915581942 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.915591955 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915611029 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.915617943 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915644884 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915709019 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.915728092 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915756941 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915781021 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915791035 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.915801048 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.915802002 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:15.915806055 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.915836096 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:15.915869951 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.063811064 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.063842058 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.063853979 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.063867092 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.063879013 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.063890934 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.063906908 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.063925028 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.063942909 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.063957930 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.063972950 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.063990116 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.064023018 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.064038038 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.064065933 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.064083099 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.068499088 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.602605104 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.605137110 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.699939966 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.704601049 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.706446886 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.706509113 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.711658001 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.716741085 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.717118979 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.717159986 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.764197111 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.767518044 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.767772913 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.770924091 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.770965099 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.770987988 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.771013021 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.771018028 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.771051884 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.771105051 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.851757050 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.851919889 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.851958990 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.853990078 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.855500937 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.855545998 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.855571985 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.855597019 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.855618954 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.855634928 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.855649948 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.855683088 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.855731964 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.855835915 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.855860949 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.855885983 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.855930090 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.856276989 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.856350899 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.858289957 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.861915112 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.861960888 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.861979961 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862009048 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862035036 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862059116 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862075090 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862082005 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862104893 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862170935 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862175941 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862193108 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862204075 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862222910 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862237930 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862250090 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862272024 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862292051 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862293005 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862317085 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862337112 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862361908 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862375975 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862381935 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862386942 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862389088 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862406015 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862413883 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862430096 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862442017 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862456083 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862467051 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862478971 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.862488031 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862513065 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.862541914 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.863079071 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.863116980 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.863141060 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.863163948 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.863168001 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.863182068 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.863198042 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.865117073 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.904215097 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.904452085 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.907851934 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.908112049 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.990766048 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.995249033 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.995286942 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.995307922 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.995330095 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.995352030 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.995372057 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.995395899 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.995417118 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.995439053 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:16.995465040 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.995498896 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.997231960 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:16.999988079 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.000029087 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.000049114 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.000081062 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.000102043 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.000123024 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.000150919 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.000165939 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.000190973 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.000205040 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.000231028 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.000238895 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.000260115 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.000283003 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.000319958 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.001836061 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.030278921 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.040887117 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.048890114 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.053165913 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.071223974 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.129177094 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.129301071 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.131561995 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.133563042 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.135998011 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.136130095 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.141443014 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141477108 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141494989 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141510963 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141526937 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141542912 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141561985 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141578913 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141602039 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141618013 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141634941 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141650915 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141666889 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141680956 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.141680002 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.141707897 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.141725063 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.141735077 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.145065069 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.148519993 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.150302887 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.168381929 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.168587923 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.168593884 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.168608904 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.168629885 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.168647051 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.168649912 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.168663979 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.168674946 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.168684959 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.168699026 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.168716908 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.168730021 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.168741941 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.168755054 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.168757915 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.168786049 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.168790102 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.168822050 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.172430038 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.178639889 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178669930 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178688049 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178731918 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.178771019 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178776026 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.178791046 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178807974 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178823948 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178833008 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.178837061 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178848982 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178864002 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.178874969 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178890944 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178909063 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178909063 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.178921938 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178930044 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.178942919 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178960085 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178970098 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.178977013 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.178993940 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.179004908 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.179012060 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.179038048 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.179069042 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.191283941 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.191344976 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.191473007 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.191508055 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.191620111 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.191647053 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.191668034 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.191730976 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.191745996 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.191750050 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.192387104 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.192476988 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.192605972 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.192667961 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.193810940 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.193890095 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.194094896 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.194164991 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.194432020 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.194493055 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.197859049 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.197985888 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.198313951 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.198339939 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.198360920 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.198380947 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.198415995 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.198472977 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.198493958 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.198518038 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.198528051 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.198544025 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.198565960 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.198601961 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.198662996 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.198713064 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.198832035 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.198854923 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.198879957 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.198889971 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.198906898 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.198930979 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.199207067 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.199233055 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.199253082 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.199274063 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.199278116 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.199304104 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.199312925 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.199346066 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.199374914 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.210985899 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211045027 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211069107 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211085081 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211102009 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211118937 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211141109 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.211174011 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.211247921 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.211256981 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211277962 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211297989 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211308956 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.211322069 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211344957 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211349964 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.211368084 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211383104 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.211390018 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211411953 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211437941 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.211483002 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.211565018 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211590052 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.211622000 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.211687088 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.275883913 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.278860092 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.278882980 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.278894901 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.278907061 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.278919935 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.278934002 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.278966904 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.279004097 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.280987024 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.281117916 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.286822081 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.287412882 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.288723946 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.288834095 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.289808989 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.289900064 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.290617943 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.290669918 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.290721893 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.290745974 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.290796041 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.290806055 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.290932894 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.290990114 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.291023970 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.291084051 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.291217089 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.291244030 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.291263103 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.291270971 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.291279078 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.291309118 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.291327000 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.291615963 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.291645050 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.291676998 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.291691065 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.291712999 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.291733980 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.291752100 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.291764975 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.291795969 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.291912079 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.291964054 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.292105913 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.292135954 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.292156935 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.292175055 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.292557955 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.292587042 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.292610884 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.292637110 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.292650938 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.292660952 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.292684078 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.292692900 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.292707920 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.292726040 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.292733908 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.292759895 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.292762995 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.292787075 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.292798042 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.292838097 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.315330982 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.315370083 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.315392971 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.315419912 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.315445900 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.315465927 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.315516949 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.315587997 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.315817118 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.315845013 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.315875053 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.315882921 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.315907001 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.315917969 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.315934896 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.315956116 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.315972090 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.315996885 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.316019058 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.316056967 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.316118956 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.316167116 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.316441059 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.316467047 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.316499949 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.316509008 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.316521883 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.316546917 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.316557884 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.316581011 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.316600084 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.316622972 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.316631079 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.316654921 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.316664934 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.316689014 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.316701889 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.316732883 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.317162991 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.317190886 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.317224979 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.317239046 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.317255974 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.317270994 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.317298889 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.317342043 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.318098068 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318151951 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318182945 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318186045 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.318212986 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318217993 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.318237066 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.318260908 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.318269014 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318314075 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.318331957 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318353891 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318370104 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.318381071 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318393946 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.318402052 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318417072 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.318443060 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318466902 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.318500042 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318520069 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318639994 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318660975 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318674088 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318694115 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.318739891 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.318860054 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.336435080 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.336463928 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.336481094 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.336493969 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.336505890 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.336556911 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.336579084 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.336607933 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.336626053 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.336643934 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.336651087 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.336724997 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.337297916 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.337336063 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.337352991 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.337368965 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.337400913 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.337416887 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.337418079 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.337471008 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.339011908 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.339032888 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.339082003 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.339109898 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.339476109 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.339493990 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.339529037 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.339555979 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.339864016 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.339894056 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.339922905 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.339935064 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.341403961 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.344746113 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.344774008 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.344866991 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.344995022 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.345020056 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.345038891 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.345051050 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.345069885 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.345093966 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.345128059 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.345290899 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.345324039 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.345335960 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.345350027 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.345470905 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.345571041 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.345592022 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.345607996 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.345623016 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.345669031 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.351035118 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.352366924 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.353212118 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353245974 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353271961 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353298903 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353324890 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353338003 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.353343010 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353359938 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353399992 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353401899 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.353427887 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.353465080 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.353646040 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353665113 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353688002 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353701115 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.353713989 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353725910 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.353729963 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353763103 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.353784084 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353800058 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.353813887 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353837013 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353842020 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.353863001 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353878021 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.353882074 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.353920937 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.356951952 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.381362915 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.381921053 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.438844919 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.438874006 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.438885927 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.438901901 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.439457893 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.439490080 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.440474033 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.440490961 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441283941 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441498041 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441525936 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441550016 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441577911 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441605091 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441627026 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441658020 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441684008 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441701889 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441759109 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441821098 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441845894 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441863060 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441878080 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441960096 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.441977024 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442126989 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442168951 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442187071 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442203045 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442235947 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442256927 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442321062 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442339897 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442526102 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442568064 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442594051 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442645073 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442677021 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442693949 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442821980 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442838907 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442854881 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.442872047 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.443368912 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.443536043 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.443538904 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.445185900 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.445247889 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.445266008 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.445291996 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.445292950 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.445326090 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.445329905 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.464349985 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464378119 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464390993 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464406967 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464437962 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464466095 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464482069 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464498043 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464550018 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464581966 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464600086 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464616060 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464709044 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464776993 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464801073 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464816093 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464910984 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464936018 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464951992 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.464972019 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465013027 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465147018 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465166092 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465186119 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465269089 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465302944 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465756893 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465787888 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465812922 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465830088 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465867043 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465893984 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465912104 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465926886 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465941906 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.465985060 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466010094 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466026068 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466042042 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466057062 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466072083 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466088057 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466424942 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466455936 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466485023 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466512918 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466543913 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466562986 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466578960 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.466594934 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.468380928 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.469171047 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.469412088 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.469468117 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.469510078 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.469594955 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.493594885 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.493617058 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.494703054 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.502691984 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.502737045 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.502754927 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.502773046 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.502788067 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.502803087 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.502816916 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.502832890 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503092051 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503117085 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503155947 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503173113 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503190041 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503206015 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503305912 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503333092 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503359079 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503375053 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503514051 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503547907 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503566027 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503582001 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503823042 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503849983 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503869057 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.503925085 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.504913092 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.505067110 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.505120993 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.508584023 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.508687019 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.508732080 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.508750916 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.508768082 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.508994102 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509047985 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509085894 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509109020 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509125948 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509149075 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509164095 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509182930 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509216070 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509242058 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509258032 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509273052 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509346962 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509377003 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509408951 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509424925 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509443998 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509468079 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509596109 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509619951 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509644032 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509668112 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509684086 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509699106 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509829044 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509845972 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509876966 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509895086 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509959936 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.509977102 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.511302948 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.511487007 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.511538029 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.511575937 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.516297102 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516314030 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516330957 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516346931 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516361952 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516376972 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516396046 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516412973 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516547918 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516587019 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.516588926 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.516592026 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516618967 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516637087 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516652107 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516757965 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516851902 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516875982 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516908884 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516940117 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.516988039 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.517014980 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.517035961 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.517050982 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.517066002 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.517081022 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.517096996 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.517118931 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.517203093 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.517235994 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.517260075 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.517275095 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.517369986 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.543313980 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.587764025 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.590085030 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.599858999 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.599886894 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.601480007 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.601504087 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.601524115 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.601538897 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.601654053 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.601676941 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.601701975 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.601717949 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.601744890 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.601763010 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.601811886 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.601839066 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.601902962 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.603194952 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.604516983 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.604794979 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.621061087 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621100903 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621254921 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621335030 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621367931 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621439934 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621480942 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621506929 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621532917 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621581078 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621637106 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621666908 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621692896 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621718884 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621747971 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621787071 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621823072 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621875048 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621906042 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621937990 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.621963978 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.622004032 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.622030020 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.622052908 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.623677969 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.625037909 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.625083923 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.657407045 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.657444954 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.658849955 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.659174919 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.659204960 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.659220934 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.659235001 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.659251928 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.659274101 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.659291983 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.659308910 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.659331083 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.659425020 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.659547091 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.659564972 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.659584999 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.659598112 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.662203074 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.692589998 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.692730904 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.708458900 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.710074902 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.732054949 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.732131004 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.739655018 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.739681005 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.739696980 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.739720106 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.739748001 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.739765882 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.739798069 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.739814997 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.739830017 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.739846945 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.739859104 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.741070032 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.741461992 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.796837091 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.819969893 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.823234081 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.833594084 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.833740950 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.834638119 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.837085962 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.837771893 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.852220058 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.852242947 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.852262974 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.853849888 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.859405041 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.859421968 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.861377954 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.888941050 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.956129074 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.956152916 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.956171036 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.956259012 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.956285000 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.969948053 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.969973087 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.969990969 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.970006943 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.970026970 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.970045090 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.970056057 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.970082998 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.970138073 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.970300913 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.970347881 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.970722914 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.970755100 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.970772028 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.970779896 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.970787048 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.970805883 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.970805883 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.970824003 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.970830917 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.970871925 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.970921040 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.970958948 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.970984936 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.971024990 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.974498987 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.974601984 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.983891964 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.984002113 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.985626936 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.985728025 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.986826897 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.986905098 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.989343882 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.989448071 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:17.993536949 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:17.993617058 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:18.040566921 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:18.040692091 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:18.837141991 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:18.991550922 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:18.991583109 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:18.991595984 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:18.991604090 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:19.008174896 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:32.854808092 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.854861021 CET	443	49730	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.854898930 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:32.854954004 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:32.944179058 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.944209099 CET	443	49732	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.944365978 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:32.958755970 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.958784103 CET	443	49736	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.958863020 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:32.958919048 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:32.963777065 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.963815928 CET	443	49725	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.963974953 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:32.973608017 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.973629951 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.973789930 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:32.973901987 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.973916054 CET	443	49729	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.974009991 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:32.974037886 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:32.975574017 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.975590944 CET	443	49735	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.975707054 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:32.978008986 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.978024960 CET	443	49728	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.978091002 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:32.982261896 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.982284069 CET	443	49727	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:32.982399940 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:32.982413054 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:22:33.978734016 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:33.978765965 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:22:33.978951931 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:22.775743961 CET	49749	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:22.917522907 CET	443	49749	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:22.917644024 CET	49749	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:22.921168089 CET	49749	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:23.071244955 CET	443	49749	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:23.071280956 CET	443	49749	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:23.071351051 CET	49749	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:23.071377039 CET	443	49749	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:23.071382999 CET	49749	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:23.071429968 CET	49749	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:23.085839987 CET	49749	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:23.241050959 CET	443	49749	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:23.241167068 CET	49749	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:23.244843960 CET	49749	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:23.406017065 CET	443	49749	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:23.406106949 CET	49749	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.025844097 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.026071072 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.171506882 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.171638966 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.171675920 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.171751976 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.172924995 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.173517942 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.320478916 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.320517063 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.320533037 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.320672989 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.320710897 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.321841955 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.321866035 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.322010994 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.322036982 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.322099924 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.322738886 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.344883919 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.345019102 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.345273972 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.491147041 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.491283894 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.491322041 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.492961884 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.493154049 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.493200064 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.503546000 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.662657022 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.662691116 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.662712097 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.662731886 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.662750006 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.662782907 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.662889004 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.675834894 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.676733971 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.695041895 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.710319996 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.710427999 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.710959911 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.815901995 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.816091061 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.819977045 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.820024967 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.820048094 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.820076942 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.820103884 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.820128918 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.820152044 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.820178032 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.820249081 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.820507050 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.822123051 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.822607994 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.822638988 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.822666883 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.822689056 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.822707891 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.822727919 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.822757006 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.822784901 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.822846889 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.822855949 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.822994947 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.823031902 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.827097893 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.838771105 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.838948965 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.839605093 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.851069927 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.851821899 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.851953983 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.854691029 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.857273102 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.857563019 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.882626057 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.886817932 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.886975050 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.962038994 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.962069988 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.962203026 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.966335058 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966372013 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966397047 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966419935 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966423035 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.966448069 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966474056 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966483116 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.966500044 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966526031 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966530085 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.966552973 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966556072 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.966578007 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966604948 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966608047 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.966629982 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966634989 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.966658115 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.966658115 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966685057 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966686964 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.966708899 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966712952 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.966734886 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.966761112 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.966764927 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.967593908 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.968687057 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.968715906 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.968763113 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.968801975 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.968837023 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.968863010 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.968888044 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.968909025 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.968926907 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.968954086 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.968955994 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.968959093 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.968988895 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.969012976 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.969033957 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.969058990 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.969065905 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.969090939 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.969110966 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.969129086 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.969507933 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.972944021 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.972975016 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.972990990 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.973007917 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.973136902 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.973166943 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.989895105 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:27.990089893 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.990876913 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:27.993491888 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.025991917 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.026202917 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.027623892 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.029524088 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.030383110 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.033449888 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.033480883 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.035983086 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.036139965 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.036854982 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.037168980 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.039541960 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.103660107 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.103725910 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.103751898 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.103774071 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.103879929 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.104105949 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.107661963 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.107706070 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.107731104 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.107753038 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.107844114 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.107913971 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.108858109 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.110140085 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.110174894 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.110447884 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.112699032 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.140793085 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.142601013 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.142630100 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.142718077 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.147083044 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.169157028 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.170825958 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.170953035 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.170974970 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.170995951 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.171014071 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.171030045 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.171046972 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.171061993 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.171072960 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.171124935 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.171273947 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.171334982 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.174370050 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.176115036 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.177942991 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.178956985 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.178997040 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.183672905 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.185465097 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.185491085 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.185503960 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.185517073 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.185530901 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.185544014 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.185563087 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.185574055 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.185729980 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.185756922 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.189662933 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.243947029 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.243983984 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.247028112 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.247442961 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.247472048 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.249008894 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.283165932 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.286467075 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.286829948 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.286856890 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.289918900 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.293122053 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.305288076 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.305320024 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.305332899 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.305346966 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.305360079 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.305377007 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.305408955 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.305427074 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.305442095 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.305464983 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.305520058 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.305530071 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.305591106 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.305629015 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.305711985 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.305731058 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.305746078 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.308433056 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.309299946 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.316556931 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.316590071 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.316602945 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.316615105 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.316627979 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.316646099 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.316658020 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.316754103 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.316787004 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.317029953 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.317059994 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.317195892 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.317457914 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.331326008 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.331370115 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.331680059 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.359781027 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.418689013 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.418755054 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.418790102 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.418814898 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.418838978 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.418859005 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.418864012 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.418876886 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.418893099 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.418917894 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.418941021 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.418951988 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.418967962 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.418972015 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.418992996 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419019938 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419078112 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419184923 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419214010 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419240952 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419255972 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419265985 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419290066 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419296026 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419317007 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419342041 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419346094 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419367075 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419373989 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419393063 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419411898 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419430017 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419450045 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419457912 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419482946 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419483900 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419522047 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419565916 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419565916 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419595003 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419620991 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419631004 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419648886 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419652939 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419680119 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419707060 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419708014 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419734955 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419747114 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419761896 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419787884 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419794083 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419814110 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419827938 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419837952 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419871092 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419888020 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419909954 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419914961 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419934988 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419950962 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.419960022 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.419977903 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.420006990 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.420037031 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.420037985 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.420147896 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.420214891 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.421901941 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.421937943 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.422127008 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.431117058 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.431164980 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.432327032 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.432368040 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.432388067 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.432405949 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.432430029 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.432605028 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.432718992 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.432746887 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.432748079 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.432769060 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.432796955 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.432826996 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.432858944 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.443955898 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.443988085 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.444052935 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.444094896 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.450912952 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.450952053 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.450970888 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.450988054 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451005936 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451023102 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451037884 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451055050 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451055050 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.451072931 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451093912 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451112986 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451126099 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.451129913 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451148987 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451184988 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.451208115 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451225996 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451227903 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.451244116 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451250076 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.451281071 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451292038 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.451299906 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451333046 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.451349974 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451366901 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.451371908 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.451405048 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.451426029 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.490797043 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.499304056 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.499332905 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.499452114 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.499520063 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.502625942 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.565834045 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.565867901 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.565977097 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.566005945 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.570858002 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.570890903 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.570907116 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.570924044 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.570940971 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.570955992 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.570975065 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.570992947 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.571005106 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.571017027 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.571022034 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.571073055 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.571086884 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.571422100 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.571450949 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.571466923 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.571481943 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.571497917 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.571515083 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.571533918 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.571552992 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.571562052 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.571583986 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.571613073 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.584667921 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.584687948 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.584707022 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.584723949 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.584805965 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.584825039 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.584841967 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.584846020 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.584851980 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.584856987 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.584883928 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.584903002 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.584912062 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.584954977 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.584975004 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.584992886 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585007906 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585038900 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585045099 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585076094 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585084915 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585088968 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585094929 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585115910 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585125923 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585174084 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585380077 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585388899 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585427046 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585445881 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585463047 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585464954 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585477114 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585514069 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585534096 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585552931 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585566998 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585601091 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585611105 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585621119 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585645914 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585663080 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585675955 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585696936 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585724115 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585802078 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585881948 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585897923 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585913897 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.585947037 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.585980892 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.586045027 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.586091995 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.586110115 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.586138964 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.586160898 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.586164951 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.586179972 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.586199999 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.586220980 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.586225033 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.586245060 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.586330891 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.586376905 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.586467028 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.626555920 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.628197908 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.631170034 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.643399954 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.643428087 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.643577099 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.667957067 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.667982101 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.668040037 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.668138027 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.668150902 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.668214083 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.709350109 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709378004 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709413052 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709429026 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709496975 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.709528923 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.709532976 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.709614992 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709635019 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709650993 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709666967 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709677935 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.709680080 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709700108 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709712029 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.709738016 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.709772110 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.709774971 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709793091 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709829092 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.709860086 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.709863901 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709897041 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709913969 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709928036 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.709939957 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.709992886 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.710025072 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.710062981 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710083008 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710099936 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710115910 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710131884 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710155010 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710230112 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710231066 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.710247040 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710319996 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710352898 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.710356951 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710375071 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710391045 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710406065 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.710436106 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.710453033 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.710592985 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710608959 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.710741043 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.719721079 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719746113 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719762087 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719779015 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719794989 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719811916 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719830036 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719846010 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.719847918 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719866037 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719882965 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719897985 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719906092 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.719914913 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719929934 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.719933033 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719947100 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719954967 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.719965935 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.719994068 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720015049 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720063925 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720073938 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720103979 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720120907 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720138073 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720155001 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720190048 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720242023 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720259905 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720262051 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720283031 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720299959 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720312119 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720316887 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720334053 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720345020 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720371008 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720371962 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720387936 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720407963 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720449924 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720478058 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720555067 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720572948 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720588923 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720607996 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720616102 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720634937 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720654011 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720668077 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720674038 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720690012 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720705032 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720711946 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720721960 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.720746994 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720767021 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.720796108 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.721513987 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.721581936 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.722721100 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.722743034 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.722759008 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.722771883 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.722791910 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.722809076 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.722810030 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.722826004 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.722836018 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.722884893 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.769793034 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.769825935 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.769839048 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.769855022 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.769866943 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.769884109 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.769916058 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.769953012 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770098925 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770117998 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770133972 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770149946 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770179033 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770220995 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770231009 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770247936 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770277023 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770296097 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770312071 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770319939 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770354986 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770558119 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770581007 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770596981 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770612955 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770626068 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770643950 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770668983 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770678043 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770697117 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770709991 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770725965 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770740032 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770752907 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770765066 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770781040 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770792007 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770808935 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770822048 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770838022 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770848989 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770865917 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770879030 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770894051 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770906925 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770921946 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770937920 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770950079 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770962954 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.770977974 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.770986080 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.771002054 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.771022081 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.771028996 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.771045923 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.771065950 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.802360058 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.802474022 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.802720070 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.802736998 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.802812099 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.802911043 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.803360939 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.803595066 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.804099083 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.807142973 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.807290077 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.807315111 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.807387114 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.807996988 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.808078051 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.808162928 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.818325996 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.819113016 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.917706013 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.917737961 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.917756081 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.917768002 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.917778969 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.917834997 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.917851925 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.917865038 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.917892933 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.917912006 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.917927980 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.917943954 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.917956114 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918006897 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918014050 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918111086 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918139935 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918171883 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918191910 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918205023 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918253899 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918298960 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918392897 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918459892 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918478966 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918492079 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918504000 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918517113 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918529034 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918546915 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918564081 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918572903 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918586016 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918601036 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918611050 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918627024 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918647051 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918653011 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918667078 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918687105 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918704987 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918750048 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918802023 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918821096 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918838024 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918853998 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918869972 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918889046 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918919086 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.918927908 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918943882 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918956041 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.918983936 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919007063 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919050932 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919068098 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919085026 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919101000 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919111967 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919147968 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919177055 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919193029 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919224977 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919234037 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919261932 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919274092 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919315100 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919435024 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919497967 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919513941 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919529915 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919544935 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919554949 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919573069 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919588089 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919595957 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919614077 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919620037 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919640064 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919662952 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919708014 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919766903 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919781923 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919796944 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919814110 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919820070 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919835091 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919845104 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919862986 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919874907 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919888973 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919898033 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.919917107 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.919944048 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.920000076 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.920016050 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.920031071 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.920068979 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.920088053 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.920109034 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.920135021 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.950602055 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.950635910 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.950810909 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.950833082 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.950881958 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.951314926 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.951349974 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.951359034 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.951395035 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.951427937 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.951430082 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.951472998 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.952251911 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.952325106 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.952334881 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.952363968 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.952521086 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.952568054 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.957530975 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.957792044 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.959290981 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.959315062 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.959393978 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.959425926 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.959476948 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.964716911 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.965053082 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.966644049 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.967744112 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.968242884 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.968375921 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.968605995 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.968723059 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.969981909 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.970046043 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.970115900 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.970141888 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.970336914 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.971002102 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.971060038 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.971091986 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.971134901 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:28.971168995 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.971203089 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.971209049 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.974603891 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.974845886 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.975066900 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:28.975351095 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.062891006 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.062922001 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.062933922 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.062948942 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.062959909 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.062971115 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.062985897 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063003063 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063018084 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063065052 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063107967 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063137054 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063154936 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063172102 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063186884 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063198090 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063210011 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063218117 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063235998 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063251019 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063260078 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063275099 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063288927 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063302994 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063317060 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063328981 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063345909 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063354969 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063373089 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063383102 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063397884 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063405991 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063422918 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063431025 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063446045 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063453913 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063468933 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063477039 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063491106 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063499928 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063517094 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063523054 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063540936 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063546896 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063559055 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063570976 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063585997 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063595057 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063610077 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063618898 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063630104 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063642025 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063657999 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063668966 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063684940 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063694000 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063704967 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063719988 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063728094 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063745975 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063759089 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.063786030 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.063817024 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.106375933 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.106626987 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.106641054 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.106720924 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.107657909 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.107677937 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.110580921 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.110826015 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.112567902 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.112687111 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.112705946 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.112721920 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.112736940 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.112756014 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.112773895 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.112812042 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.112812042 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.112864017 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.112875938 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.112894058 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.112952948 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.113960981 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.114299059 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.115473986 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.115710020 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.115729094 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.115746021 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.115761042 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.115843058 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.115878105 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.115897894 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.116177082 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.116197109 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.116215944 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.116234064 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.116245985 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.116247892 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.116259098 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.116269112 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.116271973 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.116292953 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.116323948 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.116336107 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.116348982 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.116394043 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.116408110 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.116444111 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.116462946 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.116463900 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.116494894 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.118112087 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.118220091 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.120225906 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.120311975 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.120405912 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.120425940 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.120459080 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.120460987 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.120476007 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.120491028 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.120512962 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.120539904 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.120574951 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.120593071 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.120609045 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.120625019 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.120661974 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.120717049 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.124572992 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.124808073 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.124919891 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.127131939 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.127155066 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.127177000 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.127190113 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.127206087 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.127218008 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.127230883 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.127286911 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.127346039 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.127379894 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.127784014 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.127814054 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.127825975 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.127837896 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.127906084 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.127945900 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.128101110 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.128137112 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.128155947 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.128174067 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.128206968 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.128210068 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.128230095 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.128247976 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.128282070 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.257175922 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.257210970 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.257340908 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.259188890 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259223938 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259243965 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259260893 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259278059 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259295940 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259334087 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259351969 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259386063 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259397030 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259397030 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.259408951 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259422064 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259447098 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.259474039 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259515047 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259527922 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259577036 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259609938 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259659052 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259660959 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.259692907 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259726048 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.259747982 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259797096 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.259799957 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.259805918 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.259816885 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.259875059 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.260581017 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.260605097 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.260719061 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.260945082 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.261065960 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.261169910 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.261260033 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.261332035 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.262515068 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262537956 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262552977 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262569904 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262586117 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262602091 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262618065 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262633085 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262653112 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262670040 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262685061 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262697935 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.262701988 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262717962 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262753963 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262794018 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.262804985 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262814045 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.262831926 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262841940 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.262878895 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.262919903 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262957096 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262972116 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.262974024 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.262979984 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.262991905 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263009071 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263025045 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263036013 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.263083935 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263102055 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263140917 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263181925 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263194084 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.263206005 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263226986 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263237953 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.263250113 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263272047 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263287067 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.263295889 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263319969 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263324976 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.263344049 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263355970 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.263364077 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263385057 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263406038 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.263406038 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.263456106 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.269156933 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.269193888 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.269350052 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.271189928 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271219969 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271317005 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.271359921 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.271528006 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.271531105 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271552086 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271575928 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271596909 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271601915 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.271619081 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271639109 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271658897 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271677971 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271682978 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.271707058 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.271739006 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.271815062 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271853924 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271872044 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271895885 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271905899 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.271917105 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271938086 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271956921 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271966934 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.271980047 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.271990061 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.272022963 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.272062063 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.276128054 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.276160002 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.276310921 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.277379036 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.278290987 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278323889 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278347969 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278367996 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278450966 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.278493881 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.278516054 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278534889 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278556108 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278577089 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278595924 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278611898 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.278616905 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278630018 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.278640985 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278650999 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.278667927 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278678894 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.278687000 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278708935 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.278775930 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.278790951 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.278803110 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279246092 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279273033 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279294014 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279316902 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279335976 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279340982 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279356956 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279381037 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279390097 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279397964 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279402018 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279422045 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279443979 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279453993 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279462099 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279481888 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279491901 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279514074 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279531002 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279551983 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279553890 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279573917 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279584885 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279593945 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279614925 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279652119 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279659986 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279716969 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279735088 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279756069 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279778957 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279803038 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279822111 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.279824972 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279855013 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.279901981 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.287749052 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.289830923 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.402050972 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.402086973 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.402102947 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.402120113 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.402236938 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.402318954 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404350996 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404396057 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404417992 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404442072 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404469967 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404495001 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404515028 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404524088 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404548883 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404566050 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404576063 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404598951 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404611111 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404618025 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404625893 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404628038 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404649019 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404654026 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404716015 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404730082 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404731989 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404742956 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404767036 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404783010 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404792070 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404815912 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404834032 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404840946 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404865980 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404876947 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404891014 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404906988 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404917002 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404943943 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404953957 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.404968977 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.404990911 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.405138016 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.405144930 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.405333042 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.405417919 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.405441999 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.405466080 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.405489922 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.405560970 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.405599117 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.405623913 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.407241106 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.407645941 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.407671928 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.407695055 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.407717943 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.407736063 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.407742977 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.407766104 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.407804012 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.407835960 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.407840967 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.407855988 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.407908916 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.407932997 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.407955885 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.407978058 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408001900 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408024073 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408034086 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408034086 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408047915 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408071041 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408096075 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408119917 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408135891 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408142090 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408152103 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408165932 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408190012 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408196926 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408211946 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408221006 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408235073 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408253908 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408263922 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408279896 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408303022 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408304930 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408329010 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408337116 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408353090 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408365965 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408375978 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408392906 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408400059 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408422947 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408431053 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408452988 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408500910 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408566952 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408591032 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408613920 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408622026 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408638000 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408660889 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408664942 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408687115 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408689022 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408710003 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408718109 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408730984 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.408746958 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408787966 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.408885002 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.418690920 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.418730974 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.418749094 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.418768883 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.418844938 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.418901920 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.420634031 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.420670033 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.420687914 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.420712948 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.420803070 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.420849085 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.420898914 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.420922995 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.420949936 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.420974970 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.420978069 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.420999050 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.421019077 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.421024084 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.421049118 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.421056986 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.421101093 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.421112061 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.421165943 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.421258926 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.421283960 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.421305895 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.421318054 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.421329975 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.421344042 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.421371937 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.421399117 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.421415091 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.421442032 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.421464920 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.421485901 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.421497107 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.421504021 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.421541929 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.421574116 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.421945095 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.422818899 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.424572945 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.425985098 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.426019907 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.426043034 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.426068068 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.426109076 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.426650047 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428155899 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428188086 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428219080 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428240061 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428263903 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428282022 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428339958 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428352118 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428364992 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428388119 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428404093 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428411961 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428430080 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428442001 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428452969 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428474903 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428491116 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428499937 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428507090 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428523064 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428541899 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428544998 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428566933 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428586006 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428591967 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428615093 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428627968 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428636074 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428656101 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428693056 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428704023 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428719997 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428776979 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428786039 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428800106 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428822041 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428842068 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428843975 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.428865910 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.428889036 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429317951 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429400921 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429419041 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429469109 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429510117 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429536104 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429553986 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429558992 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429579973 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429583073 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429605007 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429608107 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429627895 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429637909 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429650068 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429663897 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429692030 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429753065 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429800034 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429800987 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429826021 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429847002 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429848909 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429872990 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429877996 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429897070 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429912090 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429922104 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429939985 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.429944992 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.429981947 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.430021048 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.430169106 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.430195093 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.430217028 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.430241108 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.430249929 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.430294037 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.430335999 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.430361986 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.430385113 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.430387974 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.430409908 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.430427074 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.430433989 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.430453062 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.430465937 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.430510998 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.437346935 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.437552929 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.439722061 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.439754009 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.439778090 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.439800024 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.439824104 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.439851999 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.439862013 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.439893961 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.439918041 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.439939976 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.439954042 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.440005064 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.554550886 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554585934 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554608107 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554630041 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554651022 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554676056 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554698944 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554721117 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554743052 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554765940 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554786921 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554790974 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.554810047 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554831982 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554857016 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554881096 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.554881096 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554903984 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554925919 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554950953 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.554950953 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.554977894 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555007935 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555048943 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555073977 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555095911 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555097103 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555119038 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555129051 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555159092 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555159092 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555182934 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555202007 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555205107 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555231094 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555241108 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555272102 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555324078 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555351973 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555377007 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555401087 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555417061 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555459023 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555461884 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555507898 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555516005 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555541992 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555561066 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555567980 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555593014 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555617094 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555628061 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555641890 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555661917 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555680990 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555713892 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555721045 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555746078 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555768967 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555807114 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555808067 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555839062 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555872917 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555881977 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555897951 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555921078 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555922031 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555943966 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555954933 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.555989981 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.555994034 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.556013107 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.556035995 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.556039095 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.556057930 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.556086063 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.556129932 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.571672916 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.571712017 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.571734905 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.571757078 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.571783066 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.571836948 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.571887970 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.571969032 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572006941 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572029114 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572042942 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572052956 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572101116 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572138071 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572340012 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572366953 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572396994 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572444916 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572469950 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572495937 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572519064 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572527885 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572541952 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572546005 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572565079 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572591066 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572599888 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572617054 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572637081 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572638988 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572662115 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572670937 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572685003 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572707891 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572729111 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572731972 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572745085 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572755098 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572788000 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572808027 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572827101 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572830915 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572865963 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572885036 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572926998 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572966099 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.572979927 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.572989941 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573029995 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573065996 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573071957 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573090076 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573112965 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573139906 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573151112 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573204994 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573206902 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573235989 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573281050 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573326111 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573350906 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573407888 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573410988 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573436975 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573461056 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573482037 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573487043 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573508978 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573529959 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573534966 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573559046 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573577881 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573606968 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573611975 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573638916 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573662996 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573693037 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573729992 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573734999 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573759079 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573781967 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573805094 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573813915 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573828936 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573860884 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573868990 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573894978 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573899984 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573930979 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573939085 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573951960 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573968887 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.573975086 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.573998928 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.574001074 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.574023008 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.574048996 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.574081898 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.574131012 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.574198961 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.574265957 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.575134993 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.575478077 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.575506926 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.575529099 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.575551987 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.575689077 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.575717926 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.576210976 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576239109 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576262951 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576287985 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576304913 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576328993 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576334000 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.576353073 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576380968 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576392889 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.576402903 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576426029 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.576440096 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.576442957 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576466084 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576488972 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576503038 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.576540947 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576560974 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.576574087 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576592922 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576616049 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576618910 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.576642036 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576659918 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576663971 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.576678038 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576697111 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576714993 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576733112 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576776981 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576800108 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576800108 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.576833963 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576852083 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576888084 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.576906919 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576916933 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.576931000 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.576961994 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577007055 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577023983 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577028036 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577050924 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577058077 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577089071 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577100992 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577126026 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577131033 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577152967 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577177048 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577198982 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577205896 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577274084 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577286959 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577336073 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577361107 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577397108 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577410936 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577428102 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577440023 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577446938 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577471018 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577477932 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577493906 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577517033 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577538013 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577542067 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577560902 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577560902 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577584028 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577601910 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577609062 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577650070 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577687025 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577687979 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.577728987 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.577790976 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.579963923 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.579998970 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.580126047 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.580140114 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.580168962 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.580192089 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.580214977 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.580224991 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.580236912 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.580264091 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.580274105 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.580293894 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.580297947 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.580318928 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.580346107 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.580389977 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.580638885 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.580662966 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.580683947 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.580696106 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.580708981 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.580730915 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.580770969 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.581048965 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.581073046 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.581095934 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.581119061 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.581134081 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.582834005 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.589807034 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.589843988 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.589991093 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.592200994 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592233896 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592258930 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592283010 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592396021 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.592461109 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.592489004 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592513084 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592541933 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592566013 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.592576981 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592602015 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592612028 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.592634916 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592652082 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.592668056 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592693090 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592703104 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.592725039 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592745066 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.592757940 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592781067 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592792034 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.592813969 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592824936 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.592845917 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592871904 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.592880011 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.592910051 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.592936993 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.707243919 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707288980 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707312107 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707334042 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707355976 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707381010 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707403898 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707423925 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707444906 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707456112 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.707465887 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707487106 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707506895 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707528114 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707552910 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707586050 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707596064 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.707607031 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707628012 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707629919 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.707648993 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707648993 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.707669973 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707686901 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.707686901 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.707742929 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.725375891 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725474119 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725512028 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725538969 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725574970 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725589991 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.725609064 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725635052 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.725651979 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.725653887 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725692987 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725733042 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.725737095 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725773096 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725773096 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.725785971 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.725809097 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725842953 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725867033 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.725878000 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725903034 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.725915909 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725935936 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.725961924 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.725976944 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.726001024 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.726015091 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.726051092 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729242086 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729299068 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729332924 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729336977 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729378939 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729401112 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729444027 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729449034 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729487896 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729499102 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729523897 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729542971 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729552984 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729587078 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729588032 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729608059 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729620934 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729656935 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729657888 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729681015 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729691982 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729707956 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729734898 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729739904 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729773045 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729784012 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729809046 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729845047 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729860067 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729880095 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729901075 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729913950 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729934931 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729948997 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729959965 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.729984045 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.729994059 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.730026960 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.730031967 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.730066061 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.730078936 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.730139971 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.730298996 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.730338097 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.730377913 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.730401039 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.730402946 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.730448961 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.730495930 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.731024981 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.731062889 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.731097937 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.731128931 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.731133938 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.731185913 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.731198072 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.738497972 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.738565922 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.738605022 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.738643885 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.738682985 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.738720894 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.738759041 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.738785982 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.738795996 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.738821030 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.738826990 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.738831043 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.738845110 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.738850117 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.738887072 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.738905907 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.738925934 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.738940001 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.738965034 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.738981009 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739006042 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739020109 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739044905 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739057064 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739084959 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739099026 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739124060 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739145041 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739171982 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739186049 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739213943 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739238024 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739253044 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739294052 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739298105 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739334106 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739350080 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739367008 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739375114 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739396095 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739414930 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739429951 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739454985 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739495993 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739504099 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739546061 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739547968 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739564896 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739587069 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739626884 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739648104 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739665985 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739681959 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739703894 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739722967 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739742041 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739756107 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739782095 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.739794016 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.739830971 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.741101027 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.741148949 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.741185904 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.741229057 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.741234064 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.741274118 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.741307020 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.749524117 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.749583006 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.749635935 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.749670982 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.749701023 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.749743938 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.749813080 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.751782894 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.751848936 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.751909971 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.751931906 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.751946926 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.751975060 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.752032995 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.752094030 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.752108097 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.752155066 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.752182961 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.752237082 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.752278090 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.752302885 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.752331972 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.752388954 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.752412081 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.752460957 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.752486944 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.752540112 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.752561092 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.752604961 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.752639055 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.752693892 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.752718925 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.752767086 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.752804041 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.752862930 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.752923965 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.752998114 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.753012896 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.753022909 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.753032923 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.753072023 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.753123999 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.753196955 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.753211975 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.753261089 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.753298044 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.753360033 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.753415108 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.753462076 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.888858080 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:29.889035940 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:29.938294888 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:30.092441082 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:30.092490911 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:30.092509985 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:30.092534065 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:30.092561007 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:30.092586040 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:30.092612028 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:30.092638016 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:30.092655897 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:30.092686892 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:30.092705011 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:30.092724085 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:30.092736959 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:30.092772007 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:30.093885899 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:30.244549036 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:30.244575977 CET	443	49753	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:30.244673967 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:30.244724035 CET	49753	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.722507954 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.722578049 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.723397970 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.723438025 CET	49736	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.723839045 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.723865986 CET	49728	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.724226952 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.724333048 CET	49727	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.724708080 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.724742889 CET	49735	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.725117922 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.725140095 CET	49729	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.725509882 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.725528955 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.725914955 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.725944996 CET	49725	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.726267099 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.726291895 CET	49732	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.726588964 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.726613998 CET	49730	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.728090048 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.728452921 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.873172045 CET	443	49731	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:31.873346090 CET	49731	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.876034021 CET	443	49726	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:31.876106024 CET	49726	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.883405924 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:31.883434057 CET	443	49770	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:31.883533955 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.883599043 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.890465021 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:31.890575886 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:32.045936108 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:32.046093941 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:32.046571970 CET	443	49770	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:32.046737909 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:32.047139883 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:32.047337055 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:32.049741030 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:32.208378077 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:32.217704058 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:32.217741013 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:32.217762947 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:32.217782974 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:32.217804909 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:32.217840910 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:32.244564056 CET	443	49770	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:32.251290083 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:32.416364908 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:32.416512966 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:33.272696972 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:33.427500010 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:33.427540064 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:33.427558899 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:33.427573919 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:33.427706003 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:33.429851055 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:34.401067019 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:34.554788113 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:34.554815054 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:34.554836988 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:34.554853916 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:34.554928064 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:34.554964066 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:35.721290112 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:35.866169930 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:35.866250038 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:35.866295099 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:35.866331100 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:35.866445065 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:35.866507053 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:35.866513968 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:37.204267025 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:37.353421926 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:37.353449106 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:37.353463888 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:37.353477955 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:37.353518963 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:37.353571892 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:38.322772026 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:38.391756058 CET	443	49749	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:38.391779900 CET	443	49749	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:38.391848087 CET	49749	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:38.468477964 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:38.468513966 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:38.468535900 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:38.468580961 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:38.468637943 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:38.496833086 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:38.639502048 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:38.639523029 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:38.639539957 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:38.639554024 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:38.639599085 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:38.639642000 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:40.540673971 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:40.700268030 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:40.700314045 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:40.700340033 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:40.700362921 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:40.700408936 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:40.700447083 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:40.700465918 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:40.700480938 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:40.700515985 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:40.700562954 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:41.665643930 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:41.828423023 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:41.828469992 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:41.828497887 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:41.828521967 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:41.828572035 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:41.828629017 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:41.842709064 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:41.848311901 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:41.850461006 CET	49783	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.003530979 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.003714085 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.003750086 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.003778934 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.003807068 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.003833055 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.003860950 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.003875971 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.003917933 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.003921032 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.004096985 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.004129887 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.004153967 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.004158974 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.004178047 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.004204988 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.005822897 CET	443	49770	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.007674932 CET	443	49783	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.007917881 CET	49783	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.011874914 CET	443	49770	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.012350082 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.016402006 CET	49783	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.019237041 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.168081045 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.168108940 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.168126106 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.168210983 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.168276072 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.168349028 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.168365955 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.168478012 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.178266048 CET	443	49783	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.178561926 CET	49783	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.179229021 CET	49783	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.184825897 CET	443	49770	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.184854031 CET	443	49770	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:42.185039043 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.185070038 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:42.374797106 CET	443	49783	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:43.443938971 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:43.443974972 CET	443	49752	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:43.444323063 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:43.601356030 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:43.601397991 CET	443	49755	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:43.601530075 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:43.661629915 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:43.661681890 CET	443	49754	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:43.661778927 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:43.744652987 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:43.744682074 CET	443	49751	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:43.744690895 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:43.744703054 CET	443	49750	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:43.744796991 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:43.744815111 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:43.744832039 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:44.132297039 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.132323980 CET	443	49764	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.132492065 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:44.132527113 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:44.137259007 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.137288094 CET	443	49765	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.137312889 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.137325048 CET	443	49763	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.137486935 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:44.141655922 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:44.447324991 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.447352886 CET	443	49766	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.447536945 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:44.447643995 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:44.708486080 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.708509922 CET	443	49760	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.708652973 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:44.724123001 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.724154949 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.724329948 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:44.724395990 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:44.729748964 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.729785919 CET	443	49761	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.729893923 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:44.729954958 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:44.739343882 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.739375114 CET	443	49767	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:44.739502907 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:44.739543915 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:56.986913919 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:56.986946106 CET	443	49771	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:56.987016916 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:56.987068892 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:57.166598082 CET	443	49770	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:57.166632891 CET	443	49770	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:57.166934967 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:57.167045116 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:23:57.326286077 CET	443	49783	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:57.326319933 CET	443	49783	199.192.8.2	192.168.2.5
Feb 16, 2021 16:23:57.326540947 CET	49783	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.121243000 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.121279001 CET	49767	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.121556044 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.121579885 CET	49766	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.122102022 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.122123003 CET	49761	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.122414112 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.122642994 CET	49762	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.122644901 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.122662067 CET	49760	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.122895956 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.122922897 CET	49765	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.123152018 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.123172045 CET	49763	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.123418093 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.123447895 CET	49764	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.123663902 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.123706102 CET	49751	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.123934984 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.123964071 CET	49750	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.124213934 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.124253988 CET	49755	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.124500990 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.124525070 CET	49752	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.124787092 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.124813080 CET	49754	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.125071049 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.125096083 CET	49770	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.125334024 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.125354052 CET	49771	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.125602961 CET	49783	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.125619888 CET	49783	443	192.168.2.5	199.192.8.2
Feb 16, 2021 16:24:00.268739939 CET	443	49762	199.192.8.2	192.168.2.5
Feb 16, 2021 16:24:00.269020081 CET	49762	443	192.168.2.5	199.192.8.2

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 16, 2021 16:21:28.131097078 CET	62060	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:28.180052996 CET	53	62060	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:28.544234991 CET	61805	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:28.592845917 CET	53	61805	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:28.710880041 CET	54795	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:28.759525061 CET	53	54795	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:28.892354965 CET	49557	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:28.941030979 CET	53	49557	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:29.845263004 CET	61733	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:29.893956900 CET	53	61733	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:30.836529970 CET	65447	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:30.888127089 CET	53	65447	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:31.821074009 CET	52441	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:31.854044914 CET	62176	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:31.869800091 CET	53	52441	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:31.913322926 CET	53	62176	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:33.086740017 CET	59596	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:33.138250113 CET	53	59596	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:34.419207096 CET	65296	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:34.470812082 CET	53	65296	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:35.419163942 CET	63183	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:35.478086948 CET	53	63183	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:36.419938087 CET	60151	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:36.480293989 CET	53	60151	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:38.013650894 CET	56969	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:38.074920893 CET	53	56969	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:38.718040943 CET	55161	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:38.779277086 CET	53	55161	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:39.733527899 CET	55161	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:39.793543100 CET	53	55161	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:40.512177944 CET	54757	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:40.563683033 CET	53	54757	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:40.734600067 CET	55161	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:40.806994915 CET	53	55161	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:42.734707117 CET	55161	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:42.796477079 CET	53	55161	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:46.735449076 CET	55161	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:46.786978006 CET	53	55161	8.8.8.8	192.168.2.5
Feb 16, 2021 16:21:53.062922955 CET	49992	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:21:53.123383999 CET	53	49992	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:05.905042887 CET	60075	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:05.953649044 CET	53	60075	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:09.147198915 CET	55016	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:09.205722094 CET	53	55016	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:11.948128939 CET	64345	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:12.005139112 CET	53	64345	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:15.669120073 CET	57128	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:15.734307051 CET	53	57128	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:17.736448050 CET	54791	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:17.804577112 CET	53	54791	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:18.391002893 CET	50463	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:18.452732086 CET	53	50463	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:23.981286049 CET	50394	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:24.038399935 CET	53	50394	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:25.465296030 CET	58530	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:25.522521019 CET	53	58530	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:26.797080994 CET	53813	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:26.855427027 CET	53	53813	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:39.140122890 CET	63732	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:39.188878059 CET	53	63732	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:40.138379097 CET	57344	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:40.146007061 CET	63732	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:40.187081099 CET	53	57344	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:40.194535017 CET	53	63732	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:41.151881933 CET	57344	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:41.153476954 CET	63732	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:41.200995922 CET	53	57344	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:41.202064037 CET	53	63732	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:42.166739941 CET	57344	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:42.215450048 CET	53	57344	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:43.161668062 CET	63732	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:43.210333109 CET	53	63732	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:44.162380934 CET	57344	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:44.214438915 CET	53	57344	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:46.466605902 CET	54450	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:46.529272079 CET	53	54450	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:47.163561106 CET	63732	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:47.212179899 CET	53	63732	8.8.8.8	192.168.2.5
Feb 16, 2021 16:22:48.207211018 CET	57344	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:22:48.255954981 CET	53	57344	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:22.715972900 CET	59261	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:22.773077011 CET	53	59261	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:26.959098101 CET	57151	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:27.016474009 CET	53	57151	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:28.360130072 CET	59413	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:28.655316114 CET	53	59413	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:33.064213991 CET	60516	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:33.153119087 CET	53	60516	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:34.064987898 CET	51649	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:34.126828909 CET	53	51649	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:34.983330965 CET	65086	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:35.045672894 CET	53	65086	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:35.891943932 CET	56432	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:35.951744080 CET	53	56432	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:37.687438011 CET	52929	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:37.736282110 CET	53	52929	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:38.429588079 CET	64317	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:38.478140116 CET	53	64317	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:39.342247009 CET	61004	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:39.390860081 CET	53	61004	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:39.630076885 CET	56895	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:39.681757927 CET	53	56895	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:40.224020958 CET	62372	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:40.291549921 CET	53	62372	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:40.358491898 CET	61515	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:40.423881054 CET	53	61515	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:41.419723988 CET	56675	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:41.479847908 CET	53	56675	8.8.8.8	192.168.2.5
Feb 16, 2021 16:23:42.253778934 CET	57172	53	192.168.2.5	8.8.8.8
Feb 16, 2021 16:23:42.311949968 CET	53	57172	8.8.8.8	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Feb 16, 2021 16:22:11.948128939 CET	192.168.2.5	8.8.8.8	0xfe31	Standard query (0)	www.dhhs.nh.gov	A (IP address)	IN (0x0001)
Feb 16, 2021 16:23:22.715972900 CET	192.168.2.5	8.8.8.8	0x8993	Standard query (0)	www.dhhs.nh.gov	A (IP address)	IN (0x0001)
Feb 16, 2021 16:23:26.959098101 CET	192.168.2.5	8.8.8.8	0x4606	Standard query (0)	www.nh.gov	A (IP address)	IN (0x0001)
Feb 16, 2021 16:23:28.360130072 CET	192.168.2.5	8.8.8.8	0x949b	Standard query (0)	www.app-support.nh.gov	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Feb 16, 2021 16:22:12.005139112 CET	8.8.8.8	192.168.2.5	0xfe31	No error (0)	www.dhhs.nh.gov	www.dhhs.state.nh.us		CNAME (Canonical name)	IN (0x0001)
Feb 16, 2021 16:22:12.005139112 CET	8.8.8.8	192.168.2.5	0xfe31	No error (0)	www.dhhs.state.nh.us		199.192.8.2	A (IP address)	IN (0x0001)
Feb 16, 2021 16:23:22.773077011 CET	8.8.8.8	192.168.2.5	0x8993	No error (0)	www.dhhs.nh.gov	www.dhhs.state.nh.us		CNAME (Canonical name)	IN (0x0001)
Feb 16, 2021 16:23:22.773077011 CET	8.8.8.8	192.168.2.5	0x8993	No error (0)	www.dhhs.state.nh.us		199.192.8.2	A (IP address)	IN (0x0001)
Feb 16, 2021 16:23:27.016474009 CET	8.8.8.8	192.168.2.5	0x4606	No error (0)	www.nh.gov		199.192.8.2	A (IP address)	IN (0x0001)
Feb 16, 2021 16:23:28.655316114 CET	8.8.8.8	192.168.2.5	0x949b	No error (0)	www.app-support.nh.gov		199.192.8.2	A (IP address)	IN (0x0001)

HTTP Request Dependency Graph

www.dhhs.nh.gov

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
0	192.168.2.5	49723	199.192.8.2	80	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Feb 16, 2021 16:22:12.611895084 CET	1266	OUT	GET / HTTP/1.1 Accept: text/html, application/xhtml+xml, image/jxr, / Accept-Language: en-US User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko Accept-Encoding: gzip, deflate Host: www.dhhs.nh.gov Connection: Keep-Alive
Feb 16, 2021 16:22:12.764082909 CET	1267	IN	HTTP/1.1 302 Found Date: Tue, 16 Feb 2021 15:22:12 GMT Server: Molly and John Location: https://www.dhhs.nh.gov/ Content-Length: 208 Content-Type: text/html; charset=iso-8859-1 Set-Cookie: priv=1p; path=/ Set-Cookie: pub=91; path=/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 64 68 68 73 2e 6e 68 2e 67 6f 76 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>302 Found</title></head><body><h1>Found</h1><p>The document has moved <a href="https://www.dhhs.nh.gov/">here</a>.</p></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	Process
1	199.192.8.2	80	192.168.2.5	49724	C:\Program Files (x86)\Internet Explorer\iexplore.exe

Timestamp	kBytes transferred	Direction	Data
Feb 16, 2021 16:22:14.199623108 CET	1298	IN	HTTP/1.0 400 Bad request Cache-Control: no-cache Connection: close Content-Type: text/html Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 30 20 42 61 64 20 72 65 71 75 65 73 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 73 65 6e 74 20 61 6e 20 69 6e 76 61 6c 69 64 20 72 65 71 75 65 73 74 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>400 Bad request</h1>Your browser sent an invalid request.</body></html>

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Feb 16, 2021 16:22:13.415649891 CET	199.192.8.2	443	192.168.2.5	49725	CN=dhhs.nh.gov, O=State of New Hampshire, L=Concord, ST=New Hampshire, C=US CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Mon Jan 14 17:39:02 CET 2019 Tue Aug 02 12:00:00 CEST 2011	Sat Mar 13 20:01:06 CET 2021 Tue Aug 02 12:00:00 CEST 2022	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:22:13.415649891 CET	199.192.8.2	443	192.168.2.5	49725	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Aug 02 12:00:00 CEST 2011	Tue Aug 02 12:00:00 CEST 2022		9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:23.071377039 CET	199.192.8.2	443	192.168.2.5	49749	CN=dhhs.nh.gov, O=State of New Hampshire, L=Concord, ST=New Hampshire, C=US CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Mon Jan 14 17:39:02 CET 2019 Tue Aug 02 12:00:00 CEST 2011	Sat Mar 13 20:01:06 CET 2021 Tue Aug 02 12:00:00 CEST 2022	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-23-65281,29-23-24,0	37f463bf4616ecd445d4a1937da06e19
Feb 16, 2021 16:23:23.071377039 CET	199.192.8.2	443	192.168.2.5	49749	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Aug 02 12:00:00 CEST 2011	Tue Aug 02 12:00:00 CEST 2022		37f463bf4616ecd445d4a1937da06e19
Feb 16, 2021 16:23:27.320533037 CET	199.192.8.2	443	192.168.2.5	49750	CN=nh.gov, O=State of New Hampshire, L=Concord, ST=New Hampshire, C=US CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE	CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Thu Jan 07 16:51:01 CET 2021 Wed Nov 21 01:00:00 CET 2018	Thu Sep 09 14:46:05 CEST 2021 Tue Nov 21 01:00:00 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:27.320533037 CET	199.192.8.2	443	192.168.2.5	49750	CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Nov 21 01:00:00 CET 2018	Tue Nov 21 01:00:00 CET 2028		9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:27.322099924 CET	199.192.8.2	443	192.168.2.5	49751	CN=nh.gov, O=State of New Hampshire, L=Concord, ST=New Hampshire, C=US CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE	CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Thu Jan 07 16:51:01 CET 2021 Wed Nov 21 01:00:00 CET 2018	Thu Sep 09 14:46:05 CEST 2021 Tue Nov 21 01:00:00 CET 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:27.322099924 CET	199.192.8.2	443	192.168.2.5	49751	CN=GlobalSign RSA OV SSL CA 2018, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Wed Nov 21 01:00:00 CET 2018	Tue Nov 21 01:00:00 CET 2028		9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:28.950881958 CET	199.192.8.2	443	192.168.2.5	49760	CN=app-support.nh.gov, O=State of New Hampshire, L=Concord, ST=New Hampshire, C=US CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Mon Jan 14 16:41:10 CET 2019 Tue Aug 02 12:00:00 CEST 2011	Sat Mar 13 14:51:11 CET 2021 Tue Aug 02 12:00:00 CEST 2022	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:28.950881958 CET	199.192.8.2	443	192.168.2.5	49760	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Aug 02 12:00:00 CEST 2011	Tue Aug 02 12:00:00 CEST 2022		9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:28.951427937 CET	199.192.8.2	443	192.168.2.5	49761	CN=app-support.nh.gov, O=State of New Hampshire, L=Concord, ST=New Hampshire, C=US CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Mon Jan 14 16:41:10 CET 2019 Tue Aug 02 12:00:00 CEST 2011	Sat Mar 13 14:51:11 CET 2021 Tue Aug 02 12:00:00 CEST 2022	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:28.951427937 CET	199.192.8.2	443	192.168.2.5	49761	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Aug 02 12:00:00 CEST 2011	Tue Aug 02 12:00:00 CEST 2022		9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:28.952521086 CET	199.192.8.2	443	192.168.2.5	49762	CN=app-support.nh.gov, O=State of New Hampshire, L=Concord, ST=New Hampshire, C=US CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Mon Jan 14 16:41:10 CET 2019 Tue Aug 02 12:00:00 CEST 2011	Sat Mar 13 14:51:11 CET 2021 Tue Aug 02 12:00:00 CEST 2022	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:28.952521086 CET	199.192.8.2	443	192.168.2.5	49762	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Aug 02 12:00:00 CEST 2011	Tue Aug 02 12:00:00 CEST 2022		9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:28.959393978 CET	199.192.8.2	443	192.168.2.5	49764	CN=app-support.nh.gov, O=State of New Hampshire, L=Concord, ST=New Hampshire, C=US CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Mon Jan 14 16:41:10 CET 2019 Tue Aug 02 12:00:00 CEST 2011	Sat Mar 13 14:51:11 CET 2021 Tue Aug 02 12:00:00 CEST 2022	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:28.959393978 CET	199.192.8.2	443	192.168.2.5	49764	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Aug 02 12:00:00 CEST 2011	Tue Aug 02 12:00:00 CEST 2022		9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:28.970336914 CET	199.192.8.2	443	192.168.2.5	49763	CN=app-support.nh.gov, O=State of New Hampshire, L=Concord, ST=New Hampshire, C=US CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Mon Jan 14 16:41:10 CET 2019 Tue Aug 02 12:00:00 CEST 2011	Sat Mar 13 14:51:11 CET 2021 Tue Aug 02 12:00:00 CEST 2022	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:28.970336914 CET	199.192.8.2	443	192.168.2.5	49763	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Aug 02 12:00:00 CEST 2011	Tue Aug 02 12:00:00 CEST 2022		9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:28.971134901 CET	199.192.8.2	443	192.168.2.5	49765	CN=app-support.nh.gov, O=State of New Hampshire, L=Concord, ST=New Hampshire, C=US CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Mon Jan 14 16:41:10 CET 2019 Tue Aug 02 12:00:00 CEST 2011	Sat Mar 13 14:51:11 CET 2021 Tue Aug 02 12:00:00 CEST 2022	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:28.971134901 CET	199.192.8.2	443	192.168.2.5	49765	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Aug 02 12:00:00 CEST 2011	Tue Aug 02 12:00:00 CEST 2022		9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:29.259805918 CET	199.192.8.2	443	192.168.2.5	49767	CN=app-support.nh.gov, O=State of New Hampshire, L=Concord, ST=New Hampshire, C=US CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Mon Jan 14 16:41:10 CET 2019 Tue Aug 02 12:00:00 CEST 2011	Sat Mar 13 14:51:11 CET 2021 Tue Aug 02 12:00:00 CEST 2022	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:29.259805918 CET	199.192.8.2	443	192.168.2.5	49767	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Aug 02 12:00:00 CEST 2011	Tue Aug 02 12:00:00 CEST 2022		9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:29.261260033 CET	199.192.8.2	443	192.168.2.5	49766	CN=app-support.nh.gov, O=State of New Hampshire, L=Concord, ST=New Hampshire, C=US CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Mon Jan 14 16:41:10 CET 2019 Tue Aug 02 12:00:00 CEST 2011	Sat Mar 13 14:51:11 CET 2021 Tue Aug 02 12:00:00 CEST 2022	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Feb 16, 2021 16:23:29.261260033 CET	199.192.8.2	443	192.168.2.5	49766	CN=GlobalSign Organization Validation CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R3	Tue Aug 02 12:00:00 CEST 2011	Tue Aug 02 12:00:00 CEST 2022		9e10692f1b7f78228b2d4e424db3a98c

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: WINWORD.EXE PID: 6304 Parent PID: 792

General

Start time:	16:21:35
Start date:	16/02/2021
Path:	C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Microsoft Office\Office16\WINWORD.EXE' /Automation -Embedding
Imagebase:	0xfb0000
File size:	1937688 bytes
MD5 hash:	0B9AB9B9C4DE429473D6450D4297A123
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: iexplore.exe PID: 5696 Parent PID: 792

General

Start time:	16:22:07
Start date:	16/02/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff63cb80000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: iexplore.exe PID: 4368 Parent PID: 5696

General

Start time:	16:22:08
Start date:	16/02/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:5696 CREDAT:17410 /prefetch:2
Imagebase:	0x50000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, Process monitoring
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report COVID19open_closedPodsVACCINE_LETTER2B.docx

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Compliance:

Software Vulnerabilities:

Networking:

System Summary:

Hooking and other Techniques for Hiding and Protection:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: WINWORD.EXE PID: 6304 Parent PID: 792

General

Chronological Activities

Analysis Process: iexplore.exe PID: 5696 Parent PID: 792

General

Chronological Activities

Analysis Process: iexplore.exe PID: 4368 Parent PID: 5696

General

Chronological Activities