Play interactive tour

Edit tour

Analysis Report https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784

Overview

General Information

Sample URL:	https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784
Analysis ID:	371828
Infos:
Most interesting Screenshot:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	80%

Signatures

No high impact signatures.

Classification

Startup

System is w10x64

iexplore.exe (PID: 2968 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 6465CB92B25A7BC1DF8E01D8AC5E7596)

iexplore.exe (PID: 5140 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2968 CREDAT:17410 /prefetch:2 MD5: 071277CC2E3DF41EEEA8013E2AB58D5A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 104.19.149.54:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.149.54:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.163.177:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.163.177:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.233.25:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.233.25:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.116:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.116:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.50.244.146:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.50.244.146:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.162.13:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.162.13:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.72.67.237:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.72.67.237:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.250.2.130:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.133.55:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.250.2.130:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.133.55:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.50.156.162:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.50.156.162:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.195.23.91:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.195.23.91:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.250.0.157:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.250.0.157:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.73.84.222:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.73.84.222:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.206.143.246:443 -> 192.168.2.5:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.206.143.246:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.35:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.35:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.248.172.235:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.248.172.235:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.14:443 -> 192.168.2.5:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.14:443 -> 192.168.2.5:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.250.2.131:443 -> 192.168.2.5:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.52:443 -> 192.168.2.5:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.116.38:443 -> 192.168.2.5:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.116.38:443 -> 192.168.2.5:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.254.47:443 -> 192.168.2.5:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.254.47:443 -> 192.168.2.5:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.5:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.5:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.132.239.61:443 -> 192.168.2.5:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.132.239.61:443 -> 192.168.2.5:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.205.120.60:443 -> 192.168.2.5:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.205.120.60:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.246.207.243:443 -> 192.168.2.5:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.246.207.243:443 -> 192.168.2.5:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.83:443 -> 192.168.2.5:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.83:443 -> 192.168.2.5:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.5:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.5:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.159.26:443 -> 192.168.2.5:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.159.26:443 -> 192.168.2.5:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.126.239.96:443 -> 192.168.2.5:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.126.239.96:443 -> 192.168.2.5:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.234.127.242:443 -> 192.168.2.5:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.234.127.242:443 -> 192.168.2.5:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49901 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.41:443 -> 192.168.2.5:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.41:443 -> 192.168.2.5:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.233.25:443 -> 192.168.2.5:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.233.25:443 -> 192.168.2.5:49906 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.5:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.5:49915 version: TLS 1.2

Source: YNTWJAH3.htm.3.dr	String found in binary or memory: <li><a class="c-nav__anchor--2" href="https://www.facebook.com/ctvtoronto" title="Facebook" aria-label="Facebook">Facebook</a></li> equals www.facebook.com (Facebook)
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: <a id="twitter_share" href="https://twitter.com/share" class="twitter-share-button b" data-via="CTVNews" data-text="Canada finalizing deal with U.S. for 1.5M doses of the AstraZeneca vaccine" data-url="https://www.ctvnews.ca/health/coronavirus/canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1.5352524" data-count="none"> </a> equals www.twitter.com (Twitter)
Source: all[1].js0.3.dr	String found in binary or memory: } }).call(global);})(window.inDapIF ? parent.window : window, window);} catch (e) {new Image().src="https:\/\/www.facebook.com\/" + 'common/scribe_endpoint.php?c=jssdk_error&m='+encodeURIComponent('{"error":"LOAD", "extra": {"name":"'+e.name+'","line":"'+(e.lineNumber\|\|e.line)+'","script":"'+(e.fileName\|\|e.sourceURL\|\|e.script)+'","stack":"'+(e.stackTrace\|\|e.stack)+'","revision":"1003479412","namespace":"FB","message":"'+e.message+'"}}');} equals www.facebook.com (Facebook)
Source: qANoY7mBzs8[1].js.3.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/09P_rcHKL4D/ equals www.facebook.com (Facebook)
Source: all[1].js0.3.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: qANoY7mBzs8[1].js.3.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: qANoY7mBzs8[1].js.3.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/ZtTipMAcpq9/ equals www.facebook.com (Facebook)
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: <!--[if IE 7]> <html class="no-js lt-ie10 lt-ie9 lt-ie8" ng-app="myApp" lang="en" itemscope itemtype="http://schema.org/Article" xmlns:og="http://ogp.me/ns#" xmlns:fb="https://www.facebook.com/2008/fbml" > <![endif]--> equals www.facebook.com (Facebook)
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: <!--[if IE 8]> <html class="no-js lt-ie10 lt-ie9" ng-app="myApp" lang="en" itemscope itemtype="http://schema.org/Article" xmlns:og="http://ogp.me/ns#" xmlns:fb="https://www.facebook.com/2008/fbml" > <![endif]--> equals www.facebook.com (Facebook)
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: <!--[if IE 9]> <html class="no-js lt-ie10" ng-app="myApp" lang="en" itemscope itemtype="http://schema.org/Article" xmlns:og="http://ogp.me/ns#" xmlns:fb="https://www.facebook.com/2008/fbml" > <![endif]--> equals www.facebook.com (Facebook)
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: <!--[if gt IE 8]><!--> <html class="no-js" ng-app="myApp" lang="en" itemscope itemtype="http://schema.org/Article" xmlns:og="http://ogp.me/ns#" xmlns:fb="https://www.facebook.com/2008/fbml" > <!--<![endif]--> equals www.facebook.com (Facebook)
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: <!--[if lt IE 7]> <html class="no-js lt-ie10 lt-ie9 lt-ie8 lt-ie7" ng-app="myApp" lang="en" itemscope itemtype="http://schema.org/Article" xmlns:og="http://ogp.me/ns#" xmlns:fb="https://www.facebook.com/2008/fbml" > <![endif]--> equals www.facebook.com (Facebook)
Source: msapplication.xml0.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xdf5b9020,0x01d71cd0</date><accdate>0xdf5b9020,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml0.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xdf5b9020,0x01d71cd0</date><accdate>0xdf5b9020,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig> equals www.facebook.com (Facebook)
Source: msapplication.xml5.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xdf6054eb,0x01d71cd0</date><accdate>0xdf6054eb,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml5.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xdf6054eb,0x01d71cd0</date><accdate>0xdf6054eb,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig> equals www.twitter.com (Twitter)
Source: msapplication.xml7.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xdf651999,0x01d71cd0</date><accdate>0xdf651999,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: msapplication.xml7.1.dr	String found in binary or memory: <browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xdf651999,0x01d71cd0</date><accdate>0xdf677bf0,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig> equals www.youtube.com (Youtube)
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: <html lang="en" xmlns:og="http://ogp.me/ns#" xmlns:fb="https://www.facebook.com/2008/fbml" > equals www.facebook.com (Facebook)
Source: chartbeat_video[1].js.3.dr	String found in binary or memory: function Id(){function a(){function a(b){r._cbv.push(b.target)}var b=r.YT.Player;t(document.getElementsByTagName("iframe"),function(f){var h=f.src,l=h&&h.indexOf("www.youtube.com/embed/");h&&l>=0&&l<9&&new b(f,{events:{onReady:a}})})}if(r.YT&&r.YT.Player)a();else{var b=r.onYouTubeIframeAPIReady;r.onYouTubeIframeAPIReady=function(){if(b){try{b.apply(r,arguments)}catch(c){}a()}}}};function Pd(a,b){return function(c,e){if(!Fb){a();var f=r._sf_async_config,h="",l=f[B],l=ta(l);/^\//.test(l)&&(h=x(r.location.hostname));f[Rb]=Pa()+"//"+h+l;if(Ka(c))f[B]=J(c),e&&(f[Qb]=e);else if(Qa(c)){var o=["authors","sections",Qb,B,Rb];t(c,function(a,b){if(Ra(o,function(a){return a===b})!==-1\|\|b.indexOf("_")===0)f[b]=b===B?J(a):a})}b()}}};if(!H.D("cb_optout")){if(window.location==window.parent.location&&!r.pSUPERFLY){var Qd=new Wc,Rd={};r.pSUPERFLY=Rd;var Sd=!!Lc;Rd.virtualPage=Pd(function(){Qd.sb();Sd&&Lc.evps()},function(){Qd.Fb();Sd&&Lc.svps()});Rd.activity=v(Qd.ld,Qd);Qd.nb();Rc.exec(document.referrer)&&Tc();var Td=I.ea(g);if(!Td?0:Td.getItem("_cb_ip")){var Ud=r.location;(!/^(.+[.])?chartbeat\.com$/.test(Ud.hostname)?0:/^\/publishing\/(overlay\|hud\|mab)\//.test(Ud.pathname))\|\|wb(Sc)}else Ha(r,"message",Uc)}r.pSUPERFLY_video\|\|(r.pSUPERFLY_video= equals www.youtube.com (Youtube)
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://twitter.com/ctvtorontotmr=load%3D1616166112408%26core%3D1616166112475%26main%3D1616166112486%26ifr%3D1616166112492&cb=0&cdn=0&md=0&kw=toronto%20news%20live%2Ctoronto%2Cnews%2Cctv%20news%2Cbreaking%20news%2Ccanadian%2Clocal%20news%2Cweather%2Ctraffic%2Clotto%2Clottery%2Cnumbers%2Cmaple%20leafs%2Cblue%20jays%2Cgas%20prices%2Caccident%2Cmurder%2Cflood%2Cfire%2Ccrash%2Cattack%2Csex%2Ccrime&ab=-&dh=toronto.ctvnews.ca&dr=&du=https%3A%2F%2Ftoronto.ctvnews.ca%2Fontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784&href=https%3A%2F%2Ftoronto.ctvnews.ca%2Fontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784&dt=Ontario%20slashes%20gathering%20sizes%20for%20entire%20province%20as%20alarm%20bells%20ring%20over%20COVID-19%20spike&dbg=0&cap=tc%3D0%26ab%3D0&inst=1&jsl=139425&prod=undefined&lng=en&ogt=locale%2Csite_name%2Cimage%2Curl%2Cdescription%2Ctitle%2Ctype%3Darticle&pc=men&pub=&ssl=1&sid=6054bce060674fc9&srf=0.01&ver=300&xck=0&xtr=0&og=type%3Darticle%26title%3DOntario%2520slashes%2520gathering%2520sizes%2520for%2520entire%2520province%2520as%2520alarm%2520bells%2520ring%2520over%2520COVID-19%2520spike%26description%3DOntario%2520Premier%2520Doug%2520Ford%2520has%2520expanded%2520new%2520social%2520gathering%2520restrictions%2520across%2520the%2520entire%2520province%252C%2520saying%2520that%2520%2522alarm%2520bells%2520are%2520ringing%2522%2520as%2520COVID-19%2520cases%2520continue%2520to%2520surge.%26url%3Dhttps%253A%252F%252Ftoronto.ctvnews.ca%252Fontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784%26image%3Dhttps%253A%252F%252Fwww.ctvnews.ca%252Fpolopoly_fs%252F1.5098180.1599679292!%252FhttpImage%252Fimage.jpg_gen%252Fderivatives%252Flandscape_620%252Fimage.jpg%26site_name%3DToronto%26locale%3Den_CA&csi=undefined&rev=v8.28.8-wp&ct=1&xld=1&xd=1 equals www.twitter.com (Twitter)
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://www.facebook.com/plugins/share_button.php?app_id=404047912964744&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3c61c29ccd8fc8%26domain%3Dwww.ctvnews.ca%26origin%3Dhttps%253A%252F%252Fwww.ctvnews.ca%252Ff13e3dd650d749c%26relation%3Dparent.parent&container_width=43&href=https%3A%2F%2Fwww.ctvnews.ca%2Fhealth%2Fcoronavirus%2Fcanada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1.5352524&layout=button_count&locale=en_US&sdk=joey&size=small equals www.facebook.com (Facebook)
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://www.facebook.com/plugins/share_button.php?app_id=404047912964744&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df6858f06af37fb%26domain%3Dwww.ctvnews.ca%26origin%3Dhttps%253A%252F%252Fwww.ctvnews.ca%252Ff13e3dd650d749c%26relation%3Dparent.parent&container_width=43&href=https%3A%2F%2Fwww.ctvnews.ca%2Fhealth%2Fcoronavirus%2Fcanada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1.5352524&layout=button_count&locale=en_US&sdk=joey&size=small equals www.facebook.com (Facebook)
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://www.facebook.com/plugins/share_button.php?app_id=512600388751362&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df264fc5d6b56fd4%26domain%3Dtoronto.ctvnews.ca%26origin%3Dhttps%253A%252F%252Ftoronto.ctvnews.ca%252Ff319ef9e4fc9be%26relation%3Dparent.parent&container_width=43&href=https%3A%2F%2Ftoronto.ctvnews.ca%2Fontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784&layout=button_count&locale=en_US&sdk=joey&size=small equals www.facebook.com (Facebook)
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://www.facebook.com/plugins/share_button.php?app_id=512600388751362&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df37a0acfa6569a8%26domain%3Dtoronto.ctvnews.ca%26origin%3Dhttps%253A%252F%252Ftoronto.ctvnews.ca%252Ff319ef9e4fc9be%26relation%3Dparent.parent&container_width=43&href=https%3A%2F%2Ftoronto.ctvnews.ca%2Fontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784&layout=button_count&locale=en_US&sdk=joey&size=small equals www.facebook.com (Facebook)

Source: unknown

DNS traffic detected: queries for: toronto.ctvnews.ca

Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://atlantic.ctvnews.ca/
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://barrie.ctvnews.ca
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: http://barrie.ctvnews.ca/
Source: init[1].js.3.dr	String found in binary or memory: http://bdugraphics.bellmedia.ca/Access.png
Source: init[1].js.3.dr	String found in binary or memory: http://bdugraphics.bellmedia.ca/Bell.png
Source: init[1].js.3.dr	String found in binary or memory: http://bdugraphics.bellmedia.ca/Telus.png
Source: init[1].js.3.dr	String found in binary or memory: http://bdugraphics.bellmedia.ca/bellaliant_bellaliant.png
Source: init[1].js.3.dr	String found in binary or memory: http://bdugraphics.bellmedia.ca/bellaliant_fibreop.png
Source: init[1].js.3.dr	String found in binary or memory: http://bdugraphics.bellmedia.ca/bellaliant_northerntel.png
Source: init[1].js.3.dr	String found in binary or memory: http://bdugraphics.bellmedia.ca/eastlink.png
Source: init[1].js.3.dr	String found in binary or memory: http://bdugraphics.bellmedia.ca/rogers.png
Source: init[1].js.3.dr	String found in binary or memory: http://bdugraphics.bellmedia.ca/sasktel.png
Source: jquery.bxslider.min[1].js.3.dr	String found in binary or memory: http://bxcreative.com
Source: jquery.bxslider.min[1].js.3.dr	String found in binary or memory: http://bxslider.com
Source: jquery.lightbox-0.4.min[1].js.3.dr	String found in binary or memory: http://creativecommons.org/licenses/by-nd/2.5/br/deed.en_US
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://ctvnews.ca/live?autoPlay=true
Source: ontario2014-7[1].css0.3.dr	String found in binary or memory: http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_black.jpg
Source: ontario2014-7[1].css0.3.dr	String found in binary or memory: http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_dk-blue.jpg
Source: ontario2014-7[1].css0.3.dr	String found in binary or memory: http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_dk-green.jpg
Source: ontario2014-7[1].css0.3.dr	String found in binary or memory: http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_lt-blue.jpg
Source: ontario2014-7[1].css0.3.dr	String found in binary or memory: http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_orange.jpg
Source: ontario2014-7[1].css0.3.dr	String found in binary or memory: http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_red.jpg
Source: ontario2014-7[1].css0.3.dr	String found in binary or memory: http://ctvnews.cookieless.ca/bellmedia/common/img/elections/resultHeader.gif
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://edmonton.ctvnews.ca/video?binId=1.1203435
Source: slick.min[1].js.3.dr	String found in binary or memory: http://github.com/kenwheeler/slick
Source: slick.min[1].js.3.dr	String found in binary or memory: http://github.com/kenwheeler/slick/issues
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://guelph.ctvnews.ca
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: http://guelph.ctvnews.ca/
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://html5shiv.googlecode.com/svn/trunk/html5.js
Source: chartbeat_video[1].js.3.dr	String found in binary or memory: http://img.youtube.com/vi/
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://instagram.com/ctvtoronto
Source: ctv-search-box-grd[1].jpg.3.dr	String found in binary or memory: http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/
Source: jquery.min.1494c0abbe501301e2ab9daecc6082a8[1].js.3.dr, jquery-1.7[1].js.3.dr	String found in binary or memory: http://jquery.com/
Source: jquery.min.1494c0abbe501301e2ab9daecc6082a8[1].js.3.dr, jquery-1.7[1].js.3.dr	String found in binary or memory: http://jquery.org/license
Source: jquery.validate-1.12.0.min[1].js.3.dr	String found in binary or memory: http://jqueryvalidation.org/
Source: slick.min[1].js.3.dr	String found in binary or memory: http://kenwheeler.github.io
Source: slick.min[1].js.3.dr	String found in binary or memory: http://kenwheeler.github.io/slick
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://kitchener.ctvnews.ca/guelph
Source: jquery.lightbox-0.4.min[1].js.3.dr	String found in binary or memory: http://leandrovieira.com
Source: jquery.lightbox-0.4.min[1].js.3.dr	String found in binary or memory: http://leandrovieira.com/projects/jquery/lightbox/
Source: chartbeat_video[1].js.3.dr	String found in binary or memory: http://link.theplatform.com/s/ngc/
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://london.ctvnews.ca
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: http://london.ctvnews.ca/
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: http://ogp.me/ns#
Source: jquery.bxslider.min[1].js.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://ottawa.ctvnews.ca/
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: http://regina.ctvnews.ca/yorkton
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: http://saskatoon.ctvnews.ca/prince-albert
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://schema.org
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: http://schema.org/Article
Source: jquery-1.7[1].js.3.dr	String found in binary or memory: http://sizzlejs.com/
Source: banner-temp-7[1].css.3.dr	String found in binary or memory: http://static.ctvnews.ca/bellmedia/common/img/TabBack.jpg
Source: banner-temp-7[1].css.3.dr	String found in binary or memory: http://static.ctvnews.ca/bellmedia/common/img/ad-bar-bkg.gif)
Source: banner-temp-7[1].css.3.dr	String found in binary or memory: http://static.ctvnews.ca/bellmedia/common/img/grey-dot.gif
Source: jquery.bxslider.min[1].js.3.dr	String found in binary or memory: http://stevenwanderski.com
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://stox.ctvnews.ca
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: http://stox.ctvnews.ca/
Source: init[1].js.3.dr	String found in binary or memory: http://tmngo-http.astral.edgesuite.net/ais/logo_beanfield.png
Source: init[1].js.3.dr	String found in binary or memory: http://tmngo-http.astral.edgesuite.net/ais/logo_mts.png
Source: init[1].js.3.dr	String found in binary or memory: http://tmngo-http.astral.edgesuite.net/ais/logo_mtsst.png
Source: init[1].js.3.dr	String found in binary or memory: http://tmngo-http.astral.edgesuite.net/ais/logo_mtsuat.png
Source: init[1].js.3.dr	String found in binary or memory: http://tmngo-http.astral.edgesuite.net/ais/logo_ruralwave.png
Source: init[1].js.3.dr	String found in binary or memory: http://tmngo-http.astral.edgesuite.net/ais/logo_sourcecable.png
Source: init[1].js.3.dr	String found in binary or memory: http://tmngo-http.astral.edgesuite.net/ais/logo_start.tv.png
Source: init[1].js.3.dr	String found in binary or memory: http://tmngo-http.astral.edgesuite.net/ais/logo_teksavvy.png
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://toronto.ctvnews.ca/video?binId=1.3378528
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://twitter.com/ctvtoronto
Source: clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	String found in binary or memory: http://underscorejs.org/LICENSE
Source: clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	String found in binary or memory: http://weather.gc.ca/warnings/index_f.html
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://wictvfile.cms.9c9media.net/fileserver/file/156947/filename/20110401-470-bell-media-jpg
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://windsor.ctvnews.ca
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: http://windsor.ctvnews.ca/
Source: msapplication.xml.1.dr	String found in binary or memory: http://www.amazon.com/
Source: rx_lidar[1].js.3.dr, clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr, clientlib-news-site.min.2adab4a18a55724b1c083e290fb6c95a[1].css.3.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: http://www.bellmedia.ca/
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://www.bellmedia.ca/en/toc.html
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: http://www.bellmedia.ca/sales/digital/ctv-news-channel/
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: http://www.bellmediapr.ca/
Source: pubads_impl_2021031601[1].js.3.dr	String found in binary or memory: http://www.broofa.com
Source: ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: http://www.ctv.ca/rss/
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://www.ctvalberta.ca/
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: http://www.ctvnews.ca/ctv-national-news
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: http://www.ctvnews.ca/ctv-news-channel/pop-life
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: http://www.ctvnews.ca/ctv-news-channel/power-play-with-don-martin
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: http://www.ctvnews.ca/faq
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://www.ctvnews.ca/live
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://www.ctvnews.ca/newsletters
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: http://www.ctvnews.ca/newsletters/preferences
Source: banner-temp-7[1].css.3.dr	String found in binary or memory: http://www.ctvnews.ca/polopoly_fs/7.663649
Source: banner-temp-7[1].css.3.dr	String found in binary or memory: http://www.ctvnews.ca/polopoly_fs/7.663650
Source: banner-temp-7[1].css.3.dr	String found in binary or memory: http://www.ctvnews.ca/polopoly_fs/7.663651
Source: banner-temp-7[1].css.3.dr	String found in binary or memory: http://www.ctvnews.ca/polopoly_fs/7.663868
Source: banner-temp-7[1].css.3.dr	String found in binary or memory: http://www.ctvnews.ca/polopoly_fs/7.663934
Source: last-hour-countbox-7[1].css.3.dr	String found in binary or memory: http://www.ctvnews.ca/polopoly_fs/7.690284
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: http://www.ctvnews.ca/qp/
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: http://www.ctvnews.ca/w5/
Source: bell_media_en_white[1].png.3.dr	String found in binary or memory: http://www.day.com/dam/1.0
Source: Flama-Medium[1].eot.3.dr	String found in binary or memory: http://www.felicianotypefoundry.comFor
Source: msapplication.xml1.1.dr	String found in binary or memory: http://www.google.com/
Source: jquery.lightbox-0.4.min[1].js.3.dr	String found in binary or memory: http://www.huddletogether.com/projects/lightbox2/)
Source: msapplication.xml2.1.dr	String found in binary or memory: http://www.live.com/
Source: msapplication.xml3.1.dr	String found in binary or memory: http://www.nytimes.com/
Source: jquery.cookie[1].js.3.dr	String found in binary or memory: http://www.opensource.org/licenses/GPL-2.0
Source: jquery.cookie[1].js.3.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: msapplication.xml4.1.dr	String found in binary or memory: http://www.reddit.com/
Source: init[1].js.3.dr	String found in binary or memory: http://www.shaw.ca/
Source: msapplication.xml5.1.dr	String found in binary or memory: http://www.twitter.com/
Source: msapplication.xml6.1.dr	String found in binary or memory: http://www.wikipedia.com/
Source: msapplication.xml7.1.dr	String found in binary or memory: http://www.youtube.com/
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://09e0895e5f1eff1d823107e70838d286.safeframe.googlesyndication.com/safeframe/1-0-37/html/conta
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://a868fe6171f71a628b70d0784c3b185c.safeframe.googlesyndication.com/safeframe/1-0-38/html/conta
Source: 8613[1].htm0.3.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.pixel?sid=9212293438
Source: 8613[1].htm0.3.dr	String found in binary or memory: https://aa.agkn.com/adscores/g.pixel?sid=9212293468&gdpr=&gdpr_consent=
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/ecm3?ex=vmg.com&id=y-E0hzSPF1l2M5UTc98ImRTxoUF4Qnkoo-&
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/ecm3?id=5003214223250065627&ex=appnexus.com
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/ecm3?id=5003214223250065627&ex=districtm
Source: bid[1].js.3.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-vmg_dm_an-db5
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-vmg_dm_an-db5&dcc=t
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://aax-eu.amazon-adsystem.com/s/v3/pr?exlist=n-smaato_dm_n-vmg_an-db5&fv=1.0&a=cm&cm3ppd=1
Source: RC2d6da016bf28471c8bc669fb84568d84-source.min[1].js.3.dr	String found in binary or memory: https://assets.adobedtm.com/653e7ca2fc48/14929d193258/123e547f4168/RC2d6da016bf28471c8bc669fb84568d8
Source: RCe714d7b84ce14ee0a28df675bbd5cf5b-source.min[1].js.3.dr	String found in binary or memory: https://assets.adobedtm.com/653e7ca2fc48/14929d193258/123e547f4168/RCe714d7b84ce14ee0a28df675bbd5cf5
Source: AppMeasurement.min[1].js.3.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement.js
Source: AppMeasurement_Module_ActivityMap.min[1].js.3.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement_Module_Acti
Source: launch-EN8508e1965b004de29de2dbd977d7156a.min[1].js.3.dr	String found in binary or memory: https://assets.adobedtm.com/launch-EN8508e1965b004de29de2dbd977d7156a.js
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://atlantic.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://atlantic.ctvnews.ca/audrey-s-amendment-is-now-the-law-after-medically-assisted-dying-bill-ge
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://atlantic.ctvnews.ca/n-b-public-health-investigating-cluster-of-unknown-neurological-disease-
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://atlantic.ctvnews.ca/new-brunswick-reports-seven-new-cases-of-covid-19-province-expands-vacci
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://atlantic.ctvnews.ca/premiers-announce-atlantic-bubble-scheduled-to-reopen-by-april-19-1.5352
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: https://barrie.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://barrie.ctvnews.ca/barrie-ont-residence-linked-to-opp-operation-to-dismantle-criminal-network
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://barrie.ctvnews.ca/this-could-have-had-a-horrific-ending-accused-impaired-driver-arrested-in-
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://barrie.ctvnews.ca/woman-suffers-possibly-life-altering-injuries-in-crash-on-hwy-12-1.5352960
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://bc.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://bc.ctvnews.ca/covid-19-update-b-c-surpasses-90-000-cases-since-start-of-pandemic-1.5352337
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://bc.ctvnews.ca/covid-19-vaccines-teachers-grocery-store-workers-first-responders-next-in-line
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://bc.ctvnews.ca/police-investigating-after-vancouver-woman-says-she-was-followed-for-40-minute
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://bellmedia.demdex.net/dest5.html?d_nsid=0
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://bellmedia.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Ftoronto.ctvnews.ca
Source: 7[3].htm.3.dr	String found in binary or memory: https://beta.ctvnews.ca/content/dam/common/exceltojson/nanos.txt
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://beta.ctvnews.ca/local/toronto/2020/9/19/1_5111784.html
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://beta.ctvnews.ca/national/coronavirus/2021/3/18/1_5352524.html
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://beta.ctvnews.ca/weatherProjecter.43_6799
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://calgary.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://calgary.ctvnews.ca/20-new-covid-19-exposures-at-stores-in-alberta-1.5353053
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://calgary.ctvnews.ca/city-of-calgary-issues-33-tickets-for-covid-19-public-health-order-violat
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://calgary.ctvnews.ca/lethbridge
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://calgary.ctvnews.ca/significant-number-don-t-file-annual-tax-returns-missing-out-on-thousands
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://cdn.krxd.net/partnerjs/xdi/proxy.3d2100fd7107262ecb55ce6847f01fa5.html
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://cdn.krxd.net/partnerjs/xdi/proxy.3d2100fd7107262ecb55ce6847f01fa5.html#
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://cdn.permutive.com/289d106c-df24-4cd9-a9fa-753e928c23ad-web.js
Source: chartbeat_video[1].js.3.dr	String found in binary or memory: https://chartbeat.com
Source: chartbeat_video[1].js.3.dr	String found in binary or memory: https://chartbeat.com/publishing/hud2/versioninfo/?host=
Source: clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	String found in binary or memory: https://clipboardjs.com/
Source: wrap[1].js.3.dr	String found in binary or memory: https://confiant-integrations.freetls.fastly.net/cdt/
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://connect.facebook.net/en_US/all.js#xfbml=1&appId=404047912964744
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://connect.facebook.net/en_US/all.js#xfbml=1&appId=512600388751362
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://d.agkn.com/iframe/8613/?che=432523693&gdpr=&gdpr_consent=&ref=&bpid=bellmedia&c=%7B%22bpid%2
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://d.agkn.com/iframe/8613/?che=473609438&gdpr=&gdpr_consent=&ref=&bpid=bellmedia&c=%7B%22bpid%2
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://d.agkn.com/iframe/8613/?che=494665442&gdpr=&gdpr_consent=&ref=&bpid=bellmedia&c=%7B%22bpid%2
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://d.agkn.com/iframe/8613/?che=720919169&gdpr=&gdpr_consent=&ref=&bpid=bellmedia&c=%7B%22bpid%2
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://d.agkn.com/iframe/8613/?che=926063014&gdpr=&gdpr_consent=&ref=https%3A%2F%2Fwww.ctvnews.ca%2
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://d.agkn.com/iframe/8613/?che=93181454&gdpr=&gdpr_consent=&ref=https%3A%2F%2Fwww.ctvnews.ca%2F
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://d.agkn.com/iframe/8613/?che=937014970&gdpr=&gdpr_consent=&ref=&bpid=bellmedia&c=%7B%22bpid%2
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://edmonton.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://edmonton.ctvnews.ca/alberta-reports-91-variant-cases-among-505-covid-19-infections-1.5352555
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://edmonton.ctvnews.ca/jailed-alberta-pastor-has-hearing-scheduled-for-monday-1.5353324
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://edmonton.ctvnews.ca/mcdavid-scores-twice-edmonton-oilers-edge-winnipeg-jets-2-1-1.5353615
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://edmonton.ctvnews.ca/red-deer
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://election.ctvnews.ca/cmlink/election-teasers-stylesheet-7.733147
Source: 7[1].htm.3.dr	String found in binary or memory: https://election.ctvnews.ca/platforms
Source: qANoY7mBzs8[1].js.3.dr	String found in binary or memory: https://fburl.com/debugjs.
Source: moatheader[1].js.3.dr	String found in binary or memory: https://geo.moatads.com/n.js?
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://gisanddata.maps.arcgis.com/apps/opsdashboard/index.html
Source: coronavirus[1].htm.3.dr, ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://gisanddata.maps.arcgis.com/apps/opsdashboard/index.html#/bda7594740fd40299423467b48e9ecf6
Source: jquery.cookie[1].js.3.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	String found in binary or memory: https://github.com/krux/prescribe/
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/drt/si
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://gum.criteo.com/syncframe?topUrl=toronto.ctvnews.ca
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://gum.criteo.com/syncframe?topUrl=toronto.ctvnews.ca#
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://gum.criteo.com/syncframe?topUrl=www.ctvnews.ca
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://gum.criteo.com/syncframe?topUrl=www.ctvnews.ca#
Source: pr[1].htm.3.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://aax-eu.amazon-adsystem.com/s/ecm3?id=$UID&ex=appnexus.com
Source: pr[1].htm.3.dr	String found in binary or memory: https://ib.adnxs.com/getuid?https://aax-eu.amazon-adsystem.com/s/ecm3?id=$UID&ex=districtm
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://instagram.com/ctvnews
Source: ~DF0CE78D99C11524C3.TMP.1.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://instagram.com/ctvtoronto
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://instagram.com/ctvtorontob
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://instagram.com/ctvtorontoshes-gathering-sizesX
Source: all[1].js0.3.dr	String found in binary or memory: https://itunes.apple.com/us/app/messenger/id454638411
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: https://jobs.bce.ca/bell/go/Media/3537600/
Source: clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	String found in binary or memory: https://jquery.com/
Source: clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	String found in binary or memory: https://jquery.org/license
Source: clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	String found in binary or memory: https://js.foundation/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://kitchener.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://kitchener.ctvnews.ca/36-more-covid-19-cases-reported-in-waterloo-region-1.5352692
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://kitchener.ctvnews.ca/guelph
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://kitchener.ctvnews.ca/waterloo-region-booking-covid-19-vaccine-appointments-for-people-over-7
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://kitchener.ctvnews.ca/waterloo-region-identifies-large-cluster-of-covid-19-cases-variant-of-c
Source: news-7[1].css.3.dr	String found in binary or memory: https://knlive.ctvnews.ca/polopoly_fs/7.454763
Source: clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	String found in binary or memory: https://krux.github.io/postscribe
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://linkedin.com/company/ctv-news
Source: clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	String found in binary or memory: https://lodash.com/
Source: clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	String found in binary or memory: https://lodash.com/license
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://london.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://london.ctvnews.ca/london-police-ask-for-public-help-in-suspicious-fire-investigation-1.53528
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://london.ctvnews.ca/massive-opp-operation-in-southwestern-ontario-nets-firearms-explosives-and
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://london.ctvnews.ca/middlesex-london-adults-can-all-be-one-shot-covid-vaccinated-by-end-of-jun
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://london.ctvnews.ca/organizers-ask-for-free-testing-for-kids-and-staff-to-keep-ontario-summer-
Source: moatheader[1].js.3.dr	String found in binary or memory: https://mb.moatads.com
Source: moatheader[1].js.3.dr	String found in binary or memory: https://mb.moatads.com/yi/v2?
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://montreal.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://montreal.ctvnews.ca/member-of-military-police-in-quebec-facing-disciplinary-charges-over-rac
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://montreal.ctvnews.ca/opponents-of-gun-control-bill-are-denouncing-trudeau-and-no-longer-want-
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://montreal.ctvnews.ca/parents-of-schoolchildren-in-two-montreal-neighbourhoods-to-get-vaccines
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://news.ontario.ca/en/release/58449/ontario-limits-the-size-of-unmonitored-and-private-social-g
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://northernontario.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://northernontario.ctvnews.ca/be-kind-t-shirt-campaign-takes-off-at-sudbury-s-st-charles-colleg
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://northernontario.ctvnews.ca/northeastern-ontario-marks-global-recycling-day-with-trash-tips-1
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://northernontario.ctvnews.ca/small-town-benefits-mislabeled-birthday-card-ends-up-in-the-right
Source: clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	String found in binary or memory: https://openjsf.org/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://ottawa.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://ottawa.ctvnews.ca/83-new-cases-of-covid-19-in-ottawa-on-the-eve-of-moving-to-the-red-zone-1.
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://ottawa.ctvnews.ca/ottawa-moving-into-covid-19-red-zone-on-friday-1.5352106
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://ottawa.ctvnews.ca/sports-teams-prepare-for-new-game-plan-as-ottawa-moves-into-red-zone-1.535
Source: sodar2[1].js.3.dr, runner[1].htm.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: f[2].txt1.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204
Source: rx_lidar[1].js.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: f[2].txt1.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=jca&jc=
Source: f[1].txt1.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=jca&jc=22&version=
Source: f[3].txt0.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=jca&jc=23&version=
Source: f[3].txt.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=jca&jc=60&version=
Source: runner[1].htm.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=220
Source: sodar2[1].js.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=221
Source: f[3].txt.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/r20210316/r20110914/abg_survey.js
Source: sodar2[1].js.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=221
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://platform.twitter.com/widgets.js
Source: all[1].js0.3.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.facebook.orca
Source: wrap[1].js.3.dr, config[1].js.3.dr	String found in binary or memory: https://protected-by.clarium.io
Source: wrap[1].js.3.dr	String found in binary or memory: https://protected-by.clarium.io/werror
Source: moatheader[1].js.3.dr	String found in binary or memory: https://px.moatads.com
Source: moatheader[1].js.3.dr	String found in binary or memory: https://px.moatads.com/pixel.gif?e=24&d=data%3Adata%3Adata%3Adata&i=
Source: widgets[1].js.3.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://reddit.com/submit?url=https://toronto.ctvnews.X
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://reddit.com/submit?url=https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://reddit.com/submit?url=https://www.ctvnews.ca/health/coronavirus/canada-finalizing-deal-with-
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://regina.ctvnews.ca/
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://regina.ctvnews.ca/115-new-covid-19-cases-in-sask-120-new-presumptive-variant-cases-1.5352349
Source: pr[1].htm.3.dr	String found in binary or memory: https://s.ad.smaato.net/c/?adExInit=aps&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com/s%2Fecm3%3Fex
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://s7.addthis.com/js/250/addthis_widget.js#async=1
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html#rand=0.41749970263104963&iit=16161661
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html#rand=0.4416412533915908&iit=161616618
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://saskatoon.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://saskatoon.ctvnews.ca/prince-albert
Source: beacon[1].js0.3.dr	String found in binary or memory: https://sb.scorecardresearch.com/b2?
Source: beacon[1].js0.3.dr	String found in binary or memory: https://sb.scorecardresearch.com/b?
Source: clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	String found in binary or memory: https://sizzlejs.com/
Source: chartbeat_video[1].js.3.dr	String found in binary or memory: https://static.chartbeat.com/js/inpage.js
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/channel.html
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/css/common.css?v1
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/css/ctvnews_layout.css
Source: coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/css/election/election-2019-grid.css
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/css/ie8_common.css
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/css/ie_ctvnews.css
Source: sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/css/jquery.lightbox-0.4.css
Source: coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/css/plugins/slick.css
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/css/print.css
Source: coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/css/responsive.css
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/css/responsive_layout.css
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/css/tooltipster.css
Source: sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/img/favicon.ico
Source: imagestore.dat.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/img/favicon.ico~
Source: news-7[1].css.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/img/grey-dot.gif
Source: coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/img/logos/bell_media_en_white.png
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/img/logos/bellmedia_logo.gif
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/img/logos/footer-logo_cp24.jpg
Source: coronavirus-player-7[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/articlePlayerNavigation.js
Source: sean-davidson-1[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/common.js
Source: sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/common.js?v2
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/comscore/beacon.js
Source: sean-davidson-1[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/detectMobile.js
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/jquery-1.7.js
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/jquery.bxslider.min.js
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/jquery.cookie.js
Source: sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/jquery.form.js
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/jquery.polopoly.js
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/jquery.tooltipster.min.js
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/jquery.validate-1.12.0.min.js
Source: sean-davidson-1[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/lightbox/jquery.lightbox-0.4.min.js
Source: sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/mdetect.js
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/membership.js
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/omnitureTVE.js
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/requireDependency.js
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/slick/slick.min.js
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/swfobject-2.2.js
Source: sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/trustProject.js
Source: coronavirus-player-7[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/videoNavigation.js
Source: coronavirus-player-7[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/videoPlayer.vidi.js
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/common/js/videoUtil.js
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/imageGallery.css
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTVSans-Black.otf?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTVSans-Black.otf?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTVSans-Bold.otf?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTVSans-Bold.otf?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTVSans-News.svg?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTVSans-News.svg?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTVSans-Regular.otf?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTVSans-Regular.otf?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Black.ttf?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Black.ttf?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Black.woff?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Black.woff?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Bold.ttf?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Bold.ttf?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Bold.woff?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Bold.woff?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-News.otf?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-News.otf?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-News.woff?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-News.woff?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Regular.ttf?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Regular.ttf?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Regular.woff?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Regular.woff?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_sans-News.ttf?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_sans-News.ttf?s=2_7104
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/Flama-Medium.eot?#iefix&s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/Flama-Medium.eot?#iefix&s=2_7104
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/Flama-Medium.eot?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/Flama-Medium.eot?s=2_7104
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/Flama-Medium.svg#font&s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/Flama-Medium.svg#font&s=2_7104
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/Flama-Medium.woff?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/Flama-Medium.woff?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/webiconfont-v8.eot?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/webiconfont-v8.eot?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/webiconfont-v8.svg#webiconfont?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/webiconfont-v8.svg#webiconfont?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/webiconfont-v8.ttf?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/webiconfont-v8.ttf?s=2_7104
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/webiconfont-v8.woff?s=2_620
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/webiconfont-v8.woff?s=2_7104
Source: coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/img/fav-icons-2019/114x114-CTVNews-Icon.png
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/img/fav-icons-2019/32x32-CTVNews-Icon.ico
Source: coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/img/fav-icons-2019/57x57-CTVNews-Icon.png
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/img/fav-icons-2019/64x64-CTVNews-Icon.ico
Source: coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/ctvnews/img/fav-icons-2019/72x72-CTVNews-Icon.png
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/elections/federal2019/election-client.css
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://static.ctvnews.ca/bellmedia/toronto/css/toronto_layout.css
Source: chartbeat_video[1].js.3.dr	String found in binary or memory: https://static2.chartbeat.com/frontend_ng/hud/hud-inpage/hud-inpage-
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://stats.ctvnews.ca/HGETALL/urn:ctv:weather
Source: sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr, YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://support.bell.ca/Billing-and-Accounts/Security_and_privacy/How_does_Bell_respect_my_privacy
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://t.co/on1GgjMdGH
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://t.co/rQrGccAExd
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://toronto.c
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/1.5290676"
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/7-year-old-in-hospital-following-hit-and-run-in-midtown-toronto-1.5352959
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/bus-service-resumes-in-brampton-after-giant-amazon-warehouse-shut-down-du
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/canadians-are-spending-less-and-avoiding-cash-during-pandemic-report-1.53
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/change-of-march-break-creates-travel-problems-for-some-teachers-families-
Source: imagestore.dat.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/content/dam/ctvnews/newicons/favicon/favicon.ico
Source: imagestore.dat.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/content/dam/ctvnews/newicons/favicon/favicon.ico~
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/covid-19-cases-in-ontario-schools-and-child-care-centres-as-of-march-18-1
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/denied-flood-insurance-claim-paid-after-family-goes-to-general-insurance-
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/don-t-get-this-wrong-statistician-says-no-doubt-third-wave-has-started-in
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/expert-offers-tips-on-making-home-and-office-wi-fi-better-and-faster-1.53
Source: ~DF0CE78D99C11524C3.TMP.1.dr, {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://toronto.ctvnews.ca/fToronto
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/families-demand-answers-as-tsb-reacts-to-iran-s-report-on-downing-of-flig
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/ford-in-favour-of-allowing-outdoor-dining-in-ontario-grey-zones-if-doctor
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/ford-warns-ontarians-to-be-very-cautious-after-covid-19-third-wave-declar
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/game-of-cards-leads-to-surprise-lockdown-romance-for-two-ontario-seniors-
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/god-bless-america-ford-says-u-s-coming-to-canada-s-rescue-after-biden-agr
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/grammy-winning-toronto-musician-can-play-any-song-after-hearing-it-one-ti
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/grandmother-shocked-by-1-400-in-video-games-charges-on-her-credit-card-th
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/here-s-what-can-reopen-as-toronto-and-peel-region-enter-the-grey-zone-1.5
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/here-s-what-you-need-to-know-about-getting-the-covid-19-vaccine-in-the-to
Source: ~DF0CE78D99C11524C3.TMP.1.dr, {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://toronto.ctvnews.ca/io-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-c
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/it-s-a-bummer-but-we-should-be-grateful-toronto-area-students-prepare-for
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/it-takes-a-village-how-people-are-meeting-their-social-needs-during-the-c
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/let-s-be-very-careful-ontario-s-top-doctor-confirms-province-is-in-third-
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/local-weather
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/local-weather"
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/lockdown-isn-t-really-the-way-to-go-york-region-s-top-public-health-docto
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/man-who-runs-ontario-long-term-care-home-without-a-single-case-of-covid-1
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/milton-ont-fitness-trainer-building-hope-in-ghana-one-basketball-court-at
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/mississauga-school-staff-member-battling-covid-19-in-hospital-1.5353190
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/mobile
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/about-us
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/bios/sean-davidsoRoot
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/bios/sean-davidson-1.4670847
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/bios/sean-davidson-1.46708470Sean
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/bios/sean-davidson-1.4670847?contactForm=true
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/bios/sean-davidson-1.4670847?contactForm=true0Sean
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/bios/sean-davidson-1.4X
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/bios/sean-davidsor=1460
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/consumer-alert
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/contact-us
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/contact-us/news-tips-7.319906?ot=AjaxLayout&url=https%253A%252F%252F
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/contact-us/news-tips-7.319906?url=https%253A%252F%252Ftoronto.ctvnew
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/gas-prices"
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/local-news
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/lotto-results
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/more/queen-s-park
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/mps-demand-action-from-banks-after-toronto-woman-left-on-hold-as-taxi-sca
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/ontario-business-hydro-subsidy-to-cost-province-an-estimated-15-2-billion
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/ontario-college-student-who-died-of-covid-19-had-concerns-over-parties-at
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/ontario-lawyer-s-defamation-claim-over-social-media-backlash-called-frivo
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/ontario-logs-more-than-1-500-new-covid-19-cases-for-second-straight-day-1
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/ontario-mpp-to-speak-at-event-organized-by-group-that-compares-abortion-t
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/ontario-pharmacies-say-they-will-soon-run-out-of-astrazeneca-vaccine-1.53
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/ontario-plans-to-spend-933m-on-increasing-improving-long-term-care-spaces
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/ontario-slashes-gathering-limits-in-three-covid-19-hotspots-here-are-the-
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-o
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-asRoot
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-asis
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/ontario-toddler-needs-250-000-for-life-changing-ear-surgery-not-available
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/oshawa-ont-man-found-guilty-of-first-degree-murder-manslaughter-in-killin
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/pakistani-teen-who-had-to-eat-through-a-straw-receives-one-of-a-kind-surg
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/pandemic-spending-trends-expected-to-continue-through-2021-1.5344059
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/photo-galleries
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/police-recover-4-5m-worth-of-stolen-high-end-vehicles-after-busting-high-
Source: toronto-7[1].css.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/polopoly_fs/7.676347
Source: toronto-header-7[1].css.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/polopoly_fs/7.726186
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/polopoly_fs/7.740367
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/report-errors-1.1088708?ot=AjaxLayout&url=https%253A%252F%252Ftoronto.ctv
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/report-errors-1.1088708?url=https%253A%252F%252Ftoronto.ctvnews.ca%252Fon
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/rss/ctv-news-toronto-1.822319
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/rss/ctv-news-toronto-coping-through-covid-video-1.5186539
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/rss/ctv-news-toronto-featured-1.3981340
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/rss/ctv-toronto-happening-now-1.5114046
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/rss/ctv-toronto-stories-worth-watching-1.5191122
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/sean-davidson-1.4670847
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/search-results/ctv-toronto-search-7.122
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/some-canadians-who-received-cerb-may-be-surprised-by-tax-bill-1.5351649
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/strict-three-week-lockdown-needed-to-stop-explosive-covid-19-variant-grow
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/things-to-know-t-o/answering-questions-about-spousal-support-1.5334966
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/things-to-know-t-o/hit-the-slopes-before-the-snow-is-gone-1.5334963
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/things-to-know-t-o/how-does-uv-led-water-disinfection-work-1.5344494
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/things-to-know-t-o/new-non-profit-aims-to-strengthen-canadian-fashion-ind
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/things-to-know-t-o/second-harvest-food-rescue-and-feeding-the-need-1.5344
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/things-to-know-t-o/supporting-maternal-mental-health-1.5334965
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/things-to-know-t-o/what-employees-should-know-if-they-re-temporarily-laid
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/things-to-know-t-o/your-pet-could-save-a-life-by-donating-blood-1.5344492
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/things-to-know-to.html"
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/this-is-the-full-list-of-people-eligible-for-covid-19-vaccines-in-phase-2
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/toronto-family-shocked-to-discover-gravestone-in-backyard-of-home-they-ha
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/toronto-man-warns-people-to-take-covid-19-variants-seriously-after-partne
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/toronto-officials-explain-how-to-book-your-covid-19-vaccine-1.5342246
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/toronto-second-world-war-veterans-eagerly-wait-for-covid-19-vaccine-1.534
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/toronto-won-t-rule-out-outdoor-haircuts-but-some-salons-say-it-would-be-d
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/traffic
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/traffic"
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?binId
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?binId=1.3378514
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?binId=1.3378525
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?binId=1.3378527
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?binId=1.3378528
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?binId=1.3378530
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?binId=1.3378531
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?clipId=2158724
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?clipId=2161154
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?clipId=2162654
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?clipId=2162820
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?clipId=2162820"
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?clipId=2163198
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?clipId=2163863
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?clipId=2163875
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?clipId=2163879
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?clipId=2163900
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?clipId=86116
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5210733
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5282439
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5339849
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5349959
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5350427
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5350696
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5351081
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5351230
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5351300
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5351990
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5352287
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5352312
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5352369
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5352469
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5352710
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5352864
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5352896
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5353084
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5353090
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5353262
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5353367
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5353539
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/video?playlistId=1.5353632
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/what-changes-to-the-colour-coded-covid-19-system-mean-for-ontario-1.53002
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/what-is-and-isn-t-allowed-under-ontario-s-new-social-gathering-rules-1.51
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://toronto.ctvnews.ca/why-you-should-beware-if-renting-vans-from-home-improvement-stores-1.5342
Source: sodar2[1].js.3.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: ~DF0CE78D99C11524C3.TMP.1.dr, sodar2[1].js.3.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/221/runner.html
Source: sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr	String found in binary or memory: https://tru.am/scripts/custom/ctvnews.js
Source: ~DF0CE78D99C11524C3.TMP.1.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://twitter.com/SeanDavidson_
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://twitter.com/SeanDavidson_os/sean-davidson-1.4670847
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://twitter.com/SeanDavidson_os/sean-davidson-1.46708471SPS
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://twitter.com/SeanDavidson_os/sean-davidson-1.4X
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://twitter.com/celliottability/status/1307341542684798977?ref_src=twsrc%5Etfw
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://twitter.com/ctvnews
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr, YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://twitter.com/ctvtoronto
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://twitter.com/ctvtorontolashes-gathering-sizesX
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://twitter.com/ctvtorontotmr=load%3D1616166112408%26core%3D1616166112475%26main%3D1616166112486
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://twitter.com/hashtag/COVID19?src=hash&ref_src=twsrc%5Etfw
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://twitter.com/rachaiello
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://twitter.com/seandavidson_?lang=en
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://twitter.com/share
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://twitter.com/share/more/bios/sean-davidson-1.4670847?contactForm=true
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://twitter.com/share/more/bios/sean-davidson-1.4X
Source: pr[1].htm.3.dr	String found in binary or memory: https://ups.analytics.yahoo.com/ups/58252/sync?redir=true
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://vancouverisland.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://vancouverisland.ctvnews.ca/saanich-duck-earns-millions-of-views-for-sleeping-like-it-s-dead-
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://windsor.ctvnews.ca/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://windsor.ctvnews.ca/chatham-kent-won-t-be-staying-in-orange-medical-officer-of-health-1.53525
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://windsor.ctvnews.ca/vertical-urban-farm-ortaliza-opens-kingsville-storefront-1.5352926
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://windsor.ctvnews.ca/windsor-fire-crews-battle-blaze-at-windsor-disposal-services-facility-1.5
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://winnipeg.ctvnews.ca/
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://winnipeg.ctvnews.ca/manitoba-considering-moving-province-to-code-orange-1.5352136
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://winnipeg.ctvnews.ca/marijuana-grow-ops-causing-a-stink-in-residential-neighbourhood-homeowne
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://winnipeg.ctvnews.ca/step-in-the-right-direction-centennial-concert-hall-encouraged-by-prospe
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://winnipeg.ctvnews.ca/we-could-not-survive-another-lockdown-manitoba-restaurants-hoping-third-
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.bellmedia.ca/
Source: coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.bellmedia.ca/bell-media-website-terms-conditions/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.bellmedia.ca/en/toc.html
Source: sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.bellmedia.ca/sales/political-ads-registry/
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/entrepreneurs-can-t-do-it-all-1.1538489
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/identifying-innovative-and-resilient-companies-1.1514926
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/larry-berman-aii-sentiment-suggests-near-term-caution-1.1526577
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/larry-berman-gold-remains-the-most-attractive-asset-class-with-steep-u-s
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/larry-berman-portfolios-need-optionality-1.1518884
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/larry-berman-the-quality-of-earnings-growth-globally-remains-weak-1.1523
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/partners-in-performance
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/partners-in-performance-looking-for-investment-opportunities-1.1506107
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/partners-in-performance-one-on-one-with-michael-cooke-1.1401380
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/partners-in-performance-one-on-one-with-phil-taller-1.1510005
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/partners-in-performance-one-on-one-with-todd-mattina-1.1503971
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/pattie-lovett-reid-financial-resolutions-for-2021-1.1536730
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/pattie-lovett-reid-tips-on-the-best-age-to-retire-1.1533497
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/pattie-lovett-reid-why-retirees-should-re-examine-their-portfolio-mix-am
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/sun-life-group-benefits
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/want-a-happier-workforce-provide-better-benefits-1.1529528
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.bnnbloomberg.ca/why-employers-must-support-their-employees-mental-health-1.1533405
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://www.cp24.com
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://www.ctv.ca
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctv.ca/
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://www.ctv.ca/about
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca
Source: sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/app
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/app"
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/autos/ford-partly-assembling-some-vehicles-idling-two-plants-due-to-chip-shor
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/business/asian-markets-follow-wall-st-lower-after-fed-bump-1.5353654
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/business/everything-you-need-to-know-about-covid-19-and-your-taxes-explained-
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/business/ottawa-should-review-employment-insurance-benefit-triggers-as-econom
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/business/trump-s-taxes-in-hand-manhattan-da-s-probe-heats-up-1.5351707
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/business/working-women-report-worsening-mental-health-especially-mothers-poll
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/canada/canada-reports-lowest-population-growth-rate-in-over-a-century-due-to-
Source: YNTWJAH3.htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/canada/canadians-react-to-expanded-access-to-assisted-dying-with-relief-anger
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/canada/cra-says-rare-error-in-some-tax-slips-lists-repaid-cerb-as-taxable-inc
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/canada/how-offensive-words-don-t-wind-up-on-vanity-licence-plates-1.5352886
Source: YNTWJAH3.htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/canada/how-you-can-help-combat-hate-crimes-against-asian-communities-1.535349
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/canada/time-for-canada-u-s-to-get-serious-about-how-when-to-reopen-border-exp
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/cmlink/7.733165
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/cmlink/7.733220
Source: sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/cmlink/site-style-improvements-7.695789?v3
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/content/dam/static-resources/omniture.js
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/coronavirus
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/ctv-news-channel
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/ctv-news-channel"
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/ctv-news-help
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/editorial-standards-and-policies
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/editorial-standards-and-policies#anchor11
Source: sean-davidson-1[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/editorial-standards-and-policies#anchor12
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/entertainment/alexi-mccammond-parts-ways-with-teen-vogue-over-past-tweets-1.5
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/entertainment/ryan-reynolds-just-watched-green-lantern-for-the-first-time-and
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/entertainment/so-much-money-was-sent-to-our-dope-man-honey-boo-boo-s-mom-spen
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/air-hand-dryers-spread-contamination-more-than-paper-towels-study-find
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/PCOVID-19
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/a-new-covid-19-side-effect-some-patients-are-developing-su
Source: YNTWJAH3.htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/benefits-of-astrazeneca-vaccine-outweigh-risks-health-cana
Source: coronavirus[1].htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/biden-says-u-s-to-hit-100-million-vaccine-goal-on-friday-1
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/can-a-covid-19-vaccine-s-second-dose-be-delayed-for-weeks-
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/can-we-hug-our-vaccinated-grandparents-experts-say-it-depe
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/canada-finalX
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astr
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/coronavirus-live-updates-covid-19-coverage-from-ctv-news
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/coronavirus-toll-nearly-14-000-excess-deaths-recorded-amid
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/coronavirus-vaccine-tracker-how-many-people-in-canada-have
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/covid-19-curves-compare-canada-and-other-key-nations-1.488
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/covid-19-in-the-u-s-how-do-canada-s-provinces-rank-against
Source: coronavirus[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/covid-19-vaccine-tracker-how-many-people-in-canada-have-re
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/covid-19-vaccines-and-pre-existing-medical-conditions-shou
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/enormous-amount-of-change-new-data-reveals-impact-of-covid
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/eu-regulator-convinced-astrazeneca-benefit-outweighs-risk-
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/even-as-child-care-fees-rise-report-says-many-daycares-may
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/fact-check-how-accurate-are-pcr-tests-for-the-novel-corona
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/federal-government-isn-t-stockpiling-covid-19-vaccines-pro
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/feds-extending-covid-19-wage-and-rent-subsidy-until-june-1
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/france-to-announce-new-virus-restrictions-in-paris-region-
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/here-s-where-and-when-you-can-get-a-covid-19-vaccine-in-ca
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/how-a-covid-19-vaccine-could-change-travel-for-good-1.5189
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/how-effective-is-the-astrazeneca-covid-19-vaccine-what-you
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/is-herd-immunity-still-possible-in-canada-experts-aren-t-s
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/it-s-garbage-infectious-disease-expert-debunks-facts-not-f
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/j-j-developing-several-next-generation-covid-19-vaccines-s
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/moderna-plans-to-test-its-covid-19-vaccine-on-canadian-chi
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/most-recent
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/naci-expands-recommendations-clearing-use-of-astrazeneca-s
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/no-issues-drinking-alcohol-won-t-affect-covid-19-vaccine-e
Source: {055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/o.ctvnews.X
Source: ~DF0CE78D99C11524C3.TMP.1.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/o.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-pr
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/pandemic-isolation-depriving-toddlers-and-babies-of-needed
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/photo-of-chef-s-cry-of-despair-shared-widely-in-lockdown-i
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/st-patrick-s-day-revellers-appear-to-be-heeding-covid-advi
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/tracking-every-case-of-covid-19-in-canada-1.4852102
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/tracking-variants-of-the-novel-coronavirus-in-canada-1.529
Source: YNTWJAH3.htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/vaccine-withheld-from-hospital-that-gave-trump-tower-worke
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/we-failed-the-most-vulnerable-dr-tam-s-biggest-takeaway-af
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/what-s-different-about-each-vaccine-your-covid-19-vaccine-
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/who-says-coronavirus-unlikely-to-have-leaked-from-lab-in-c
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/why-the-grief-pandemic-might-outlast-the-worst-of-covid-19
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/woman-95-totally-incapacitated-after-receiving-3-doses-of-
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/your-covid-19-vaccine-rollout-questions-answered-1.5347459
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/health/coronavirus/zoos-scientists-aim-to-curb-people-giving-virus-to-animals
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/lifestyle/a-giant-manta-ray-jumped-out-of-the-ocean-and-photobombed-a-surfer-
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/lifestyle/take-a-chance-on-me-man-with-autism-writes-in-heartfelt-cover-lette
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/live
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/mobile/health/coronavirus/canada-finalizing-deal-with-u-s-for-1-5m-doses-of-t
Source: sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/more/contact-ctv-news
Source: coronavirus[1].htm.3.dr, YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/newsletters
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/newsletters/the-covid19-brief-newsletter-signup
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/politics
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/politics/another-difficult-milestone-michael-kovrig-s-wife-on-looming-trial-1
Source: YNTWJAH3.htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/politics/china-concludes-espionage-trial-of-michael-spavor-behind-closed-door
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/politics/conservatives-say-finances-are-solid-but-have-yet-to-pay-back-federa
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/politics/feds-extending-canada-recovery-benefit-eligibility-by-12-weeks-1.531
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.1174352.1612035015
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.1659243.1390919082
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.2302970.1611241953
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.2891786.1462571419
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.3329744.1489776394
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.3701934.1512080452
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.3964874.1528428723
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4129667.1539264370
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4170608.1541787176
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4264165
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4264174
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4282970.1549368709
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4336314.1552586873
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4362527.1554229726
Source: election-teasers-stylesheet-7[1].css.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4551639.1565896369
Source: election-teasers-stylesheet-7[1].css.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4551650.1565896642
Source: election-teasers-stylesheet-7[1].css.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4551653.1565896787
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4588552.1568222675
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4670199.1615578558
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4683865.1573671203
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4693935
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4703529
Source: sean-davidson-1[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4703645.1591719133
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4783916.1580052167
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4785356.1580149371
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4799558.1580972570
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4821090.1582242646
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4837867.1583295891
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4859921.1584637596
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4860018.1605665042
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4864366.1584979003
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4893910.1586795726
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4894106.1586801736
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4894117.1586801889
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4894138.1586802357
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4894318.1586807914
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4919456.1588280475
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4931365.1588969615
Source: coronavirus-player-7[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.4987822.1592401250
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5010981.1595793416
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5033312.1595366126
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5036493.1595533329
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5046847.1596202922
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5054732.1596766151
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5071086.1599144107
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5098180.1599679292
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5103715.1609268089
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5109201.1600364321
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5109244.1600366099
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5115905.1600818041
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5126804.1601490051
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5143574.1602619537
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5148449.1602873568
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5153813.1603251756
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5164445.1603900811
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5174826.1604516325
Source: coronavirus-player-7[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5180548.1604925010
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5182007.1604983283
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5186162.1605199955
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5188187.1611601474
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5189079.1605371650
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5200373.1616109211
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5200978.1606156807
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5202530.1608057610
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5202582.1616073429
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5202769.1606249175
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5203984.1606322081
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5204192.1606328185
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5204688.1606345984
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5205126.1606363805
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5206138.1606423896
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5207554.1606503333
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5207647.1606506531
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5209372.1606675845
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5209639.1606697514
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5211981.1606843675
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5212387.1606855607
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5212608.1606863597
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5214842.1606960630
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5214845.1606960802
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5217566.1607108207
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5217869.1607120087
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5219351.1607281575
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5219358.1607282020
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5219405.1607285329
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5232020.1608051112
Source: coronavirus-player-7[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5237698.1608320116
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5237841.1608326114
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5245417.1609004000
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5252311.1609740908
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5257373.1610033529
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5258189.1610062886
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5266626.1610636082
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5268704.1610738174
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5271121.1610994383
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5276951.1611267506
Source: coronavirus-player-7[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5277016.1611269269
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5277349.1611277313
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5277841.1611323626
Source: coronavirus-player-7[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5282060.1611635827
Source: coronavirus-player-7[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5292462.1612290133
Source: coronavirus-player-7[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5299029.1612672433
Source: coronavirus-player-7[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5300974.1612832312
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5301282.1612871177
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5301527.1612884559
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5307001.1613159398
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5309715.1613416930
Source: coronavirus-player-7[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5312034.1613535292
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5314530.1615970210
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5316144.1613758971
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5317730.1613870806
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5318415.1613960245
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5324616.1614291098
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5324749.1614294794
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5325567.1614350564
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5326051.1614368171
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5326912.1614399657
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5329309.1614641307
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5329564.1614648452
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5331323.1614740232
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5331591.1614778396
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5332014.1614792178
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5335979.1614983472
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5337103.1615092605
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5339887.1615310655
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5343689.1615500577
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5344509.1615554525
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5345008.1615574539
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5345551.1615592013
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5346152.1615650995
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5346395.1615677084
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5346702.1615728060
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5346847.1615747708
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5347121.1615770698
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5347194.1615779644
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5347290.1615807228
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5347630.1615822229
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5348128.1615897096
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5348632.1615864213
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5348917.1615900523
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5350197.1615945327
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5350339.1615968703
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5350742.1615994448
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5350904.1615999369
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5350970.1616001448
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5351228.1616010455
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5351418.1616017386
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5351578.1616021618
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5351894.1616032018
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352034.1616055622
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352313.1616076028
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352423.1616080969
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352467.1616083894
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352503.1616083591
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352557.1616085216
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352687.1616089119
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352709.1616090065
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352725.1616090619
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352733.1616090976
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352735.1616091100
Source: coronavirus-player-7[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352755.1616091705
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352771.1616092229
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352777.1616092577
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352789.1616093051
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352809.1616093584
Source: coronavirus-player-7[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352826.1616094186
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352863.1616095916
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352900.1616097553
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352915.1616098544
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5352935.1616099218
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353085.1616103748
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353089.1616103888
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353126.1616104746
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353137.1616105133
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353148.1616105607
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353154.1616113122
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353156.1616105860
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353259.1616107847
Source: coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353278.1616108247
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353295.1616108921
Source: ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353334.1616110208
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353391.1616112670
Source: YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353441.1616114342
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353523.1616119404
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353552.1616120929
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353576.1616123416
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353631.1616127163
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353644.1616129294
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353648.1616132368
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.5353652.1616133940
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.838894.1516820759
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/1.921770.1615578393
Source: my-health-7[1].css.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/7.417143
Source: my-health-7[1].css.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/7.417150
Source: news-7[1].css.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/7.456777
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/7.711875
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/7.724917
Source: logo-7[1].css.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/7.726371
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/7.726390
Source: gallerylogo-7[1].css.3.dr	String found in binary or memory: https://www.ctvnews.ca/polopoly_fs/7.727784
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/rachel-aiello-1.3561976
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/report-an-error-1.1162498?ot=AjaxLayout&url=https%253A%252F%252Fwww.ctvnews.c
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/report-an-error-1.1162498?url=https%253A%252F%252Fwww.ctvnews.ca%252Fhealth%2
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/rss/bell-mobility-covid-19-widget-1.4864414
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/rss/breaking-news-banners-for-external-radio-1.4027508
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/rss/ctv-national-news-homepage-1.5059590
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/rss/ctv-news-weather-1.4134741
Source: coronavirus[1].htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/rss/ctvnews-ca-covid-all-news-tag-driven-1.4866013
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/rss/ctvnews-ca-top-stories-public-rss-1.822009
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/rss/feeds-tve-ctv-news/ctvnews-ca-toronto-banners-1.5084370
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/rss/homepage-video-widget-ctv-news-video-network-1.5089339
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/rss/most-watched-1.4108797
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/rss/test-feed-bell-mobility-1.4596727
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/sci-tech/nasa-completes-engine-test-firing-of-moon-rocket-on-2nd-try-1.535339
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/sci-tech/the-eagle-shark-that-glided-through-ancient-seas-1.5352743
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/sci-tech/u-s-sends-investigators-to-probe-another-michigan-tesla-crash-1.5352
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/search-results
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/sports/canada-s-messing-thrilled-to-compete-with-teammates-he-hasn-t-seen-in-
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/sports/kobe-bryant-s-widow-names-deputies-who-allegedly-took-shared-photos-of
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/sports/nfl-reviewing-sex-assault-claims-against-texans-qb-watson-1.5353310
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/video
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/video?clipId=68596&playlistId=1.5172305&binId=1.810401&playlistPa
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/video?playlistId=1.5282439
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/video?playlistId=1.5325538
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/video?playlistId=1.5329320
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/video?playlistId=1.5343758
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/video?playlistId=1.5352369
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/video?playlistId=1.5353539
Source: canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/video?playlistId=1.5353632
Source: YNTWJAH3.htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/world/atlanta-police-on-shooting-probe-nothing-is-off-the-table-1.5353353
Source: YNTWJAH3.htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/world/biden-inauguration-priest-under-investigation-in-california-1.5353646
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.ctvnews.ca/world/icc-gives-israel-month-to-seek-deferral-of-war-crimes-probe-1.5352745
Source: YNTWJAH3.htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/world/jury-nearly-complete-for-chauvin-trial-major-rulings-loom-1.5353645
Source: ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/world/myanmar-factory-attacks-put-focus-on-chinese-influence-1.5352158
Source: ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/world/new-mom-army-vet-among-8-killed-in-georgia-spa-shootings-1.5353282
Source: YNTWJAH3.htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/world/texas-ag-accuses-san-antonio-hotel-of-price-gouging-in-storm-1.5353584
Source: ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/world/too-much-prejudice-against-old-and-young-in-world-un-report-1.5353616
Source: ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	String found in binary or memory: https://www.ctvnews.ca/world/u-s-china-spar-in-first-face-to-face-meeting-under-biden-1.5352014
Source: sodar2[1].js.3.dr	String found in binary or memory: https://www.google.com
Source: s[1].htm.3.dr	String found in binary or memory: https://www.google.com/pagead/drt/ui
Source: sodar2[1].js.3.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.iheart.com/live/999-virgin-radio-7481/?embed=true"
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.iheart.com/live/chum-1045-6270/?embed=true"
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.iheart.com/live/newstalk-1010-7499/?embed=true"
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.iheart.com/live/tsn-1050-7495/?embed=true"
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.iheart.com/podcast/962-ctv-news-toronto-at-six-po-53782987/"
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.iheart.com/podcast/962-ctv-news-toronto-at-six-po-53782987/?embed=true"
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.instagram.com/ctvtoronto/
Source: qANoY7mBzs8[1].js.3.dr, all[1].js0.3.dr	String found in binary or memory: https://www.internalfb.com/intern/invariant/
Source: 289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	String found in binary or memory: https://www.mtv.ca/category/news/tech/
Source: init[1].js.3.dr	String found in binary or memory: https://www.sasktel.net/
Source: YNTWJAH3.htm.3.dr	String found in binary or memory: https://www.toronto.ca/services-payments/streets-parking-transportation/road-restrictions-closures/r
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://www.wikidata.org/wiki/Q1860
Source: coronavirus[1].htm.3.dr	String found in binary or memory: https://youtube.com/ctvnews
Source: sean-davidson-1[1].htm.3.dr	String found in binary or memory: https://z.moatads.com/bellmediaprebidheader755367530455/moatheader.js

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 104.19.149.54:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.19.149.54:443 -> 192.168.2.5:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.163.177:443 -> 192.168.2.5:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.163.177:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.233.25:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.233.25:443 -> 192.168.2.5:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.116:443 -> 192.168.2.5:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.3.116:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.50.244.146:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.50.244.146:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.162.13:443 -> 192.168.2.5:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.162.13:443 -> 192.168.2.5:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.72.67.237:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.72.67.237:443 -> 192.168.2.5:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.250.2.130:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.133.55:443 -> 192.168.2.5:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.250.2.130:443 -> 192.168.2.5:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.120.133.55:443 -> 192.168.2.5:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.50.156.162:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.50.156.162:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.195.23.91:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.195.23.91:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.5:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.19:443 -> 192.168.2.5:49763 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.250.0.157:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.250.0.157:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.73.84.222:443 -> 192.168.2.5:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.73.84.222:443 -> 192.168.2.5:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.206.143.246:443 -> 192.168.2.5:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.206.143.246:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.35:443 -> 192.168.2.5:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.60.216.35:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49791 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.248.172.235:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.248.172.235:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.14:443 -> 192.168.2.5:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.14:443 -> 192.168.2.5:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 178.250.2.131:443 -> 192.168.2.5:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 185.33.221.52:443 -> 192.168.2.5:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.116.38:443 -> 192.168.2.5:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.95.116.38:443 -> 192.168.2.5:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.254.47:443 -> 192.168.2.5:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.78.254.47:443 -> 192.168.2.5:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.5:49805 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.5:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.132.239.61:443 -> 192.168.2.5:49803 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.132.239.61:443 -> 192.168.2.5:49804 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.205.120.60:443 -> 192.168.2.5:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.205.120.60:443 -> 192.168.2.5:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.246.207.243:443 -> 192.168.2.5:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.246.207.243:443 -> 192.168.2.5:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.83:443 -> 192.168.2.5:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.83:443 -> 192.168.2.5:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.5:49831 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.156.0.31:443 -> 192.168.2.5:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.159.26:443 -> 192.168.2.5:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 99.86.159.26:443 -> 192.168.2.5:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.126.239.96:443 -> 192.168.2.5:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.126.239.96:443 -> 192.168.2.5:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.234.127.242:443 -> 192.168.2.5:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.234.127.242:443 -> 192.168.2.5:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49896 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49899 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49900 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.28.203.152:443 -> 192.168.2.5:49901 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.41:443 -> 192.168.2.5:49904 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.41:443 -> 192.168.2.5:49905 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.233.25:443 -> 192.168.2.5:49907 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.229.233.25:443 -> 192.168.2.5:49906 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.5:49914 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.194:443 -> 192.168.2.5:49915 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@3/604@70/37

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{055635E7-88C4-11EB-90E5-ECF4BB570DC9}.dat

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File created: C:\Users\user\AppData\Local\Temp\~DFC13CA9D2E6915C31.TMP

Jump to behavior

Source: C:\Program Files\internet explorer\iexplore.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\internet explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2968 CREDAT:17410 /prefetch:2
Source: C:\Program Files\internet explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2968 CREDAT:17410 /prefetch:2	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files (x86)\Internet Explorer\iexplore.exe

File opened: C:\Program Files (x86)\Java\jre1.8.0_211\bin\msvcr100.dll

Jump to behavior

Source: image4X4S17FI.jpg.3.dr

Binary or memory string: HGFsB

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	Security Software Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	File and Directory Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784	0%	Avira URL Cloud	safe

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

Source	Detection	Scanner	Link
ping.chartbeat.net	0%	Virustotal	Browse
confiant-integrations.global.ssl.fastly.net	0%	Virustotal	Browse
mabping.chartbeat.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label
https://confiant-integrations.freetls.fastly.net/cdt/	0%	Avira URL Cloud	safe
http://www.ctvalberta.ca/	0%	Avira URL Cloud	safe
http://leandrovieira.com	0%	Avira URL Cloud	safe
https://openjsf.org/	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
https://openjsf.org/	0%	URL Reputation	safe
http://wictvfile.cms.9c9media.net/fileserver/file/156947/filename/20110401-470-bell-media-jpg	0%	Avira URL Cloud	safe
http://www.huddletogether.com/projects/lightbox2/)	0%	Avira URL Cloud	safe
http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_lt-blue.jpg	0%	Avira URL Cloud	safe
https://tru.am/scripts/custom/ctvnews.js	0%	Avira URL Cloud	safe
https://www.bnnbloomberg.ca/want-a-happier-workforce-provide-better-benefits-1.1529528	0%	Avira URL Cloud	safe
http://www.wikipedia.com/	0%	URL Reputation	safe
http://www.wikipedia.com/	0%	URL Reputation	safe
http://www.wikipedia.com/	0%	URL Reputation	safe
https://www.bnnbloomberg.ca/partners-in-performance-one-on-one-with-phil-taller-1.1510005	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
www.googletagservices.com	216.58.215.226	true	false		high
d1n0xl2kej0ebw.cloudfront.net	99.86.159.26	true	false		high
dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	54.195.23.91	true	false		high
d3f7zc5bbfci5.cloudfront.net	99.86.163.177	true	false		high
ping.chartbeat.net	18.206.143.246	true	false	0%, Virustotal, Browse	unknown
scontent.xx.fbcdn.net	185.60.216.19	true	false		high
idsync.rlcdn.com	35.244.174.68	true	false		high
d10jk3zb4x05up.cloudfront.net	13.226.169.41	true	false		high
api.rlcdn.com	34.120.133.55	true	false		high
confiant-integrations.global.ssl.fastly.net	151.101.1.194	true	false	0%, Virustotal, Browse	unknown
cm.g.doubleclick.net	216.58.215.226	true	false		high
match-1943069928.eu-west-1.elb.amazonaws.com	52.50.156.162	true	false		high
bidder.am5.vip.prod.criteo.com	178.250.2.131	true	false		high
star-mini.c10r.facebook.com	185.60.216.35	true	false		high
pagead46.l.doubleclick.net	172.217.168.66	true	false		high
static.am5.vip.prod.criteo.net	178.250.2.130	true	false		high
mabping.chartbeat.net	52.73.84.222	true	false	0%, Virustotal, Browse	unknown
ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud	52.28.203.152	true	false		unknown
aax-eu.amazon-adsystem.com	52.95.116.38	true	false		high
tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	3.126.239.96	true	false		high
cdn.permutive.com	104.19.149.54	true	false		high
gum.par.vip.prod.criteo.com	178.250.0.157	true	false		high
cs491.wac.edgecastcdn.net	192.229.233.25	true	false		high
tru.am	104.26.3.116	true	false		unknown
d1ykf07e75w7ss.cloudfront.net	99.86.162.13	true	false		high
partnerad.l.doubleclick.net	216.58.215.226	true	false		high
googleads.g.doubleclick.net	142.250.185.194	true	false		high
s.ad.smaato.net	13.226.169.83	true	false		high
ib.anycast.adnxs.com	185.33.221.14	true	false		high
prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com	34.205.120.60	true	false		high
load-euw1.exelator.com	54.78.254.47	true	false		high
prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com	34.246.207.243	true	false		high
prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	18.156.0.31	true	false		unknown
prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com	34.234.127.242	true	false		high
aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com	18.132.239.61	true	false		high
nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com	52.50.244.146	true	false		high
securepubads.g.doubleclick.net	unknown	unknown	false		high
auth.9c9media.ca	unknown	unknown	false		unknown
cdn.krxd.net	unknown	unknown	false		high
mb.moatads.com	unknown	unknown	false		unknown
dx.bigsea.weborama.com	unknown	unknown	false		high
secure.adnxs.com	unknown	unknown	false		high
js.agkn.com	unknown	unknown	false		high
capi.9c9media.com	unknown	unknown	false		unknown
cm.everesttech.net	unknown	unknown	false		high
z.moatads.com	unknown	unknown	false		unknown
platform.twitter.com	unknown	unknown	false		high
static.criteo.net	unknown	unknown	false		high
match.adsrvr.org	unknown	unknown	false		high
consumer.krxd.net	unknown	unknown	false		high
m.addthis.com	unknown	unknown	false		high
c2shb.ssp.yahoo.com	unknown	unknown	false		high
www.ctvnews.ca	unknown	unknown	false		high
assets.adobedtm.com	unknown	unknown	false		high
connect.facebook.net	unknown	unknown	false		high
px.moatads.com	unknown	unknown	false		unknown
usermatch.krxd.net	unknown	unknown	false		high
ssum-sec.casalemedia.com	unknown	unknown	false		high
js-sec.indexww.com	unknown	unknown	false		unknown
stags.bluekai.com	unknown	unknown	false		high
sb.scorecardresearch.com	unknown	unknown	false		unknown
beacon.scorecardresearch.com	unknown	unknown	false		unknown
pixel.mathtag.com	unknown	unknown	false		high
htlb.casalemedia.com	unknown	unknown	false		high
ups.analytics.yahoo.com	unknown	unknown	false		high
static.chartbeat.com	unknown	unknown	false		high
kr.ixiaa.com	unknown	unknown	false		unknown
d.agkn.com	unknown	unknown	false		high
adservice.google.co.uk	unknown	unknown	false		unknown
geo.moatads.com	unknown	unknown	false		unknown
beta.ctvnews.ca	unknown	unknown	false		high
toronto.ctvnews.ca	unknown	unknown	false		high
gum.criteo.com	unknown	unknown	false		high
jslog.krxd.net	unknown	unknown	false		high
r.nexac.com	unknown	unknown	false		unknown
static.ctvnews.ca	unknown	unknown	false		high
dpm.demdex.net	unknown	unknown	false		high
aa.agkn.com	unknown	unknown	false		high
as-sec.casalemedia.com	unknown	unknown	false		high
www.facebook.com	unknown	unknown	false		high
bidder.criteo.com	unknown	unknown	false		high
c.amazon-adsystem.com	unknown	unknown	false		high
s7.addthis.com	unknown	unknown	false		high
bellmedia.demdex.net	unknown	unknown	false		high
beacon.krxd.net	unknown	unknown	false		high
idp.securetve.com	unknown	unknown	false		high
api-public.addthis.com	unknown	unknown	false		high
ib.adnxs.com	unknown	unknown	false		high
loadm.exelator.com	unknown	unknown	false		high
static.agkn.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Reputation
https://toronto.ctvnews.ca/	false	high
https://instagram.com/ctvtoronto	false	high
https://reddit.com/submit?url=https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784&title=Ontario slashes gathering sizes for entire province as alarm bells ring over COVID-19 spike	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://confiant-integrations.freetls.fastly.net/cdt/	wrap[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.ctvnews.ca/polopoly_fs/1.5312034.1613535292	coronavirus-player-7[1].htm.3.dr	false		high
https://twitter.com/ctvnews	coronavirus[1].htm.3.dr	false		high
https://www.ctvnews.ca/rss/ctvnews-ca-covid-all-news-tag-driven-1.4866013	coronavirus[1].htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	false		high
https://toronto.ctvnews.ca/this-is-the-full-list-of-people-eligible-for-covid-19-vaccines-in-phase-2	ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
https://toronto.ctvnews.ca/canadians-are-spending-less-and-avoiding-cash-during-pandemic-report-1.53	YNTWJAH3.htm.3.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.5292462.1612290133	coronavirus-player-7[1].htm.3.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.5352863.1616095916	YNTWJAH3.htm.3.dr	false		high
http://www.ctvalberta.ca/	sean-davidson-1[1].htm.3.dr	false	Avira URL Cloud: safe	unknown
http://leandrovieira.com	jquery.lightbox-0.4.min[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://static.ctvnews.ca/bellmedia/ctvnews/img/fav-icons-2019/64x64-CTVNews-Icon.ico	ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
https://twitter.com/share/more/bios/sean-davidson-1.4X	{055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat.1.dr	false		high
http://www.bellmedia.ca/en/toc.html	sean-davidson-1[1].htm.3.dr	false		high
https://www.ctvnews.ca/health/coronavirus/j-j-developing-several-next-generation-covid-19-vaccines-s	canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	false		high
https://toronto.ctvnews.ca/more/bios/sean-davidson-1.4670847?contactForm=true	~DF0CE78D99C11524C3.TMP.1.dr	false		high
https://regina.ctvnews.ca/	YNTWJAH3.htm.3.dr	false		high
https://www.ctvnews.ca/health/coronavirus	coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
http://www.shaw.ca/	init[1].js.3.dr	false		high
https://www.ctvnews.ca/health/coronavirus/moderna-plans-to-test-its-covid-19-vaccine-on-canadian-chi	coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.4693935	ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
https://openjsf.org/	clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://aax-eu.amazon-adsystem.com/s/ecm3?id=5003214223250065627&ex=districtm	~DF0CE78D99C11524C3.TMP.1.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.4821090.1582242646	coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	false		high
https://www.ctvnews.ca/	sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr, YNTWJAH3.htm.3.dr	false		high
https://static.ctvnews.ca/bellmedia/common/js/videoPlayer.vidi.js	coronavirus-player-7[1].htm.3.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.4783916.1580052167	YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
https://toronto.ctvnews.ca/rss/ctv-toronto-happening-now-1.5114046	sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	false		high
https://toronto.ctvnews.ca/video?clipId=2162820"	YNTWJAH3.htm.3.dr	false		high
http://www.opensource.org/licenses/GPL-2.0	jquery.cookie[1].js.3.dr	false		high
https://gum.criteo.com/syncframe?topUrl=toronto.ctvnews.ca	~DF0CE78D99C11524C3.TMP.1.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.5277016.1611269269	coronavirus-player-7[1].htm.3.dr	false		high
http://wictvfile.cms.9c9media.net/fileserver/file/156947/filename/20110401-470-bell-media-jpg	sean-davidson-1[1].htm.3.dr	false	Avira URL Cloud: safe	unknown
https://toronto.ctvnews.ca/ontario-logs-more-than-1-500-new-covid-19-cases-for-second-straight-day-1	YNTWJAH3.htm.3.dr	false		high
https://static.ctvnews.ca/bellmedia/common/js/videoNavigation.js	coronavirus-player-7[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.5314530.1615970210	coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	false		high
https://winnipeg.ctvnews.ca/step-in-the-right-direction-centennial-concert-hall-encouraged-by-prospe	YNTWJAH3.htm.3.dr	false		high
https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTVSans-Black.otf?s=2_7104	coronavirus[1].htm.3.dr	false		high
https://www.ctvnews.ca/health/coronavirus/zoos-scientists-aim-to-curb-people-giving-virus-to-animals	canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr, ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	false		high
https://www.bellmedia.ca/bell-media-website-terms-conditions/	coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
https://toronto.ctvnews.ca/things-to-know-t-o/hit-the-slopes-before-the-snow-is-gone-1.5334963	YNTWJAH3.htm.3.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.2302970.1611241953	YNTWJAH3.htm.3.dr	false		high
https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/Flama-Medium.eot?#iefix&s=2_620	sean-davidson-1[1].htm.3.dr	false		high
https://d.agkn.com/iframe/8613/?che=720919169&gdpr=&gdpr_consent=&ref=&bpid=bellmedia&c=%7B%22bpid%2	~DF0CE78D99C11524C3.TMP.1.dr	false		high
https://instagram.com/ctvtorontob	~DF0CE78D99C11524C3.TMP.1.dr	false		high
https://github.com/krux/prescribe/	clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	false		high
https://www.ctvnews.ca/health/coronavirus/st-patrick-s-day-revellers-appear-to-be-heeding-covid-advi	YNTWJAH3.htm.3.dr	false		high
https://sizzlejs.com/	clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js.3.dr	false		high
https://toronto.ctvnews.ca/video?clipId=2163198	YNTWJAH3.htm.3.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.5188187.1611601474	ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
https://northernontario.ctvnews.ca/northeastern-ontario-marks-global-recycling-day-with-trash-tips-1	YNTWJAH3.htm.3.dr	false		high
https://instagram.com/ctvtoronto	~DF0CE78D99C11524C3.TMP.1.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Black.woff?s=2_620	ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
https://knlive.ctvnews.ca/polopoly_fs/7.454763	news-7[1].css.3.dr	false		high
http://www.huddletogether.com/projects/lightbox2/)	jquery.lightbox-0.4.min[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.ctvnews.ca/polopoly_fs/1.5352826.1616094186	coronavirus-player-7[1].htm.3.dr	false		high
http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_lt-blue.jpg	ontario2014-7[1].css0.3.dr	false	Avira URL Cloud: safe	unknown
https://www.ctvnews.ca/polopoly_fs/1.5353552.1616120929	YNTWJAH3.htm.3.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.5203984.1606322081	ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
https://toronto.ctvnews.ca/traffic	YNTWJAH3.htm.3.dr	false		high
https://toronto.ctvnews.ca/video?playlistId=1.5353262	YNTWJAH3.htm.3.dr	false		high
http://www.twitter.com/	msapplication.xml5.1.dr	false		high
https://static.ctvnews.ca/bellmedia/ctvnews/css/imageGallery.css	sean-davidson-1[1].htm.3.dr	false		high
http://saskatoon.ctvnews.ca/prince-albert	sean-davidson-1[1].htm.3.dr, YNTWJAH3.htm.3.dr	false		high
https://d.agkn.com/iframe/8613/?che=473609438&gdpr=&gdpr_consent=&ref=&bpid=bellmedia&c=%7B%22bpid%2	~DF0CE78D99C11524C3.TMP.1.dr	false		high
https://toronto.ctvnews.ca/video?playlistId=1.5351081	YNTWJAH3.htm.3.dr	false		high
https://tru.am/scripts/custom/ctvnews.js	sean-davidson-1[1].htm.3.dr, coronavirus[1].htm.3.dr	false	Avira URL Cloud: safe	unknown
https://www.ctvnews.ca/health/coronavirus/covid-19-in-the-u-s-how-do-canada-s-provinces-rank-against	coronavirus[1].htm.3.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.5345551.1615592013	YNTWJAH3.htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
https://twitter.com/SeanDavidson_os/sean-davidson-1.4670847	~DF0CE78D99C11524C3.TMP.1.dr	false		high
https://platform.twitter.com/widgets.js	canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
http://bdugraphics.bellmedia.ca/bellaliant_northerntel.png	init[1].js.3.dr	false		high
https://www.ctvnews.ca/health/coronavirus/woman-95-totally-incapacitated-after-receiving-3-doses-of-	coronavirus[1].htm.3.dr, canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.5271121.1610994383	coronavirus[1].htm.3.dr	false		high
https://static.ctvnews.ca/bellmedia/common/css/plugins/slick.css	coronavirus[1].htm.3.dr, ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
https://calgary.ctvnews.ca/lethbridge	YNTWJAH3.htm.3.dr	false		high
http://www.ctv.ca/rss/	ctvnews-ca-covid-all-news-tag-driven-1[1].xml.3.dr	false		high
https://edmonton.ctvnews.ca/mcdavid-scores-twice-edmonton-oilers-edge-winnipeg-jets-2-1-1.5353615	YNTWJAH3.htm.3.dr	false		high
https://www.ctvnews.ca/politics/feds-extending-canada-recovery-benefit-eligibility-by-12-weeks-1.531	canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	false		high
https://www.bnnbloomberg.ca/want-a-happier-workforce-provide-better-benefits-1.1529528	289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.ctvnews.ca/entertainment/so-much-money-was-sent-to-our-dope-man-honey-boo-boo-s-mom-spen	YNTWJAH3.htm.3.dr	false		high
https://toronto.ctvnews.ca/don-t-get-this-wrong-statistician-says-no-doubt-third-wave-has-started-in	ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
http://bdugraphics.bellmedia.ca/rogers.png	init[1].js.3.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.4894117.1586801889	canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	false		high
https://london.ctvnews.ca/	YNTWJAH3.htm.3.dr	false		high
https://www.ctv.ca/about	sean-davidson-1[1].htm.3.dr	false		high
https://twitter.com/share/more/bios/sean-davidson-1.4670847?contactForm=true	~DF0CE78D99C11524C3.TMP.1.dr	false		high
https://ottawa.ctvnews.ca/sports-teams-prepare-for-new-game-plan-as-ottawa-moves-into-red-zone-1.535	YNTWJAH3.htm.3.dr	false		high
https://toronto.ctvnews.ca/rss/ctv-news-toronto-featured-1.3981340	sean-davidson-1[1].htm.3.dr	false		high
https://www.ctvnews.ca/sci-tech/nasa-completes-engine-test-firing-of-moon-rocket-on-2nd-try-1.535339	YNTWJAH3.htm.3.dr	false		high
https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Black.woff?s=2_7104	coronavirus[1].htm.3.dr	false		high
http://barrie.ctvnews.ca/	YNTWJAH3.htm.3.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.4859921.1584637596	YNTWJAH3.htm.3.dr	false		high
http://www.wikipedia.com/	msapplication.xml6.1.dr	false	URL Reputation: safe URL Reputation: safe URL Reputation: safe	unknown
https://www.ctvnews.ca/video?playlistId=1.5352369	canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm.3.dr	false		high
https://www.ctvnews.ca/polopoly_fs/1.5211981.1606843675	ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm.3.dr	false		high
http://www.ctvnews.ca/polopoly_fs/7.663868	banner-temp-7[1].css.3.dr	false		high
https://www.bnnbloomberg.ca/partners-in-performance-one-on-one-with-phil-taller-1.1510005	289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js.3.dr	false	Avira URL Cloud: safe	unknown

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
178.250.0.157	gum.par.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
34.246.207.243	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
185.33.221.52	unknown	Netherlands	29990	ASN-APPNEXUS	false
185.33.221.14	ib.anycast.adnxs.com	Netherlands	29990	ASN-APPNEXUS	false
104.26.3.116	tru.am	United States	13335	CLOUDFLARENETUS	false
99.86.162.13	d1ykf07e75w7ss.cloudfront.net	United States	16509	AMAZON-02US	false
52.50.156.162	match-1943069928.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.132.239.61	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.195.23.91	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
216.58.215.226	www.googletagservices.com	United States	15169	GOOGLEUS	false
3.126.239.96	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
18.206.143.246	ping.chartbeat.net	United States	14618	AMAZON-AESUS	false
185.60.216.35	star-mini.c10r.facebook.com	Ireland	32934	FACEBOOKUS	false
18.156.0.31	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud	United States	16509	AMAZON-02US	false
142.250.185.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
35.244.174.68	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
192.229.233.25	cs491.wac.edgecastcdn.net	United States	15133	EDGECASTUS	false
52.50.244.146	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
54.78.254.47	load-euw1.exelator.com	United States	16509	AMAZON-02US	false
99.86.163.177	d3f7zc5bbfci5.cloudfront.net	United States	16509	AMAZON-02US	false
151.101.1.194	confiant-integrations.global.ssl.fastly.net	United States	54113	FASTLYUS	false
34.248.172.235	unknown	United States	16509	AMAZON-02US	false
52.73.84.222	mabping.chartbeat.net	United States	14618	AMAZON-AESUS	false
104.19.149.54	cdn.permutive.com	United States	13335	CLOUDFLARENETUS	false
178.250.2.130	static.am5.vip.prod.criteo.net	France	44788	ASN-CRITEO-EUROPEFR	false
178.250.2.131	bidder.am5.vip.prod.criteo.com	France	44788	ASN-CRITEO-EUROPEFR	false
34.120.133.55	api.rlcdn.com	United States	15169	GOOGLEUS	false
52.28.203.152	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud	United States	16509	AMAZON-02US	false
13.226.169.83	s.ad.smaato.net	United States	16509	AMAZON-02US	false
13.226.169.41	d10jk3zb4x05up.cloudfront.net	United States	16509	AMAZON-02US	false
54.72.67.237	unknown	United States	16509	AMAZON-02US	false
34.234.127.242	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
185.60.216.19	scontent.xx.fbcdn.net	Ireland	32934	FACEBOOKUS	false
52.95.116.38	aax-eu.amazon-adsystem.com	United States	16509	AMAZON-02US	false
99.86.159.26	d1n0xl2kej0ebw.cloudfront.net	United States	16509	AMAZON-02US	false
34.205.120.60	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false

Private

IP
192.168.2.1

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	371828
Start date:	19.03.2021
Start time:	08:00:56
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 6m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784
Analysis system description:	Windows 10 64 bit v1803 with Office Professional Plus 2016, Chrome 85, IE 11, Adobe Reader DC 19, Java 8 Update 211
Number of analysed new started processes analysed:	18
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@3/604@70/37
Cookbook Comments:	Adjust boot time Enable AMSI Browsing link: https://toronto.ctvnews.ca/ Browsing link: http://facebook.com/ctvtoronto Browsing link: https://twitter.com/ctvtoronto Browsing link: https://instagram.com/ctvtoronto Browsing link: https://toronto.ctvnews.ca/more/bios/sean-davidson-1.4670847 Browsing link: https://twitter.com/SeanDavidson_ Browsing link: https://toronto.ctvnews.ca/more/bios/sean-davidson-1.4670847?contactForm=true Browsing link: https://twitter.com/share Browsing link: https://reddit.com/submit?url=https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784&title=Ontario slashes gathering sizes for entire province as alarm bells ring over COVID-19 spike Browsing link: https://www.ctvnews.ca/health/coronavirus Browsing link: https://www.ctvnews.ca/health/coronavirus/coronavirus-vaccine-tracker-how-many-people-in-canada-have-received-shots-1.5247509
Warnings:	Show All Exclude process from analysis (whitelisted): taskhostw.exe, BackgroundTransferHost.exe, ielowutil.exe, backgroundTaskHost.exe, SgrmBroker.exe, svchost.exe Excluded IPs from analysis (whitelisted): 204.79.197.200, 13.107.21.200, 40.88.32.150, 93.184.220.29, 104.83.120.32, 88.221.226.164, 184.30.21.162, 184.30.20.241, 184.30.20.234, 151.101.2.133, 151.101.66.133, 151.101.130.133, 151.101.194.133, 184.30.21.104, 92.122.246.111, 2.20.84.44, 13.88.21.125, 172.217.168.2, 99.81.11.244, 34.255.166.243, 34.250.153.194, 34.253.145.149, 54.194.191.134, 54.171.42.33, 92.122.247.130, 104.83.115.55, 92.122.33.192, 172.217.168.66, 172.217.168.33, 172.217.168.1, 2.20.85.113, 184.30.20.56, 51.104.139.180, 23.201.243.202, 152.199.19.161, 2.20.142.210, 2.20.142.209, 52.147.198.201, 104.83.84.120, 172.217.168.68, 92.122.213.247, 92.122.213.194 Excluded domains from analysis (whitelisted): v.bellmedia.ca.edgekey.net, tags.bluekai.com.edgekey.net, cs9.wac.phicdn.net, arc.msn.com.nsatc.net, cn-assets.adobedtm.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net, e11290.dspg.akamaiedge.net, skypedataprdcoleus15.cloudapp.net, ocsp.digicert.com, www-bing-com.dual-a-0001.a-msedge.net, audownload.windowsupdate.nsatc.net, www.google.com, watson.telemetry.microsoft.com, au-bg-shim.trafficmanager.net, e17004.i.akamaiedge.net, www.bing.com, idp.securetve.com.edgekey.net, pagead-googlehosted.l.google.com, fs.microsoft.com, dual-a-0001.a-msedge.net, cm.everesttech.net.akadns.net, d.sni.global.fastly.net, pagead2.googlesyndication.com, beacon.scorecardresearch.com.edgekey.net, e8037.i.akamaiedge.net, js-sec.casalemedia.com.edgekey.net, ds-api-public.addthis.com.edgekey.net, blobcollector.events.data.trafficmanager.net, sb.scorecardresearch.com.edgekey.net, wac.apr-8315.edgecastdns.net, cs9.wpc.v0cdn.net, au.download.windowsupdate.com.edgesuite.net, e1879.e7.akamaiedge.net, wildcard.moatads.com.edgekey.net, e11364.g.akamaiedge.net, 6c5e656eacf1e454f2b74328abac76ba.safeframe.googlesyndication.com, 09e0895e5f1eff1d823107e70838d286.safeframe.googlesyndication.com, htlb.casalemedia.com.edgekey.net, adservice.google.com, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, a1449.dscg2.akamai.net, arc.msn.com, pixel.mathtag.com.edgekey.net, iecvlist.microsoft.com, e8736.e7.akamaiedge.net, go.microsoft.com, e8037.g.akamaiedge.net, img-prod-cms-rt-microsoft-com.akamaized.net, prod.fs.microsoft.com.akadns.net, e3615.a.akamaiedge.net, ds-s7.addthis.com.edgekey.net, e6791.b.akamaiedge.net, ie9comview.vo.msecnd.net, e1723.g.akamaiedge.net, ctldl.windowsupdate.com, e3082.x.akamaiedge.net, a767.dscg3.akamai.net, f1af80b315cdbb1665e79eb54aecc554.safeframe.googlesyndication.com, skypedataprdcoleus16.cloudapp.net, e13541.x.akamaiedge.net, a-0001.a-afdentry.net.trafficmanager.net, e7808.dscg.akamaiedge.net, as-sec.casalemedia.com.edgekey.net, tpc.googlesyndication.com, go.microsoft.com.edgekey.net, e13136.g.akamaiedge.net, ds-m.addthisedge.com.edgekey.net, ssum-sec.casalemedia.com.edgekey.net, news.bellmedia.ca.edgekey.net, skypedataprdcolwus15.cloudapp.net Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtOpenFile calls found. Report size getting too big, too many NtQueryAttributesFile calls found. Report size getting too big, too many NtReadFile calls found. Report size getting too big, too many NtSetValueKey calls found. Report size getting too big, too many NtWriteFile calls found.

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

No context

Domains

No context

ASN

No context

JA3 Fingerprints

No context

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\8P7RGF10\www.ctvnews[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	479006
Entropy (8bit):	5.437148154714501
Encrypted:	false
SSDEEP:	1536:k33+ooodv+aaaaaaa4aaaaaaavakaw3IVVfVOQA00pqvS7JJIJCJJJ7FPY+B++3B:sl
MD5:	7A2AF23155B217FDCA53C9D69EFA7830
SHA1:	964E9043DEFF7259FCA3027D8D1735DA0C30D7D7
SHA-256:	09DE558E082CA82D361DAEA62B81BFE31AAAEA200C2DE3E73D257CFA08FE266B
SHA-512:	027D7170249D69C4EDBFDA0E3522464FB15F07B3921AC65CBBFA3F56D33D0A3CEA127EC0C6B12154F6333C44BE663E2B1CCC9C2424D5C419834A44C5585A9139
Malicious:	false
Reputation:	low
Preview:	<root></root><root></root><root></root><root></root><root><item name="amzn_lsTest" value="amzn_lsTest" ltime="4063965728" htime="30874832" /></root><root></root><root><item name="amzn_lsTest" value="amzn_lsTest" ltime="4063965728" htime="30874832" /></root><root></root><root><item name="amzn_lsTest" value="amzn_lsTest" ltime="4063965728" htime="30874832" /></root><root></root><root><item name="amzn_lsTest" value="amzn_lsTest" ltime="4064115728" htime="30874832" /></root><root></root><root><item name="amzn_lsTest" value="amzn_lsTest" ltime="4064275728" htime="30874832" /></root><root></root><root><item name="amzn_lsTest" value="amzn_lsTest" ltime="4064435728" htime="30874832" /></root><root></root><root></root><root></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="4068405728" htime="30874832" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="4068405728" htime="30874832" /><item name="_cb_ls_test" value=

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\DURNCK2N\toronto.ctvnews[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	772063
Entropy (8bit):	5.3723765458755715
Encrypted:	false
SSDEEP:	6144:DGvvBvvvRvvvvv0vvFCuKPPK4KJKXKkKFKKK+KDKMKjKKF2Y3TTTTTTfFI2NNNNO:c
MD5:	214DDF80AA66345B736AC5B9C7D90DB8
SHA1:	64DD5A281E56986573E64D1E34289751DFD81471
SHA-256:	2A68B3ABAEF68362C8A665DC3413A04D810092C701C871701A5849BA6FE9B8A4
SHA-512:	0DB615B05BADC8A8512459466C0141F6D68191057816F2290A576E4421C699BC203BDA0B45BDB46498C4DB5BD1593865B3DE51363B92E1D86C2FE2CBA6DB806B
Malicious:	false
Reputation:	low
Preview:	<root></root><root></root><root><item name="test" value="test" ltime="3399315728" htime="30874832" /></root><root></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="3400245728" htime="30874832" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="3400245728" htime="30874832" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="3400245728" htime="30874832" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="3400245728" htime="30874832" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="3400245728" htime="30874832" /><item name="kxbellmedia_visits" value="1" ltime="3403215728" htime="30874832" /><item name="_kxbellmedia_visits" value="1616223600001" ltime="3403215728" htime="30874832" /></root><root><item name="com.adobe.reactor.dataElementCookiesMigrated" value="true" ltime="3400245728"

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\QALADACS\cdn.krxd[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	3226
Entropy (8bit):	5.074038882442619
Encrypted:	false
SSDEEP:	96:Te9QN/Qhe9QN/Qhe9QN/Qhe9QN/QhLQNrQhLQNrQEQhLQNrQhOQNrQhOQNeQhOQ5:aqqqAMs
MD5:	42DD0B0A9FBDA2AF8759E2BD2E16EC70
SHA1:	7928E2FCB174AC37D1F434196E8320BFD8BC7C7C
SHA-256:	D8E871A219543761FA2CAE7244F87DB5550B043EA00DB5702D46368A18E87CE6
SHA-512:	9B158CF51A4FD2BB6562A88044449E8B4008031A8215FDA46BCB7FC3B5E5586731258B33393DBD709F58976AA2C09FF64AEBF83BE31968AC665049364D7F8163
Malicious:	false
Reputation:	low
Preview:	<root></root><root></root><root></root><root><item name="kg" value="{"umr":"CoABF.gABAD"}" ltime="3421445728" htime="30874832" /><item name="_kg" value="1616223600118" ltime="3421445728" htime="30874832" /></root><root><item name="kg" value="{"umr":"CoABF.gABAD"}" ltime="3421445728" htime="30874832" /><item name="_kg" value="1616223600118" ltime="3421445728" htime="30874832" /></root><root><item name="kg" value="{"umr":"CoABF.gABAD"}" ltime="3421445728" htime="30874832" /><item name="_kg" value="1616223600118" ltime="3421445728" htime="30874832" /></root><root><item name="kg" value="{"umr":"CoABF.gABAD"}" ltime="3421445728" htime="30874832" /><item name="_kg" value="1616223600118" ltime="3421445728" htime="30874832" /></root><root><item name="kg" value="{"umr":"!CoABF.gABAD"}" ltime="3924425728" htime="30874832" /><item name="_kg" value="1616223600031" ltime="3924425728" htime="30874832"

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{055635E7-88C4-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	30296
Entropy (8bit):	1.851880571263792
Encrypted:	false
SSDEEP:	96:rzZ0Z32wWGtObfpOFKMGtq4nQOxfTOA6X:rzZ0Z32wWGtefp1MT9QfTMX
MD5:	71CB5D3D977D8013B7183514081D4EEB
SHA1:	AFCBE13150CCFB36F6BB3AC8E59405ABD6B5FD3C
SHA-256:	AC2792FAB4D4880854B236615DEF2B9DF6C96B952A45F334093A4D7D4BD8A923
SHA-512:	9632C79CA270EBB5F60A0EF865D279AF79DE1BDB71499DBFED720E48C53B679AF9EA0DB30C663DC328B0BCD68FF69B4A64B0ED19A69FF78C15589A6CF06F2EF5
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{055635E9-88C4-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	410518
Entropy (8bit):	3.291168535053102
Encrypted:	false
SSDEEP:	1536:/fBxfB1nXD0kHSBtS09ye8AT1IMRAThenkVc3kVVfgphuXxoMzGf6mj8bKV0qiib:fnXD0kekV0kVloMziZrxSsuxO0C
MD5:	140E6AF98D42835C4763F89F3DB2894D
SHA1:	94BDFE96F5B18E6AF039C79834961BA0478B39ED
SHA-256:	8DCABBF85344D2B0008EF911DDD42747B6481906BA24518E86246B1525C3F968
SHA-512:	FC956215B1C2F6734EE8EF03919167FC360F8443E08ECA77359B917D1EF3AFFACCAD6F5A13588565526CD08C1869622E951354B1590697950206FDEBD18739F1
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{0E479007-88C4-11EB-90E5-ECF4BB570DC9}.dat Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5656291944139415
Encrypted:	false
SSDEEP:	48:Iw6GcprNGwpavG4pQNGrapbStGQpK6HG7HpRJwTGIpG:r+ZXQh6tBSXA6mTJkA
MD5:	3B28A200EAB42CAFF97F293B1C707D47
SHA1:	1E7C288A506E331421627727CEE15C7821537174
SHA-256:	64A6AF2D505280CBA7A05D5E453CF2BD1AD0AA218D7B094C9BD5A796F2882618
SHA-512:	F8011CCA4D1C6990B4F8170CD0FD88392CF5C40C937612D41C3DEC43782CA5AEDFCDDF31FC02F1FCD84E0DD38C140C4D69CE2CDB7BCF76B624BADAA03DB5E9C4
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-17529550060\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	657
Entropy (8bit):	5.051634867689964
Encrypted:	false
SSDEEP:	12:TMHdNMNxOEps6s2nWimI002EtM3MHdNMNxOEps6s2nWimI00ONVbkEtMb:2d6NxOaRzSZHKd6NxOaRzSZ7Qb
MD5:	D84EB4BD6E8153CDC853CA501133E53D
SHA1:	48B418E2D6AC5E2CA6E32B20A169FE8A832A97C4
SHA-256:	4B06C6AAD4A67EA7867C3D9B87DB8354764E7043FEE61129B6B8BD66EC76DC34
SHA-512:	F03BF600658A0ED7A60BE8BCC8538AB9ABD31B33368C1E7722FF2D06326595CE1C64ADF8710A5FC3AB4ED37FF301322CE60F49F787F80CEA143B67CC21FCBA9A
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xdf6054eb,0x01d71cd0</date><accdate>0xdf6054eb,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.twitter.com/"/><date>0xdf6054eb,0x01d71cd0</date><accdate>0xdf6054eb,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Twitter.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-18270793970\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.065687816225322
Encrypted:	false
SSDEEP:	12:TMHdNMNxe2kv7vnWimI002EtM3MHdNMNxe2kv7vnWimI00ONkak6EtMb:2d6NxriSZHKd6NxriSZ72a7b
MD5:	90A7C07BF75B804789CF7EF080B3B7D8
SHA1:	04A5B97617E8960E7575D49F2AC069A3EF2F7FAD
SHA-256:	60071803C667576BA44E6B6F82DD397F624135E5635208592799A4C79B711E89
SHA-512:	A4D4BF775B260BDF8B42C87858D79352C0193D8C4B9F373461AB8A5C913279D0E1554C405DC77A32DA7929DFD9B6D4758019770F964C5D0682F792EF70F42F97
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.amazon.com/"/><date>0xdf592dea,0x01d71cd0</date><accdate>0xdf592dea,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.amazon.com/"/><date>0xdf592dea,0x01d71cd0</date><accdate>0xdf592dea,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Amazon.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-21706820\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	663
Entropy (8bit):	5.069633014409396
Encrypted:	false
SSDEEP:	12:TMHdNMNxvLps6s2nWimI002EtM3MHdNMNxvLps6s2nWimI00ONmZEtMb:2d6Nxv1RzSZHKd6Nxv1RzSZ7Ub
MD5:	451DBE2AD29832DF50407227ACB1342D
SHA1:	E021BBE27B95759154274EE01345264FB86C5342
SHA-256:	7CBEAC00B1C382A1C9815240917352DE592AD6C81578E36E6C26312D37E6AE9D
SHA-512:	6DCE7F53DB98D942E8B6F5AF8C9048D170427023B7D637C6DFD47DCB796D6A1823040F2DE4543BE9D87D7B8CD608A9A539B7AFFD0A6F51BAAECBD68712842A66
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.wikipedia.com/"/><date>0xdf6054eb,0x01d71cd0</date><accdate>0xdf6054eb,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.wikipedia.com/"/><date>0xdf6054eb,0x01d71cd0</date><accdate>0xdf6054eb,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Wikipedia.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-4759708130\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	648
Entropy (8bit):	5.058129966844225
Encrypted:	false
SSDEEP:	12:TMHdNMNxiv+3i+38nWimI002EtM3MHdNMNxiv+3i+38nWimI00ONd5EtMb:2d6NxESZHKd6NxESZ7njb
MD5:	69234EC0B960A1CDA67CE49F0C14FBFF
SHA1:	57F864653448C9A0D4A01C677954EA3038A3B5AC
SHA-256:	3CC2FC50FA4B491741BAC986F6FA533AAD0156010B36C55689BE2ADD1594048E
SHA-512:	FE5618FB6A37CA4D321703825ABAD66E10FD7AC2084F6523480DADA136E4DAFCAEB9B8B1F264C0B2EBD38CF70E9B2B4832F6B9272C86201BFB5DE981FBE0C2B6
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.live.com/"/><date>0xdf5df26e,0x01d71cd0</date><accdate>0xdf5df26e,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.live.com/"/><date>0xdf5df26e,0x01d71cd0</date><accdate>0xdf5df26e,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Live.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-6757900\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	657
Entropy (8bit):	5.099548173676888
Encrypted:	false
SSDEEP:	12:TMHdNMNxhGwpnWimI002EtM3MHdNMNxhGwnsnWimI00ON8K075EtMb:2d6NxQASZHKd6NxQSsSZ7uKajb
MD5:	417CD5B94A805AD242E1BAE0476BE8A8
SHA1:	3D6864053BD45D03B95260B0B0959BCCE6E2F088
SHA-256:	FCE94234FFB6605EC72DC09FC504C9AEC28999750F045FA3C182C5918AE5077C
SHA-512:	D02388C5B73082BEC77FB07E8D5A7CD1EC55955F3307ADA9445BFC066F97205B9188A4A625B983772D2CB449731B9B6908E3D88880F5CD6060C3EF1D29330288
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xdf651999,0x01d71cd0</date><accdate>0xdf651999,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.youtube.com/"/><date>0xdf651999,0x01d71cd0</date><accdate>0xdf677bf0,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Youtube.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin-8760897390\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.050508141685959
Encrypted:	false
SSDEEP:	12:TMHdNMNx0nps6s2nWimI002EtM3MHdNMNx0nps6s2nWimI00ONxEtMb:2d6Nx0pRzSZHKd6Nx0pRzSZ7Vb
MD5:	4E0706BA95BECD99EC99DFFC41E388AD
SHA1:	FC754458485276170AC405F1B8AC1CA7C45ABDC4
SHA-256:	33968046B9AA7D2BBE6235082B65E9AE7C5754CD1A5F9F41403D954B287865C1
SHA-512:	927080B2B77AFF0FF89C20A1C8078E19DD4FFAF9106B4D3416657F74D85F9B300E3A219FC360130C650322EBF643FF83ED6B2B3D6F3A8EDA7D0C03AD3C2B392D
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.reddit.com/"/><date>0xdf6054eb,0x01d71cd0</date><accdate>0xdf6054eb,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.reddit.com/"/><date>0xdf6054eb,0x01d71cd0</date><accdate>0xdf6054eb,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Reddit.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20259167780\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	657
Entropy (8bit):	5.0832366367542505
Encrypted:	false
SSDEEP:	12:TMHdNMNxxv+3i+38nWimI002EtM3MHdNMNxxv+3i+38nWimI00ON6Kq5EtMb:2d6NxZSZHKd6NxZSZ7ub
MD5:	62795A0AF816E6D719EEC6D48552E2EC
SHA1:	01E24D8E0031D43F11551A97B40FBEB4EA8FB79C
SHA-256:	E07E2BCFE05CC94DF35B7757E989B76FE736B14C6D973CC871067F66520DCC27
SHA-512:	35BE6309CC83C639FA5162CBF0E4EDE12B3FD3FC12110A701D06D9FB1859A22EA2BD6F5A549A41B8B2BD37E0CA1E24B1462F4E46C30A0BF2A947C7AB67200A23
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.nytimes.com/"/><date>0xdf5df26e,0x01d71cd0</date><accdate>0xdf5df26e,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.nytimes.com/"/><date>0xdf5df26e,0x01d71cd0</date><accdate>0xdf5df26e,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\NYTimes.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin20332743330\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	660
Entropy (8bit):	5.066789154335156
Encrypted:	false
SSDEEP:	12:TMHdNMNxcv8w8KnWimI002EtM3MHdNMNxcv8w8KnWimI00ONVEtMb:2d6Nx+SZHKd6Nx+SZ71b
MD5:	6233BDC294A3740626263DD77571A671
SHA1:	4733129C96C7759ABD4397A802C60E52D8AD7076
SHA-256:	82DFA684C1F84AFCDF0E493D6F979E3441C97E112C6C9FCE6508152FA308A594
SHA-512:	FCD6EDBEF62AAD546D68F8AD8B4BF96D4C6931EC1EED3C9F17A7DE23DD238E57A8C4093AA44D5E0FC2849B6AF9FAEA63F9CDB95334ABD35EAD4426EAD2547920
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xdf5b9020,0x01d71cd0</date><accdate>0xdf5b9020,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.facebook.com/"/><date>0xdf5b9020,0x01d71cd0</date><accdate>0xdf5b9020,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Facebook.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Tiles\pin8215062560\msapplication.xml Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines, with CRLF line terminators
Category:	dropped
Size (bytes):	654
Entropy (8bit):	5.056170406285855
Encrypted:	false
SSDEEP:	12:TMHdNMNxfnv8w8KnWimI002EtM3MHdNMNxfnv8w+38nWimI00ONe5EtMb:2d6NxzSZHKd6NxbSZ7Ejb
MD5:	829E1739E72D1F658426196544933F71
SHA1:	36A093E99E1AA38CA1D5EBB2E01DB8DF3EC1C923
SHA-256:	3C2AD0F4AA6FFCA02CFF7EC1A1958363067B253880709E5F50FB588C538EB8CB
SHA-512:	0101595686AF588EC0C49204245A0D7985D671E3FAF0B9B20E116934AE5ACA769B79D5227F3584233F954C0D555112C7046219E5FD08D5C6B5BC6E1DE5952A98
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.google.com/"/><date>0xdf5b9020,0x01d71cd0</date><accdate>0xdf5b9020,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/></tile></msapplication></browserconfig>..<?xml version="1.0" encoding="utf-8"?>..<browserconfig><msapplication><config><site src="http://www.google.com/"/><date>0xdf5b9020,0x01d71cd0</date><accdate>0xdf5df26e,0x01d71cd0</accdate></config><tile><wide310x150logo/><square310x310logo/><square70x70logo/><favorite src="C:\Users\user\Favorites\Google.url"/></tile></msapplication></browserconfig>..

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\dikxvqf\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	23542
Entropy (8bit):	3.726919449689862
Encrypted:	false
SSDEEP:	192:FnljT+e/Xi5TidN5CynqaiHSclL5BgjwmPJM5ij3S:FdSUCgNMSscOij3S
MD5:	D8F76C1A024C1572CA5B650980B818BC
SHA1:	B9F848FD548675D30A4DF406B687A7A0B0229136
SHA-256:	A679380606EEF53D078C7D58BAD3FD686D84747EB2DB0601CE366B51FCBBF76E
SHA-512:	650443F7FA96094E4F507B1457A46495CCC5B0EB80F58BCF1D5EB62A1E457DBEACDBFEB0646AD1A415A536F85C8358BDD832CFE58AE5561271D926C708E9BF96
Malicious:	false
Reputation:	low
Preview:	:.h.t.t.p.s.:././.s.t.a.t.i.c...c.t.v.n.e.w.s...c.a./.b.e.l.l.m.e.d.i.a./.c.o.m.m.o.n./.i.m.g./.f.a.v.i.c.o.n...i.c.o...........00..............(...0...`.................................h...K.........._2.wQ ..f...}Y..i......uO..n.o.}Y+.......I.B.C.gp....9..................&..........mE....w....\|.}.?K..jA...........,..........e.f..........................!...............X...p................IP.....................lB...........z.......xR.....py...\..#.$.......].........ag..S]..U.V..d9...j..q........u...........qJ.....'3..........{V(..............f=..............................-...\f........~.......y.....e:...........L.................sK......l..1<........e.......m.........................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\10119832207439991432[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 300 x 250, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	46059
Entropy (8bit):	7.993590288073149
Encrypted:	true
SSDEEP:	768:jLb/yucivXjEqSeuyGrJ38jmF5x0SwyC6HdTvSVUNjWiwh1ivlEaTztQCXdPMMa4:jhlXjUzJUs5WU+UsiflEOJjXd0MaKByy
MD5:	A7EECC97A20D6544BCE69BB4FBF62C8A
SHA1:	90AA6ACD1DE0A0DE2EBA99E19A723B5EEF0A763E
SHA-256:	397478DF145968E9464C9699328193D38861B2EF02BF7DA8571E67CC4AAFD292
SHA-512:	37A2957163E60CF5416882DCC04D7283239861447C3646B7AF38F39F58F656D3743AD1223BA2911DFB3E6CAEC8959860A68E4587B07C62E99168ECFF02CDC283
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/simgad/10119832207439991432?sqp=4sqPyQQrQikqJwhfEAEdAAC0QiABKAEwCTgDQPCTCUgAUAFYAWBfcAJ4AcUBLbKdPg&rs=AOga4qkiYvHauCWIYgtQLVsiAb1F__i2SQ
Preview:	.PNG........IHDR...,.........,.......PLTE..........",....)5..#..^...........f.........0#)$ '........ ....$.........."6D.1@......~ut......&1$...#(.B.2+2=4AN:(-.)#.........505...........* 0<,:G.{}++2zok.........=6;J58<@).}sd]`hg.26@;HUACL....+;......+.....7=FLHH...LT/posAI$TLO..~3:..$4(@O......ZUXGH5rik...1;+..z.../0((&kz~?GKT.HYgekA>Bpcc.wg[e1%+8<Q`...Y[?......di=U\(..K...vx.WO7...&,......A?x`LI...M<AE'(sZX...MR[..B...xw.mu?...M.....]lx....MJYdM`ofQUYAB....nke^5VT.......XZcwi\..I.\|v..eNt..=OnbD\bl..Wet.wpHd]R..u....{.gc.4HX86iq/....vU...;\o...:...._".....Z.....v...~L....:Ji\|..q`}.qOI..t...i@@KR......u........jjQ..Q..Ei..t\|Run6..?..W}...]W...0f~....f..=(Si..m.....+......X..v.%.qf......g.....fh..PH....}b...eZy..;......].Lk........................n....!.....z.1..u.@ZZ...c... ....c....p.`.. .IDATx..{T.i...qX.zT.1Q!B.....4..A.DI. .Db.....3.OK.sj.y...13k..Vv>M.i....N3S3.<....k.....K3........Wr.+(......{]....3.#.......!.......B4C..ZU"..1.je..D..t..E..X.....tM...6.65.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\7[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	downloaded
Size (bytes):	18312
Entropy (8bit):	5.002564209209442
Encrypted:	false
SSDEEP:	384:mu76L4zwtxQZEkQPipPTobOiofGizIyGzptANBA2ibVlG/qbrTKWRxr5PLJ5Fmmc:SEzwt3KpXLzXGz3Afhiba/qbrTKWRxrk
MD5:	A783CF0641D779C6B29B6B08DDE6523F
SHA1:	0746BA95B52ADB6FB13F4F37C0C42B0C531D82B7
SHA-256:	EBC31FA0CD89D303EFE10DCA2FC601BD1B05F57B03AF59C31354FCE5C058FC7B
SHA-512:	7B29E6EE1A73B032791BC48ED4F2C8155819946F4B3F17676DC1F7589C0CABF04C23FF4136D71536F10DBE5AFDEE4055F3423288C54541DD7233214080AA9A44
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/7.733165
Preview:	window.addEventListener('load', function () {.. if (document.getElementById("fullChart")) {.. document.getElementById("fullChart").classList.add('all-loaded');.. getData();.. addAnimation();.. responsive();.... //to resize on window resize (not just load):.. window.addEventListener("resize", () => {.. drawChart(nanosJSON);.. });.. }..});....function round(value, precision) {.. var multiplier = Math.pow(10, precision \|\| 0);.. return (Math.round(value * multiplier) / multiplier).toFixed(precision);..}....// excel puts date as number (eg "43637") -- function converts to real date..function getJsDateFromExcel(excelDate) {.. const fullDate = new Date((excelDate - (25567 + 1))864001000);.. return `${fullDate.getMonth() + 1}/${fullDate.getDate()}/${fullDate.getFullYear()}`;..}....async function getData() {.. fullChart = document.getElementById("fullChart");.. cW = fullChart.offsetWidth;.. .. content =

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\7[3].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	15228
Entropy (8bit):	4.973096430605247
Encrypted:	false
SSDEEP:	384:mu76L4zwtxQZEkQPipPTobOiofGizIyGzptANBA2ibVV:SEzwt3KpXLzXGz3AfhibX
MD5:	FA3CC7EF4D99E7A72DE9900BB7AF2A38
SHA1:	A0E4B2702CCDB3C1E539599F0BBE8F8720B3D01B
SHA-256:	92F8CE1B786471494DEEAA4DAAD84B67730B9B46424670D6A48C73953712E65E
SHA-512:	06A6B5063953E7B2BCFE87D58B33006FB5BEC4AD93494B37BAC5AE3DF62F236B6A1923ED9DDDF34CC89FC144EB59A3A2A87F45AF2D779C7A87ABAD2669240D9A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/7.733220
Preview:	window.addEventListener('load', function () {.. if (document.getElementById("fullChart")) {.. document.getElementById("fullChart").classList.add('all-loaded');.. getData();.. addAnimation();.. responsive();.... //to resize on window resize (not just load):.. window.addEventListener("resize", () => {.. drawChart(nanosJSON);.. });.. }..});....function round(value, precision) {.. var multiplier = Math.pow(10, precision \|\| 0);.. return (Math.round(value * multiplier) / multiplier).toFixed(precision);..}....// excel puts date as number (eg "43637") -- function converts to real date..function getJsDateFromExcel(excelDate) {.. const fullDate = new Date((excelDate - (25567 + 1))864001000);.. return `${fullDate.getMonth() + 1}/${fullDate.getDate()}/${fullDate.getFullYear()}`;..}....async function getData() {.. fullChart = document.getElementById("fullChart");.. cW = fullChart.offsetWidth;.. .. content =

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\8613[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	481
Entropy (8bit):	5.326269622167282
Encrypted:	false
SSDEEP:	12:BMQtJOo9vt2xsK+zT5njluMG0RGXA5njluMG0RGaEQb:WC/tJPT5hrR4A5hrR3
MD5:	CEAF86943B63ADB58ABBF297FDE73C8B
SHA1:	2D15CE63D394948DB2CF990DC704A9C50F80F9E4
SHA-256:	33028B306202787AF41768DACB7FBC2B20A84F3A1F026CC0893D177AF270FCCD
SHA-512:	F2C3D39F2978BAD6D410E7BF554BA34260AA65D25D8C136ED831534493DFDFF2D718F91EFB5BD25F83BAF3D286E0C130608DEFC5AA13101149CA4EDC6C40D509
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">.<html>.<head>.<meta http-equiv="pragma" content="no-cache">.</head>.<body style="border: 0; margin: 0; padding: 0;">.<img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293468&gdpr=&gdpr_consent="/><img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293438"/></body>.</html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\8613[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	481
Entropy (8bit):	5.326269622167282
Encrypted:	false
SSDEEP:	12:BMQtJOo9vt2xsK+zT5njluMG0RGXA5njluMG0RGaEQb:WC/tJPT5hrR4A5hrR3
MD5:	CEAF86943B63ADB58ABBF297FDE73C8B
SHA1:	2D15CE63D394948DB2CF990DC704A9C50F80F9E4
SHA-256:	33028B306202787AF41768DACB7FBC2B20A84F3A1F026CC0893D177AF270FCCD
SHA-512:	F2C3D39F2978BAD6D410E7BF554BA34260AA65D25D8C136ED831534493DFDFF2D718F91EFB5BD25F83BAF3D286E0C130608DEFC5AA13101149CA4EDC6C40D509
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">.<html>.<head>.<meta http-equiv="pragma" content="no-cache">.</head>.<body style="border: 0; margin: 0; padding: 0;">.<img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293468&gdpr=&gdpr_consent="/><img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293438"/></body>.</html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\CTV_Sans-Bold[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 32484, version 1.0
Category:	downloaded
Size (bytes):	32484
Entropy (8bit):	7.9883372002968205
Encrypted:	false
SSDEEP:	768:zQEKnXcIUWehIv3lgVr6UvBk3mTcX+/Mw2wIqMLBsgN:zDKnMIpehAGVemk3Qp4RqMNs4
MD5:	58DD5C0AE2B1532719C90F7F01FCB69D
SHA1:	0142B2E65BE9A9F505092D41898C0FF144EDFBEC
SHA-256:	88228D1013379DD731C30515D51921007B9DE9DDBAC887139196D32CDAC5885F
SHA-512:	956FE9545D3BF810E1CFDBB7FADA6E94C7F5864158808B5EF61DE12E50C8BE4D4DC266E729AD33AE6AF01C6142FBA58DCC85475036337D5ED722CA114772CD2D
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Bold.woff?s=2_620
Preview:	wOFF......~........0......}........$........DSIG..}.............GPOS.......1..>...3GSUB...............9OS/2.......P...`}.-.cmap.......P....\|n..cvt ..wH...0...<.X..fpgm..wx........?...gasp..w@............glyf...,..O.........head..h....4...6..0.hhea..i....!...$....hmtx..i4.......T.p<;loca..l,...,...,.NB3maxp..oX... ... ....name..ox.........._.post..r....<......>prep..}<.........P..x..[}.T...~.{....x.......pG`ET<..!.1ZV%..b..A.....M%....h"~@..\b.t....T.5[I.......8..Gd...'..7..wp..d.f..y3==.....GLD6M.yd.k.t../_v.4.\|('.H?..3Y7\|c.T.}..%....".f.~..+..Np..b...Za..j..........%..t..lZ\uS6..X.S...U.....\|S.=..v.CMsM..~.S..\|..v.......S.........W.....V......n........S..`8.8x{......`<.n.p....1.QTK.0.!..R..`.F...H.....&ZB+i.}.i..4..D..O..'h3...E.}..Rz.\..v!}..h/-...b...Kt.i.Wq.].#x.}...3...i.....u..Q.........R....W.r...o.Z~.n......E.....C~.O6#.D..uM+U'..A...r.J.l..i=F8.....z..$L.0..4....7.......g.w.y9.V..Y.g.....Y2.I..g.^.......C.aH...0O2\|L..V...n.tm...u.c.~.....[.J..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\CTV_Sans-Regular[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 30054, version 1.0
Category:	downloaded
Size (bytes):	30054
Entropy (8bit):	7.986027140196057
Encrypted:	false
SSDEEP:	768:Nkl0AEdkewFzr83EPA7Puq44v5taTXK9BsYT:SlhEdkhG3dF5twK3se
MD5:	3F1B3D1D2D5DD5EA84B2D3C82F96001F
SHA1:	DA9F1327657514AC42FA52FE9FD15DC3933C8E70
SHA-256:	DA8A750BF8038CB671A01C4178FADC10EB5157EFED64F44061979D008725D09C
SHA-512:	AA903F60F16CEA42DDEF6AE6BA73E6191F1719F6870724E2C14CC9C09B6F5E452F3C8B1CEE370CDDD9811B340BFD0104265FE369B32682F59A95EB3A1C856473
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Regular.woff?s=2_620
Preview:	wOFF......uf..............tH.......'........DSIG..t@............GPOS..........;.6.\|.GSUB...............9OS/2.......Q...`{...cmap...<...S.....v..cvt ..m....0...<...!fpgm..m.........?...gasp..m.............glyf......H.......#.head.._....4...6..11hhea.._....!...$....hmtx..`........T..<.loca..b....,...,....maxp..e.... ... ....name..e............post..h....<......>prep..s..........P..x..[kl...>g....<..y....l...&a.#1&iCJHJ.7R.M..R....?..p.P.M..q...!.RS)+.e......G&.L.M%..P.U..N.{fv<..5.x..^...{.=...{..b".h..S......n.....t...l....k..c....oT......".j.~e...~.......8._.c.c!..B.Rv.,.B)...](.p.-ua3..P..)..W.....+..TE&F.#...g#.P."r2bE..m.................9......:....x*~&~1.o.n.fR.M.\|f.T.R.jZN+ ..(ut'J=.O..x....z.e)..e....h.6.KI:...>!...Y...<...Ci.K(......s-m.Y<...fn....W.7x.'.A....[.M...~......m.w.P.^..s......7...._...v...9.....mv..N...}t.L:...S.N.9nF..h....5....=......kh.8.c..,$...z.W{...[.zM...u.3.........t.A.$.........}`..Cp.G..........:Zh4AF.ko....?.q..S..,8.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ErrorPageTemplate[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2168
Entropy (8bit):	5.207912016937144
Encrypted:	false
SSDEEP:	24:5+j5xU5k5N0ndgvoyeP0yyiyQCDr3nowMVworDtX3orKxWxDnCMA0da+hieyuSQK:5Q5K5k5pvFehWrrarrZIrHd3FIQfOS6
MD5:	F4FE1CB77E758E1BA56B8A8EC20417C5
SHA1:	F4EDA06901EDB98633A686B11D02F4925F827BF0
SHA-256:	8D018639281B33DA8EB3CE0B21D11E1D414E59024C3689F92BE8904EB5779B5F
SHA-512:	62514AB345B6648C5442200A8E9530DFB88A0355E262069E0A694289C39A4A1C06C6143E5961074BFAC219949102A416C09733F24E8468984B96843DC222B436
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/ErrorPageTemplate.css
Preview:	.body..{...font-family: "Segoe UI", "verdana", "arial";...background-image: url(background_gradient.jpg);...background-repeat: repeat-x;...background-color: #E8EAEF;...margin-top: 20px;...margin-left: 20px;...color: #575757;..}....body.securityError..{...font-family: "Segoe UI", "verdana" , "Arial";...background-image: url(background_gradient_red.jpg);...background-repeat: repeat-x;...background-color: #E8EAEF;...margin-top: 20px;...margin-left: 20px;..}....body.tabInfo..{...background-image: none;...background-color: #F4F4F4;..}.. ..a..{...color: rgb(19,112,171);.font-size: 1em;...font-weight: normal;...text-decoration: none;...margin-left: 0px;...vertical-align: top;..}....a:link, a:visited..{...color: rgb(19,112,171);...text-decoration: none;...vertical-align: top;..}....a:hover..{...color: rgb(7,74,229);...text-decoration: underline;..}....p..{...font-size: 0.9em;..}.....h1 /* used for Title */..{...color: #4465A2;...font-size: 1.1em;...font-weight: normal;...vertical-align

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\Flama-Medium[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), Flama Medium family
Category:	downloaded
Size (bytes):	120360
Entropy (8bit):	6.404380897694854
Encrypted:	false
SSDEEP:	3072:UVdgiwuJLd5v6aqYj3JUZz6Wzcnu3ij5p20:URhxfJUZz6Wzcnu3ae0
MD5:	C9E9E4EAB8BABF45FC07DF4FA384D73A
SHA1:	D1F9FCD85FB911F418F58A23F20C87A2183D1BC2
SHA-256:	69DE5C8600E21CCB6C237AC64606160EE75581966259E09F75353DEC6660B5E4
SHA-512:	09E70EBE7F41FFB48ACEB31240F7663A8229CDA6877BB31A6A0EDE0FC56D345A525A5868F37A77E802C744A013DEF4DDC015F9E5DFC19E346A9C0967BBC71576
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/Flama-Medium.eot?
Preview:	(...........................X.....LP....{..@........... ............................F.l.a.m.a. .M.e.d.i.u.m.....R.e.g.u.l.a.r.....V.e.r.s.i.o.n. .2...0.0.0.;. .t.t.f.a.u.t.o.h.i.n.t. .(.v.0...9.6.). .-.l. .8. .-.r. .5.0. .-.G. .2.0.0. .-.x. .1.4. .-.w. .".g.G.D.". .-.W. .-.c...(.F.l.a.m.a. .M.e.d.i.u.m. .R.e.g.u.l.a.r.................GPOS.W.........GSUB......L....OS/2<KN........`cmap...B...L...jcvt ......"....8fpgm..........ugasp...........glyf..i...'....jhead..\|+.......6hhea.......D...$hmtx.?@........dloca......".....maxp...M...h... name.S.L........postCA.........prep.D$..."0................_.<..........vG?.....o.........R.................R.........G...................Y.....Y...........(.5.n.....u.........X.....................W.3................@..{........FTF........ .8...R.' ............". .....t...................A...P...A...A...A.k.%.$.O.$.O...5...5...$...G...G...B...D...D...B...D...D...7.T.2...1.<.8.D.:.P..<.8.D.2.2.2.B.0.D.2...................................H...6...6...H

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ImoeZsch[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	28178
Entropy (8bit):	5.381432747694635
Encrypted:	false
SSDEEP:	768:mnppa5a5Q6G5DpUrG0TbxDb734sDUUq2a/6d3dddTdwdTCnfdtdedEdeEpdeWde6:mnppaqLGnY9Db7IWUUq2a/qNH/v
MD5:	BAF517E96CA244D3CBA8F8F2A29A6093
SHA1:	AF4CF26AC31AFFC34783E1C5FFF5029A7FE12C7C
SHA-256:	9EB2A25719506923C5B68CD1832B99077EEE2B3D6231D5FEE55C519F26C1B079
SHA-512:	470B495B537C49AC3323BA1AC44D50E90B3F4CE8F1CA13E909BA0449A32F08381310FA4505660A35584D3EBCF3C37B529AF31AA8077B564E2FED755EFF5C6685
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.krxd.net/controltag/ImoeZsch.js
Preview:	..../* ControlTag Loader for Bell Media ca46aa22-e6b4-464e-9077-7215dc98bc0a */.(function(w, cs) {. . if (/Twitter for iPhone/.test(w.navigator.userAgent \|\| '')) {. return;. }.. var debugging = /kxdebug/.test(w.location);. var log = function() {. . debugging && w.console && w.console.log([].slice.call(arguments).join(' '));. };.. var load = function(url, callback) {. log('Loading script from:', url);. var node = w.document.createElement('script');. node.async = true; . node.src = url;.. . node.onload = node.onreadystatechange = function () {. var state = node.readyState;. if (!callback.done && (!state \|\| /loaded\|complete/.test(state))) {. log('Script loaded from:', url);. callback.done = true; . callback();. }. };.. . var sibling = w.document.getElementsByTagName('script')[0];. sibling.parentNode.insertBefore(node, sibling);. };.. var config = {"app":{"name":"krux-scala-config-webservice","version":"3

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\NewErrorPageTemplate[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	3224
Entropy (8bit):	4.869554560514657
Encrypted:	false
SSDEEP:	48:5m73jcJqQep89TEw7UxkZCm73jcJqQep89TEw7Uxkk:5nqrehEw7U6ZCnqrehEw7U6k
MD5:	3A35614D9A6156057F7D30C91C1ED4F2
SHA1:	7DDE5D14A15F465C9BFD0B0C0B3416175E69D1BC
SHA-256:	D544FAC44B7B2CD937726C401B5C9C726F900CEF22980A7B39F8756581901B73
SHA-512:	8A31C0C90EF443E3B7AC5B930466CD8CEF1D540D2D436A7DC4D12F38686368303882A9610A57B2A1CF9AB973DB684FDA0B1831B116EAEB4D86BE816FDD627C28
Malicious:	false
Reputation:	low
Preview:	.body..{.. background-repeat: repeat-x;.. background-color: white;.. font-family: "Segoe UI", "verdana", "arial";.. margin: 0em;.. color: #1f1f1f;..}.....mainContent..{.. margin-top:80px;.. width: 700px;.. margin-left: 120px;.. margin-right: 120px;..}.....title..{.. color: #54b0f7;.. font-size: 36px;.. font-weight: 300;.. line-height: 40px;.. margin-bottom: 24px;.. font-family: "Segoe UI", "verdana";.. position: relative;..}.....errorExplanation..{.. color: #000000;.. font-size: 12pt;.. font-family: "Segoe UI", "verdana", "arial";.. text-decoration: none;..}.....taskSection..{.. margin-top: 20px;.. margin-bottom: 28px;.. position: relative; ..}.....tasks..{.. color: #000000;.. font-family: "Segoe UI", "verdana";.. font-weight:200;.. font-size: 12pt;..}....li..{.. margin-top: 8px;..}.....diagnoseButton..{.. outline: none;.. font-size: 9pt;..}.....launchInternetOptionsButton..{.. outline: none;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RC2d6da016bf28471c8bc669fb84568d84-source.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	512
Entropy (8bit):	5.358775129012022
Encrypted:	false
SSDEEP:	12:jvgetyEUGct/BetyEULLKnp22voEsvAWfA3dKI+lG:wEDct/BTEjnpvYLffz4
MD5:	F1D4DB6C8FD5DA8C4AB5F4E96231F98F
SHA1:	7E8B2F9A738D4729263B8D6AFB785D7D5728E521
SHA-256:	FE6E64F43E2669EAE4CD5C250CDE660A92521E0A575780740F78E2D46BEFC296
SHA-512:	A6DE629B241CA1DB0EAAEB1F948F9CA97A58E4EDF7FCD2664BEDB1A8BD93D6766852EBE83D45D8C0C4B78CDA5B1DCBA8A1A6BDCBE69C05A86F052F838F1BD013
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/653e7ca2fc48/14929d193258/123e547f4168/RC2d6da016bf28471c8bc669fb84568d84-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/653e7ca2fc48/14929d193258/123e547f4168/RC2d6da016bf28471c8bc669fb84568d84-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/653e7ca2fc48/14929d193258/123e547f4168/RC2d6da016bf28471c8bc669fb84568d84-source.min.js', "var params=new URLSearchParams(window.location.search);-1<document.location.hostname.indexOf(\"ampvideo\")&&\"true\"===params.get(\"preventDefault\")&&document.dispatchEvent(new CustomEvent(\"digitalDataLoaded\"));");

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\RCe714d7b84ce14ee0a28df675bbd5cf5b-source.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	478
Entropy (8bit):	5.284205572554443
Encrypted:	false
SSDEEP:	12:jvgetUX/ct/BetUXeLddvA+DQdvAxNJB+lG:SPct/BlE/EYzc4
MD5:	BECDE56C1426E0E860802F776891E085
SHA1:	F4F4D5CBF4E293D379510FCA537EA8590912B190
SHA-256:	DED40C4946E42576820EF3D03C68324C0967833FB7BD4CD8B6F177522F5FCCBC
SHA-512:	AE2952F8BE66EE640E21323B0EBAB1F5156729802A65C1809E76E678E5F3F5FDC5EB46F66552A9A839506DFD5C4968AF1F4DD0F84FA3970C0D471ABA32E85E32
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/653e7ca2fc48/14929d193258/123e547f4168/RCe714d7b84ce14ee0a28df675bbd5cf5b-source.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/653e7ca2fc48/14929d193258/123e547f4168/RCe714d7b84ce14ee0a28df675bbd5cf5b-source.js`.._satellite.__registerScript('https://assets.adobedtm.com/653e7ca2fc48/14929d193258/123e547f4168/RCe714d7b84ce14ee0a28df675bbd5cf5b-source.min.js', "(-1<document.location.hostname.indexOf(\"9c9media.com\")\|\|-1<document.location.hostname.indexOf(\"vidiplayer.ca\"))&&document.dispatchEvent(new CustomEvent(\"digitalDataLoaded\"));");

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\YNTWJAH3.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	420415
Entropy (8bit):	4.8406645333729665
Encrypted:	false
SSDEEP:	3072:ZlOLJ+NLAbKrng8Y9/cVP7Ynf2TcERLVrwcmrHTud3l+lUq:DE/h2TcERLVrwcmrP
MD5:	04184D492D384961E0DC8BDCA01BB4C5
SHA1:	6B41B177E78542753DD7A5BD6192B918D95F4EFD
SHA-256:	C0D67B3B8888DC5A76353576424EC902155A9854DA0A3D87B21A017849ABA8C4
SHA-512:	FCA08A3999AB1F8E52A7DA8B0C44676F0EE367E7C3C419DB9693518DB5388A2391CF73BC2930DE0DCB4F97CD7431EF4556773B9DD6BCA983A351909C3F1B7340
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/
Preview:	.<!DOCTYPE HTML>.<html lang="en">. <head>. <meta charset="UTF-8"/>.. .. Page SEO start -->. . <title>Toronto News \| Weather & Traffic \| CTV News Toronto </title>. <meta name="description" content="Toronto breaking news & COVID-19 vaccine news, live coverage, weather, crime news, in-depth reporting, real estate and video. "/>. <link rel="canonical" href="https://toronto.ctvnews.ca/"/>. . . . <meta property="fb:pages" content="58148619578"/>. . <meta property="fb:pages" content="194553860586548"/>. . <meta property="fb:pages" content="231176056943733"/>. . <meta property="fb:pages" content="174761742563060"/>. . <meta name="robots" content="noarchive,noodp"/>. <meta name="robots" content="index,follow,noodp"/>. <meta name="robots" content="ACAP allow-index"/>. Page SEO end -->. . . .. <meta name="keywords" content="localsiteroot,landingPage"/>. <meta name="template" content="co

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\background_gradient[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames 3
Category:	dropped
Size (bytes):	453
Entropy (8bit):	5.019973044227213
Encrypted:	false
SSDEEP:	6:3llVuiPjlXJYhg5suRd8PImMo23C/kHrJ8yA/NIeYoWg78C/vTFvbKLAh3:V/XPYhiPRd8j7+9LoIrobtHTdbKi
MD5:	20F0110ED5E4E0D5384A496E4880139B
SHA1:	51F5FC61D8BF19100DF0F8AADAA57FCD9C086255
SHA-256:	1471693BE91E53C2640FE7BAEECBC624530B088444222D93F2815DFCE1865D5B
SHA-512:	5F52C117E346111D99D3B642926139178A80B9EC03147C00E27F07AAB47FE38E9319FE983444F3E0E36DEF1E86DD7C56C25E44B14EFDC3F13B45EDEDA064DB5A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....d.d......Ducky.......P......Adobe.d................................................................................................................................................. ...............W..............................................................Qa.................................?......%.....x......s...Z.......j.T.wz.6...X.@... V.3tM...P@.u.%...m..D.25...T...F.........p......A..........BP..qD.(.........ntH.@......h?..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bellmedia_logo[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 92 x 23
Category:	downloaded
Size (bytes):	2016
Entropy (8bit):	7.251399513690584
Encrypted:	false
SSDEEP:	24:B7jQGItSal1hpunQWwh82lYSKwTWEZrLUVyLrT34yJ3VrkTWE+GY84Tg7LswhYrc:tEGI1itvnLEggfJ3ekL8zjrnBECHL
MD5:	D034878AA40817C0454D7003BA6943BB
SHA1:	AC97AE1E663021F4559D668991E1381B1E364A15
SHA-256:	B7B409ADD585883ADE53EFFD8EC5EE06116659DDDCE415278A40A727F172DF5D
SHA-512:	5FDB1DACE7E4B57EC5660F537A13C53DC497F5A5E8E3B7EBB84D783A830A14466CD69F11D5D08ABFDCF78224232EE965974A1D46B26C31942D5F9815477EED79
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/logos/bellmedia_logo.gif
Preview:	GIF89a\....%....................o.......... ...000```... x.0..PPP`....p...............AAAppp...qqqP.....@@@@......e..................................................................................!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:91E3BE1D5220681194578495BC26F6B5" xmpMM:DocumentID="xmp.did:E0657EC253C511E0835ACFE5A2E00580" xmpMM:InstanceID="xmp.iid:FD28E4AA53BF11E0835ACFE5A2E00580" xmp:CreatorTool="Adobe Photoshop CS5 Macintosh"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5EC2F79D6C20681194578495BC26F6B5" stRef:documentID="xmp.did:91E3BE1D5220681194578495BC26F6B

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.462204480322069
Encrypted:	false
SSDEEP:	3:YM4ZFHLRRTQWRDenEuHY:YMKRcWR6EuHY
MD5:	EE1DE650F08E8B97432229AE14DBF070
SHA1:	68C55F99F06F7384D9173452DD7E90AEFF53EB62
SHA-256:	2632BDC641A76F37A44ECC724A772D9FE4EE6B8EF3C18AC2DB3126CFAF4C8010
SHA-512:	CCEE2A40BDF995E303F1D642AF6854BA48B4D8187C81309B8EFA405DE6AAA60B62B8D630F189FBD45266FA98C94B55622FBC7F0777101A9A4A4CA024B2570C56
Malicious:	false
Reputation:	low
Preview:	{"id":"e787f1e55bf2446cb386d6aa26605b72","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[2].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	4.554743521455035
Encrypted:	false
SSDEEP:	3:YMkW5QHETXcQgFdonEuHjUT9c6U+J74nEuHY:YM95QH6XcgEuHU2tEuHY
MD5:	96609A1B53FEBF10575FC78E3BCCE01E
SHA1:	D6E50BCFBAE667D534877CE3636F97F1DF44683C
SHA-256:	F25777A39F154B54D7ADAD6E896A25143304623C1A7BB734C5FD819B9B619806
SHA-512:	6273153E89F3B0ACC3D7EA5F626A3DD0ED322B982AA03DD81C9C6DD2786969055E47CC41BEC1AA87C637630EF618EAF18B64D6FCE623F61371249443FE90019D
Malicious:	false
Reputation:	low
IE Cache URL:	https://c2shb.ssp.yahoo.com/bidRequest?cmd=bid&dcn=8a9694c7017474db0327db644d6e001d&pos=ctvnews.ca_desktop_atf_728x90_369&secure=1
Preview:	{"id":"2c8b6da6345f47e8995ba6ceb9329420","nbr":1,"seatbid":[]}{"id":"50b968f755214d679df9ef79f37d1218","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[3].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	124
Entropy (8bit):	4.5552114366981264
Encrypted:	false
SSDEEP:	3:YMfxDQHQceJUXT6JUnEuHFVhuGwXDWRT8EHJb4nEuHY:YMCHQvcTJEuHFVhuTXDWR4uJUEuHY
MD5:	B7F52428CC0F0616A4BE1A0048EC5432
SHA1:	85A9FE90C7275D048B0273AF62F3880A8EC59395
SHA-256:	286A3490CADF28444E2E7538A62D57B37C45487BC1F179301BD73380CD84B200
SHA-512:	57D5CB5C565593476AE63DC9B6FE67877C3D43FF302EEF4EA1005986A427080BF19164BD7EA7726E1C2254A1407E66FF418AB30DC26B460136835E3B81FB5433
Malicious:	false
Reputation:	low
Preview:	{"id":"8fb4d86f5bf549fd97361244d25b3917","nbr":1,"seatbid":[]}{"id":"ba0978c1c8f247358cc32f3fee26a2fa","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[4].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.4141327062680995
Encrypted:	false
SSDEEP:	3:YMFEXcE0aDmBLBFYadsr34nEuHY:YM+XcE0hdwUEuHY
MD5:	C80168B119BD90EF994690A55975A492
SHA1:	50FD833F996193CB069ACF4C1A216C5B55DBC25A
SHA-256:	A4EA133B2B6D7D4ABB60B0078F5819B58ED1F711CC96EA033D9F02D67F6D5E9B
SHA-512:	E02B36518319BAA659BF0A35BBFC033F5EBFC6A85802F92F8063DFC453549707363E4F916C6F44647923FF1AB353774E66BCB402F2E34ADD49F96BD6A6E09331
Malicious:	false
Reputation:	low
Preview:	{"id":"62a29a47eeef4ed6b02f2da3841fcfd3","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[5].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.351643948511209
Encrypted:	false
SSDEEP:	3:YM8uTddnSXB8+TSAnenEuHY:YMX5aq+e3EuHY
MD5:	C79CBB805D3FB942E5B2718B529071F1
SHA1:	A82C6DBD32A4D600A92EE9A45D651431A03E4202
SHA-256:	48306C97CE404A1826FAC85D82B053EC821BD705F9F765166365A62CC7B6467E
SHA-512:	2B07BAFA9291F02CE35439A707241BFB047C5418C3F44EAC20C43F9C5AEB64C83E212721077516BB9AC0FD046048A3A4D1F91088F292E4D235FFAD36E0557893
Malicious:	false
Reputation:	low
Preview:	{"id":"5025010d5a7b46648d432b2d030167eb","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[6].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.379216625036156
Encrypted:	false
SSDEEP:	3:YM5EDxER7W3VZEHJrInEuHY:YMYx9CHJrIEuHY
MD5:	2DF5A4D8AB78B0BE8F4F460FBB85D577
SHA1:	A5BBEC8D7E7C329BE57FFDCE9776342DE00F4EE6
SHA-256:	00FEC19A981358C66E5AC402C0B7BC6CAEB98E6210C7CAEAB3E4632A567B6659
SHA-512:	A0E90CB118FDE4CEEFEA9EAE5EB9E27DDD864A33B0218EF8B3BA91297BBBD9AF484CDB8EA4803C2702924B458558164019E627B91815BE4C4A8BB055DA7CFA2E
Malicious:	false
Reputation:	low
Preview:	{"id":"bbc0bf7c262a4d7da51324d06034b017","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[7].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.3248487296021345
Encrypted:	false
SSDEEP:	3:YMvE27LF2hSRHonEuHY:YMvEGLFXRIEuHY
MD5:	BAD875633EECB3B37C898BF6C385ADE0
SHA1:	CA0F010AF77EA6A0015E8497EEB0F753CD5EE0C7
SHA-256:	6C93F5225A67874F0D8CF41F24965D5F40A7297546E9913E106A31AEDEBECAFA
SHA-512:	5E11F84342947B3D96683AF1B62ECA6484CB4E5F1251E0429A1A30B199EAD70B3EAF5F96BB348E7D9BE91D77CB00EB14BBF8A5916ACEA634FB4969B72AF56EB0
Malicious:	false
Reputation:	low
IE Cache URL:	https://c2shb.ssp.yahoo.com/bidRequest?cmd=bid&dcn=8a9694c7017474db0327db644d6e001d&pos=ctvnews.ca_desktop_atf_300x250_361&secure=1
Preview:	{"id":"e4ea936dcabd458d85728dba7de6d276","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[8].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.380827358425025
Encrypted:	false
SSDEEP:	3:YMLT9GTdUVlDUzEB+nEuHY:YMWdOlYAMEuHY
MD5:	78B7138E4E02C5E77A5A45562EE62150
SHA1:	8B6E1D8FD3664B2DC08F7555E1B6D9EE7AC047A7
SHA-256:	BBCEFB1998D2BA0D2C9C4AE578B8A95A226FC449BE682A76349DF8423E08477C
SHA-512:	A97147DFD8AC0A294F9B7EA6F7F5BCF764D68CF5FFC341D2670C390772EA5188C8DCAE6835BB2F26DFFBD6E5069EB6A4665D1C9DB78E69FC5726DC8C50B746CD
Malicious:	false
Reputation:	low
Preview:	{"id":"82ca7ca7c557497c815e73c16e07e8cd","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bidRequest[9].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.504610778436435
Encrypted:	false
SSDEEP:	3:YMQPQUSRgETUNyA6+nEuHY:YMQPQPg/NT6+EuHY
MD5:	18EBE1BC78B5A9BA688A8994A2BAA1A9
SHA1:	A38FDEBEA403FBF8D38337E9ED8B9453526D0575
SHA-256:	85F63D580FD85C5847D8F777C3C3E22317F5ACF649792CE2244957DB764C49C1
SHA-512:	DB493BD55029E619E969B118BC87A784A85D4E051A9F8CCA657BC8F9E9FBEDD908F81E762F9CE916BC8FDA0CD80A9405907295022E4A6F7EEF7CDD103C621699
Malicious:	false
Reputation:	low
IE Cache URL:	https://c2shb.ssp.yahoo.com/bidRequest?cmd=bid&dcn=8a9694c7017474db0327db644d6e001d&pos=ctvnews.ca_desktop_atf_300x600_362&secure=1
Preview:	{"id":"6fd52a3cb185445ba61192dd80c57e49","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\bid[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	64
Entropy (8bit):	4.8011085007312415
Encrypted:	false
SSDEEP:	3:8WiCLViemMQ32p0kHRTkh:8WiIUem/32p0kHRTq
MD5:	78F5F00DCBCAB89092CAB63DDC957E9D
SHA1:	B4F617FBE18C61EB9F56D5FBD35C5FA683ACBE47
SHA-256:	D278491B1DE51AD826D16BE5AB27B1746999C02D45200F107218427E34EED798
SHA-512:	32F16CC4A285ABDD27894C7D30FE6DEE99E6D8659854B8AA940E8A7DC16038476DC25AEBBD60A435C8FFF8C64112660B018708E806DCD1B363FCAE530F54EAC8
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.amazon-adsystem.com/e/dtb/bid?src=3733&u=https%3A%2F%2Fwww.ctvnews.ca%2Fhealth%2Fcoronavirus%2F&pid=OWSX36eAgp1R0&cb=0&ws=1280x906&v=7.60.00&t=2000&slots=%5B%7B%22sd%22%3A%220%22%2C%22s%22%3A%5B%22300x250%22%2C%22300x600%22%2C%22300x1050%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnews%2Fcoronavirus%2Fnature%2Fdiv-gpt-ad-300_250-1%22%7D%2C%7B%22sd%22%3A%221%22%2C%22s%22%3A%5B%22300x100%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnews%2Fcoronavirus%2Fnature%2Fdiv-gpt-ad-300_100-2%22%7D%2C%7B%22sd%22%3A%222%22%2C%22s%22%3A%5B%2230x1%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnews%2Fcoronavirus%2Fnature%2Fdiv-gpt-ad-30_1-3%22%7D%2C%7B%22sd%22%3A%223%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x250%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnews%2Fcoronavirus%2Fnature%2Fdiv-gpt-ad-728_90-4%22%7D%2C%7B%22sd%22%3A%224%22%2C%22s%22%3A%5B%22300x250%22%2C%22300x600%22%2C%22300x1050%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnews%2Fcoronavirus%2Fnature%2Fdiv-gpt-ad-300_250-5%22%7D%5D&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
Preview:	apstag.punt({"cfg":{"CONFIG_CALL_ENABLED":true,"v":1},"cb":"0"})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\body-override-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	6651
Entropy (8bit):	4.84430385618629
Encrypted:	false
SSDEEP:	192:xKYDpf0VRqRJn0lCaHVIa9zh6bLgj/04UXlCaHxjX7O20BuWT4Q6FJ7lCaHVnbv9:xKYDpf0VRqRJ0lCaHVIa9zh6bLgj/0pv
MD5:	0BF4667BB1412706F433DEB85CF90877
SHA1:	180CD5E7F6F1D754661BF6A69917E7B37D610EFA
SHA-256:	79BC6D190DEB866B5BFC763B84F10DC2585760AED90D591EC2FA3CF12924B915
SHA-512:	778561B8B4C5D47CFFA6D6CF0BAEF6551762963D7A2EF2F9F5C6E3BA02D5CE893F11610E950238A42AD5795E5082F3024599FE4718DAA200AC0B501B52415ED9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/body-override-7.730841
Preview:	body {background-color: #FFF}../To Remove below once we have our code fix done /....@media (max-width: 575px) {.. .election-col-s-1 {width: 8.33%;}.. .election-col-s-2 {width: 16.66%;}.. .election-col-s-3 {width: 25%;}.. .election-col-s-4 {width: 33.33%;}.. .election-col-s-5 {width: 41.66%;}.. .election-col-s-6 {width: 50%;}.. .election-col-s-7 {width: 58.33%;}.. .election-col-s-8 {width: 66.66%;}.. .election-col-s-9 {width: 75%;}.. .election-col-s-10 {width: 83.33%;}.. .election-col-s-11 {width: 91.66%;}.. .election-col-s-12 {width: 100%;}.. .content-primary,.. .content-secondary,.. .content-primary .imageLeft .bn-headline,.. .content-primary .imageLeft .teaser .teaserImage,.. .content-primary .imageLeft .bn-headline,.. .content-primary .imageLeft .lead-top.teaserLead {.. float: none;width: 100%;.. }...fourGrid .element.teaser.election-col-12.election-col-xl-12.election-col-l-12.election-col-m-12.election-col-s-12,

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\budget-css-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1015
Entropy (8bit):	4.974843509587484
Encrypted:	false
SSDEEP:	24:gGnkoGVQG3XFCrgoR/qHwkTQehmoqh/W6THobZy:gGnjGVzOgokHwJ1JHs4
MD5:	C4E3733E0BEE7E97F2C0E1420119DC93
SHA1:	9AE7392CDB4FA96ED5F5753EBC33F0F09E8F4016
SHA-256:	4EAE0A6AF5FAFDD029956F42D82F4BD6E1D4C3A1893A5E2C8001B5F6A19CB5CD
SHA-512:	F074F5A26A73D39B9CF4E8E5FEB1B5A81853432003CF973436F4E008050ABD2AE75B10F2B1D2EE0921C9FFECDFAF3674FE53C8FF39CDDB4AF1B8D16217765C2F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/budget-css-7.379739
Preview:	.budget-charts .teaserTitle a {font-size: 80%}...budget-charts .teaserImage {border: 1px solid #CCCCCC}.....pope-group .shows-player {width: 620px}.....pope-group .playa-playa {float: none}...pope-group .listing-box {margin-left: 0; width: 620px; background: none}...pope-group .playa-list {height: auto; overflow: visible; margin-bottom: 10px; border-bottom: 3px double #CDCDCD; padding-bottom: 10px}...pope-group.budget .full-wrap .playa-items {width: 225px; margin-left: 65px; margin-right: 0}.....pope-group.budget .full-wrap .playa-items:first-child {margin-left: 0}../.full-wrap .playa-items {float: left; width: 180px;margin-right: 20px}/...full-wrap .playa-items:last-child {margin-right: 0}...pope-group .playa-items h2 {font-size: 14px; line-height: 1.2; text-align: center}...pope-group .playa-items h2 a {line-height: 1.2}...pope-group .playa-items p {font-size: 0.75em; text-align: center}...election-pl .clip-stuff p {font-size: 100%; line-height: 1.2}.....conclave-wrap {text-al

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ca46aa22-e6b4-464e-9077-7215dc98bc0a[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	463
Entropy (8bit):	4.6850420640277814
Encrypted:	false
SSDEEP:	12:H0Y4XjfLyT9RBthLdb0E4XjfLyT9R4xExlPezL:H0DDyT/BPdb0PDyT/4xExlSL
MD5:	01F9E44901E753DFCFCC33F39373C0B2
SHA1:	A20F6225838FE6E48C75E11760CFFE1D34746E56
SHA-256:	FC871B950EBF9BF7DB16DAA9544203445E214B45B2F9A9AD06C1C694E0329D53
SHA-512:	71F61AE5289D1E189CC4B45C3ED3F320190158F8AF396A17C3654FB39913FC2AAF2310EE0BEBF05C42E24BB7EE8AEBBF5745C4DB23C5850888E210532366DDD8
Malicious:	false
Reputation:	low
Preview:	Krux.ns.bellmedia.kxjsonp_consent_get_0({"status":400,"body":{"settings":{"dc":1,"al":1,"tg":1,"cd":1,"sh":0,"re":0},"pr":"global","code":"bad_request","source":"unk","errors":{"idv":"no identifier found for user","query":"no user id"}}});Krux.ns.bellmedia.kxjsonp_consent_get_0({"status":404,"body":{"settings":{"dc":1,"al":1,"tg":1,"cd":1,"sh":0,"re":0},"pr":"global","code":"not_found","source":"unk","errors":{"not_found":"consent not found for OAo8OofK"}}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	196965
Entropy (8bit):	4.815719340454036
Encrypted:	false
SSDEEP:	1536:pbDKrv2e/MHwpMIW8X98iQNvWvAjgbNHHH66reN/QErj7PeRO4VuJS9u8aUqMm6n:f+6Ws4VuJS3qu3GeHs0Z
MD5:	7CBA1568ABC4DCD3E1C5F1F216A0AA24
SHA1:	A1563A8CC01E96A57ADF5D589B3FF8CA9538D8EF
SHA-256:	D6A5FBD57590F159D1FAA7A544EC789E69F4983E76F81324ABCBE6731A3E2FFC
SHA-512:	9AACAC00AD05418F447AF9CDC6D546B941256643D6E7CFCA21093A7AD46B242A3DB9EFA3CD3D9B354126000F89734B55609050613352E9F84E9FC111A2E28FE7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/health/coronavirus/canada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1.5352524
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js lt-ie10 lt-ie9 lt-ie8 lt-ie7" ng-app="myApp" lang="en" itemscope itemtype="http://schema.org/Article" xmlns:og="http://ogp.me/ns#" xmlns:fb="https://www.facebook.com/2008/fbml" > <![endif]-->. [if IE 7]> <html class="no-js lt-ie10 lt-ie9 lt-ie8" ng-app="myApp" lang="en" itemscope itemtype="http://schema.org/Article" xmlns:og="http://ogp.me/ns#" xmlns:fb="https://www.facebook.com/2008/fbml" > <![endif]-->. [if IE 8]> <html class="no-js lt-ie10 lt-ie9" ng-app="myApp" lang="en" itemscope itemtype="http://schema.org/Article" xmlns:og="http://ogp.me/ns#" xmlns:fb="https://www.facebook.com/2008/fbml" > <![endif]-->. [if IE 9]> <html class="no-js lt-ie10" ng-app="myApp" lang="en" itemscope itemtype="http://schema.org/Article" xmlns:og="http://ogp.me/ns#" xmlns:fb="https://www.facebook.com/2008/fbml" > <![endif]-->. [if gt IE 8]> > <html class="no-js" ng-app="myApp" lang="en" itemscope itemtyp

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\chartbeat_mab[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	22902
Entropy (8bit):	5.531297865001784
Encrypted:	false
SSDEEP:	384:DZz9kBGXvFR9ZF5jEi/wzL9HyOMFWBPIGk8s/HxgTm2sThgDfotmgFH:nkBeFz/5hof9JMFMk/OTLYtmgFH
MD5:	13B3652F9F050AAA03C5AFAA42038945
SHA1:	00E8A4B7FA0722B9B8595C793265C8598F28111C
SHA-256:	BDBB3B88367E0DC7F2AF34B3BB701FE2523C8653A48CDFD8AAF67C2D1E18B76D
SHA-512:	395718B136313A9046B1C5E1EC11B06123F870582849A080E15ACF07F18E509BC0521D8FEE91D43E947D75D5578BF9EFC93F09CC55499A06075950DBD38B176C
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.chartbeat.com/js/chartbeat_mab.js
Preview:	(function(){var l=void 0,m=true,n=null,o=false,p=this;.function aa(a){var b=typeof a;if(b=="object")if(a){if(a instanceof Array)return"array";else if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if(c=="[object Window]")return"object";if(c=="[object Array]"\|\|typeof a.length=="number"&&typeof a.splice!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("splice"))return"array";if(c=="[object Function]"\|\|typeof a.call!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("call"))return"function"}else return"null";.else if(b=="function"&&typeof a.call=="undefined")return"object";return b};function ba(a){a=String(a);if(/^\s$/.test(a)?0:/^[\],:{}\s\u2028\u2029]$/.test(a.replace(/\\["\\\/bfnrtu]/g,"@").replace(/"[^"\\\n\r\u2028\u2029\x00-\x08\x10-\x1f\x80-\x9f]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?/g,"]").replace(/(?:^\|:\|,)(?:[\s\u2028\u2029]*\[)+/g,"")))try{return eval("("+a+")")}catch(b){}throw

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	1468873
Entropy (8bit):	5.8278366679302165
Encrypted:	false
SSDEEP:	24576:2uSrZ8N7ktMit7qlGY2l02M8+RjmnZQwfxD7:2uSrZiktMit7Y2l02M8+RjmnZQwd7
MD5:	BB67424391AF21ED2B476C417718CFE2
SHA1:	F03BD2A519999269621473DA2F0C327DC93CE6B3
SHA-256:	30B662FF1458FD58C5518DE5B258A5935B86EC443C44533259FA575BFC057F54
SHA-512:	AD4A71D61EA6C47299340BE71AB024CB88A2D1E156563B427848D9F568C7813DE8FCC9DABDA65CE7CFEBF3643970FFA7242EF488A41B80B624F8B2D335F2A816
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/bmdaem-domains/news/clientlibs/clientlib-news-site.min.bb67424391af21ed2b476c417718cfe2.js
Preview:	/******************************************************************************. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. ******************************************************************************/.if (window.Element && !Element.prototype.closest) {. // eslint valid-jsdoc: "off". Element.prototype.closest =. function(s) {. "use strict";. var matches = (this.document \|\| this.ownerDocument).querySelectorAll(s);.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\common[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8243
Entropy (8bit):	5.255514315035491
Encrypted:	false
SSDEEP:	192:/QlVKRuF5HGxZvAB4ZGNUGHBg98Y2Mdl/XtQI9vEjXT7Tl1TtXBrUN9d:45HGjAqsNLg98Y2Mdl78v7Bpy
MD5:	BD6B5669DA92F285867BBCA87277594D
SHA1:	835577EB56047C392F6E8E3A4C69AC47FEF7C803
SHA-256:	152FA4721770CF1DC87AEA48E62A1AD5DAE570995E09574057C0C1F440A2691E
SHA-512:	7D87C27931D4CE7E8452F6850791905B771263DF44736F4A4F356B9B4FDD080CCF112E72EA914FF25C6005E1F12CC2F229B815F98DFFF60544B1A3E190A8E637
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/common.js
Preview:	$(document).ready(function(){jQuery(".unmutePlayer, .crushPromo").on("click",function(){unmuteVideoPlayer();});$(".increaseTextSize").click(function(){var article=$(".article");if(article.hasClass("large")){article.addClass("larger");article.removeClass("large");}else{if(!article.hasClass("larger")){article.addClass("large");}}});$(".decreaseTextSize").click(function(){var article=$(".article");if(article.hasClass("larger")){article.addClass("large");article.removeClass("larger");}else{article.removeClass("large");}});$(document).ready(function(){$.fn.delayCustom=function(c,searchView){this.each(function(){setTimeout(searchView,c);});return this;};function initLabelBehaviour(){if($("form.frm").length>0){$("form.frm .row label").click(function(){if($(this).siblings("input:text").length>0){$(this).siblings("input:text:first").focus();}});}initFunctions.push("initLabelBehaviour");}var searchView=false;$(".links-search .search a:not(.close), .links-search .search").click(function(searchSub

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\config[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	340
Entropy (8bit):	5.135790086905765
Encrypted:	false
SSDEEP:	6:Ysr+eY4XlvOECjKJ8mgO9l3FCOfUENnYKHgjOzUWqIQCpCgKLS5Q2ueMTHOnmrXR:Ysr+ba9Ooiu39DYKHgyzXtQCBQSrSOmt
MD5:	1F62BDF98AA9441F5C052D087AE12DA4
SHA1:	000A36B0F538ECFF31D77050ABDD11D3D217B1B0
SHA-256:	47788D94B7B5DAB17D13A394E02DF0CE6442FDF1F659D03B7FB3EBA6D740BC4A
SHA-512:	EE0DABD4ABB9DFAE41FCC8494C2F93BC85EFD4ECED0478053CCAA1EAC36683D84D1DFC1614F18E541DF7257FBA347E891B9CA222F87C5E6EEB786BDCA5EB802F
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.amazon-adsystem.com/cdn/prod/config?src=3733&u=https%3A%2F%2Ftoronto.ctvnews.ca%2F
Preview:	{"3pvendor":"var propertyId = '5rJjPRoNo_MlaGcpOA6YOlm0Fmw'; var scriptTag = document.createElement('script'); scriptTag.src = '//confiant-integrations.global.ssl.fastly.net/' + propertyId + '/gpt_and_prebid/config.js'; scriptTag['onload'] = function(e) { window.creativeVendorLibraryLoaded = true;}; document.head.appendChild(scriptTag);"}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\coronavirus-links-css-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1215
Entropy (8bit):	4.950268263533609
Encrypted:	false
SSDEEP:	24:2G9M1QJj5O6gve1EsGpzDzLwJ3idLnHDtyAErFt+XTFv:NND1kpXYk9ydXMB
MD5:	D77284FF0BD34063A2CFFF19AB02E0A9
SHA1:	68C2267F5EA26CB972A1A02DDCB0B87ABB1958AA
SHA-256:	75F39F630F3DD8E047C89F7B197A84E1FFB4843E22CC0870B845E6D5625BA9B0
SHA-512:	093494FCB3ABF90EA7461FDAD24FAEBF94C25A788447B22B84F402D09AC5C44105DC529E8C7D72FD9ED596C0D931E0B57337141C82193F9A151E478A3D6B8D76
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/coronavirus-links-css-7.757277
Preview:	.polopoly_embed {.. max-width: 100% !important;..}....ul.coronavirus-links {.. background: #f3f3f3;.. border-radius: 1px;.... list-style: none;.. font-family: "CTVSans-Regular", sans-serif;.. font-size: 14px;.... padding: 20px 16px 14px 24px;.. line-height: 20px;.... margin: 16px auto;.. overflow: hidden;.. text-align: left;..}....ul.coronavirus-links .bold {.. font-family: "CTVSans-Bold", sans-serif;.. color: #222;..}....ul.coronavirus-links li {.. border-left: 1px dashed #b4b4b4;.. padding-left: 9pt;.. padding-bottom: 18px;.. margin-bottom: 0;..}....ul.coronavirus-links li:last-child {.. border-left: 1px dashed transparent;.. padding-left: 9pt;.. padding-bottom: 0;..}....ul.coronavirus-links li::before {.. content: " ";.. display: inline-block;.. width: 8px;.. height: 8px;.. border-radius: 5px;.. background-color: #005fff;.. vertical-align: middle;.. margin-left: -1pc;.. margin-right: 8px;.. margin-top: -16px;.. padding: 0;..}....ul.coronavirus-link

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\detectMobile[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3235
Entropy (8bit):	5.19082006687415
Encrypted:	false
SSDEEP:	48:TDAsrNS0EA8UIxEkHwib1xjAPAlkOzboohZ1+Z12rZ1WChZ1Fz+WmGtG2Riv2PcZ:QslEVdx/w6/sPAlkOzIM1jt3AvXHjLh
MD5:	B881BCA0F5446A5E0E5C974B8BCA3BE3
SHA1:	9C47E6A5511FD037444B17BA57CA25CA5080D424
SHA-256:	46B55FD2EFE26D820736BD14392EAC583854AA17FD9F6304F81F359614744315
SHA-512:	BB77B812FD75715D9F4294BBA9A611E01859FF88FE1E5671EB35F1D50359D49516787EAEEC8CE9D1540586F057CA371C3C7EF78E71731C8BA9A0563DFEDBB828
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/detectMobile.js
Preview:	function redirectTo(redirectURL){window.location.href=redirectURL;}function setCookieAndRedirect(mode,redirectURL){jQuery.cookie("permPref",mode,{expires:100,path:"/"});redirectTo(redirectURL);}function setCookieAndLoadSiteByMode(mode){if(MobileEsp.IsIphone\|\|MobileEsp.IsAndroidPhone\|\|MobileEsp.DetectMobileQuick()){if(confirm("Save your preference?")){jQuery.cookie("permPref",mode,{expires:100,path:"/"});}else{var cookieDuration=new Date();cookieDuration.setTime(cookieDuration.getTime()+(30601000));jQuery.cookie("currPref",mode,{expires:cookieDuration,path:"/"});}}var currURL=window.location.href;if(mode=="www"){var targetURL=getDesktopUrl(currURL);redirectTo(targetURL);}else{if(mode=="mobile"){var targetURL=getMobileUrl(currURL);redirectTo(targetURL);}}}function getMobileUrl(desktopUrl){var fullURL=document.createElement("a");fullURL.href=desktopUrl;var index_firstSlashAfterDomain=desktopUrl.indexOf("/",desktopUrl.indexOf(fullURL.hostname));var mobileURL=desktopUrl.substring(0,index_

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\dnserror[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	5994
Entropy (8bit):	4.4885437940628465
Encrypted:	false
SSDEEP:	48:u7u5V4VyhhV2lFUW29vj0RkpNc7KpAP8RrN7u5V4VyhhV2lFUW29vj0RkpNc7KpS:vIlJ6G7Ao8RiIlJ6G7Ao8Ra
MD5:	713ADD0E98C772CE39C7B2452806602B
SHA1:	7888DE86275AE869D6E82EE4D392C71EB9BCCD25
SHA-256:	6DE0370BA485689D411FF66EEA6EBCC577A1D19CFD489FA4DC7E22BD91F65806
SHA-512:	ABFB3EF6B1EA2A12B9A1E425BD94F807A4CE1C8FCE8CC618FBC700222CE573CFAB47BA9FCDCDE7157142F43CD3349014AAD1DC720EB8C327000B9211BAB3339F
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/dnserror.htm?ErrorStatus=0x800C0005&DNSError=1460
Preview:	.<!DOCTYPE HTML>..<html>.. <head>.. <link rel="stylesheet" type="text/css" href="NewErrorPageTemplate.css" >.. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <title>Can’t reach this page</title>.. <script src="errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="getInfo(); initMoreInfo('infoBlockID');">.. <div id="contentContainer" class="mainContent">.. <div id="mainTitle" class="title">Can’t reach this page</div>.. <div class="taskSection" id="taskSection">.. <ul id="cantDisplayTasks" class="tasks">.. <li id="task1-1">Make sure the web address <span id="webpage" class="webpageURL"></span>is correct</li>.. <li id="task1-2">Search for this site on Bing</li>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\down[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	748
Entropy (8bit):	7.249606135668305
Encrypted:	false
SSDEEP:	12:6v/7/2QeZ7HVJ6o6yiq1p4tSQfAVFcm6R2HkZuU4fB4CsY4NJlrvMezoW2uONroc:GeZ6oLiqkbDuU4fqzTrvMeBBlE
MD5:	C4F558C4C8B56858F15C09037CD6625A
SHA1:	EE497CC061D6A7A59BB66DEFEA65F9A8145BA240
SHA-256:	39E7DE847C9F731EAA72338AD9053217B957859DE27B50B6474EC42971530781
SHA-512:	D60353D3FBEA2992D96795BA30B20727B022B9164B2094B922921D33CA7CE1634713693AC191F8F5708954544F7648F4840BCD5B62CB6A032EF292A8B0E52A44
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............ex....PLTE....W..W..W..W..W..W..W..W..W..W..W..W..W.U..............W..W.!Y.#Z.$\.'].<r.=s.P..Q..Q..U..o..p..r..x..z..~.............................................b.............................................................................................................................................................................................................$..s...7tRNS.a.o(,.s....e......q*...................................F.Z....IDATx^%.S..@.C..jm.mTk...m.?\|;.y..S....F.t...,.......D.>..LpX=f.M...H4........=...=..xy.[h..7....7.....<.q.kH....#+....I..z.....'.ksC...X<.+..J>....%3BmqaV...h..Z._.:<.Y_jG...vN^.<>.Nu.u@.....M....?...1D.m~)s8..&....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\down[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	748
Entropy (8bit):	7.249606135668305
Encrypted:	false
SSDEEP:	12:6v/7/2QeZ7HVJ6o6yiq1p4tSQfAVFcm6R2HkZuU4fB4CsY4NJlrvMezoW2uONroc:GeZ6oLiqkbDuU4fqzTrvMeBBlE
MD5:	C4F558C4C8B56858F15C09037CD6625A
SHA1:	EE497CC061D6A7A59BB66DEFEA65F9A8145BA240
SHA-256:	39E7DE847C9F731EAA72338AD9053217B957859DE27B50B6474EC42971530781
SHA-512:	D60353D3FBEA2992D96795BA30B20727B022B9164B2094B922921D33CA7CE1634713693AC191F8F5708954544F7648F4840BCD5B62CB6A032EF292A8B0E52A44
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............ex....PLTE....W..W..W..W..W..W..W..W..W..W..W..W..W.U..............W..W.!Y.#Z.$\.'].<r.=s.P..Q..Q..U..o..p..r..x..z..~.............................................b.............................................................................................................................................................................................................$..s...7tRNS.a.o(,.s....e......q*...................................F.Z....IDATx^%.S..@.C..jm.mTk...m.?\|;.y..S....F.t...,.......D.>..LpX=f.M...H4........=...=..xy.[h..7....7.....<.q.kH....#+....I..z.....'.ksC...X<.+..J>....%3BmqaV...h..Z._.:<.Y_jG...vN^.<>.Nu.u@.....M....?...1D.m~)s8..&....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\election-2019-grid[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	84028
Entropy (8bit):	5.049746099506975
Encrypted:	false
SSDEEP:	768:e0QrT7nt8aj56f6rQWszm4mg+4xPBIzHeD/kQV4un9H6V1Yhp3oZlWmQXm2hgsD3:eRfxW7wFXMCmmorF
MD5:	6203A9FB99B889405EE027FAB6B37A5C
SHA1:	ACF8C08DAB71363B8A4FBE6F52BBDDB61053212E
SHA-256:	CB31275FC659D21897B9F65323D526DA1836BAE65F7AA0291A14C20807D3B442
SHA-512:	3D8A08525792D22A1FB2534D935541CB94BFEF2061A9B165306FB91ED61DF445EAB8B86A3A56FFB1BA125BA570D677933F9E35FE4C68957692511CE249F389C4
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/css/election/election-2019-grid.css
Preview:	@import url("webfont.css");body{position:relative}.content{overflow:hidden;max-width:1200px;margin:0 auto;min-height:600px;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.content-primary{width:73.67%;float:left;color:#2c2c2c;overflow:hidden}.content-secondary{float:left;width:26.33%;line-height:18px}.content-secondary .boxAd{margin-left:10px}.content-secondary.electionArticleSecondary .boxAd,.articleBody .boxAd{border-bottom:0 none transparent;text-align:center;margin-left:0;padding-bottom:25px}@media(min-width:992px){.content-secondary.electionArticleSecondary .boxAd,.articleBody .boxAd{padding-bottom:45px}li .element.teaser .teaserText.largeVersion .teaserTitle a,.linklist .dc .element.teaser.threecolumngridteaser .bn-headline .teaserTitle a{font-size:16px;line-height:20px}}.articleBody .boxAd{margin-top:30px}.content-secondary .boxAd .ad-below,.articleBody .boxAd .ad-below{font-family:"CTVSans-Regular",arial,sans-serif;font-size:14px}h1.none,.back-top.hidden{di

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\election-teasers-stylesheet-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	11364
Entropy (8bit):	5.024675657605062
Encrypted:	false
SSDEEP:	192:H/fJfnp8cYMYABWhd9dit6Vo9oVA25avjhYtSoeit6wr6SwU9qaE/9j/1dP/lMUt:ffOst675Uutbnt6uwD6A7
MD5:	D81ED5A0ECBCC4CCF36AA10BB6B9B8D6
SHA1:	E6159E65138A1D528FA89071662D949F5B5E887E
SHA-256:	B37191D5B27FA55D8ED17B54DA9BE340714B12F00016C66FA78E35912CD196D8
SHA-512:	074EFFA2E7BDEA990D526807F72835333173DD8EA01D796549356457965B850E4B163ED066558F90AFDF59D3C559718B1A1F18E9E8A048ECE4A23DE3ED6D1E0A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/election-teasers-stylesheet-7.733147
Preview:	/* PLATFORM TEASER BEGIN */....#platform-tease {.. margin: 0 auto;.. max-width: 1200px;.. display: grid;.. grid-template-columns: 15px 4.5fr 4fr;.. grid-template-rows: auto 4fr auto 30px;.. grid-template-areas:.. '. hd hd'.. 'im im by'.. 'im im by'.. '. . . ';.. font-family: 'CTVSans-Regular', 'CTV Sans', Arial, Helvetica, sans-serif;.. font-size: 17px;.. line-height: 26px;.. color: #4a4a4a;..}.....platform-tease-background {.. background: #f8f8f8;.. grid-row: 1 / 4;.. grid-column: 2 / 4;.. margin: 0 0 -20px 0;..}.....platform-tease-body {.. grid-area: by;..}.....platform-tease-head {.. font-size: 22px;.. font-family: 'CTVSans-Bold', 'CTV Sans', Arial, Helvetica, sans-serif;.. text-transform: uppercase;.. padding: 15px 5px 0 15px;.. grid-area: hd;..}.....platform-tease-image-div {.. grid-area: im;.. overflow: hidden;.. max-height: 250px;..}.....platform-tease-image {.. width: 100%;.. height: 1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\errorPageStrings[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	9440
Entropy (8bit):	5.164796203267696
Encrypted:	false
SSDEEP:	192:JsUOG1yNlX6ZzWpHOWLia16Cb7b4sUOG1yNlX6ZzWpHOWLia16Cb7bk:JsDhpNOWLiIb7b4sDhpNOWLiIb7bk
MD5:	9FDEE838E7C036092E81A4E7CC949643
SHA1:	364FC6C36972FFD803E5999AD501F3D7A2216FDF
SHA-256:	C6BF586821E13F7F6D6EF75AA82E69BD5E3E1336615C85AE513C70704F5C0787
SHA-512:	622BC3BD9F0615C191B03F2E8D018867C9D9ADCF1015DA5FB4D3462D71512B72558B32CA9F74A925C150B57FD232ABD48AFFC8D32128C50540DF02FCA8ECBB2B
Malicious:	false
Reputation:	low
Preview:	.//Split out for localization...var L_GOBACK_TEXT = "Go back to the previous page.";..var L_REFRESH_TEXT = "Refresh the page.";..var L_MOREINFO_TEXT = "More information";..var L_OFFLINE_USERS_TEXT = "For offline users";..var L_RELOAD_TEXT = "Retype the address.";..var L_HIDE_HOTKEYS_TEXT = "Hide tab shortcuts";..var L_SHOW_HOTKEYS_TEXT = "Show more tab shortcuts";..var L_CONNECTION_OFF_TEXT = "You are not connected to the Internet. Check your Internet connection.";..var L_CONNECTION_ON_TEXT = "It appears you are connected to the Internet, but you might want to try to reconnect to the Internet.";....//used by invalidcert.js and hstscerterror.js..var L_CertUnknownCA_TEXT = "Your PC doesn\u2019t trust this website\u2019s security certificate.";..var L_CertExpired_TEXT = "The website\u2019s security certificate is not yet valid or has expired.";..var L_CertCNMismatch_TEXT = "The hostname in the website\u2019s security certificate differs from the website you are trying to visit.";..var L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\f[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	14069
Entropy (8bit):	5.463097794201109
Encrypted:	false
SSDEEP:	384:965i091Vgd4mXRF0iXTWBsLgNDAPkQQc9wfimE7mRXUDZOGL:96AkV4hBBR9IimE7eiZO6
MD5:	36C3FD8149DCCF7401F393DEE450132F
SHA1:	FC13F8C9A9D6313F6D6CC647B141BB14F33F7440
SHA-256:	47B7A8710924EC2A6402C437F720B5E31DD3A5229A18DB70BADCE74EABA80C4F
SHA-512:	459A3393990122F4DD5BEFEDF90D833CCAD1B83B0267C0B351EBF8BA7BDDD4B1137C0CA39E0B33F6F4A889A0443D72234DFB31A784133FE2ABE0BBFCED22F809
Malicious:	false
Reputation:	low
IE Cache URL:	https://pagead2.googlesyndication.com/pagead/show_companion_ad.js
Preview:	(function(){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m,p=this\|\|self,q=function(a,b,c,d){a=a.split(".");d=d\|\|p;a[0]in d\|\|"undefined"==typeof d.execScript\|\|d.execScript("var "+a[0]);for(var e;a.length&&(e=a.shift());)if(a.length\|\|void 0===b)d=d[e]&&d[e]!==Object.prototype[e]?d[e]:d[e]={};else if(!c&&aa(b)&&aa(d[e]))for(var f in b)b.hasOwnProperty(f)&&(d[e][f]=b[f]);else d[e]=b},ca=function(){},aa=function(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b},t=function(a){return a};var da=Array.prototype.indexOf?function(a,b,c){return Array.prototype.indexOf.call(a,b,c)}:function(a,b,c){c=null==c?0:0>c?Math.max(0,a.length+c):c;if("string"===typeof a)return"string"!==typeof b\|\|1!=b.length?-1:a.indexOf(b,c);for(;c<a.length;c++)if(c in a&&a[c]===b)return c;return-1},ea=Array.prototype.forEach?function(a,b,c){Array.prototype.forEach.call(a,b,c)}:function(a,b,c){for(var d=a.length,e="string"===typeof a?a.split(""):a,f=0;f<d;f++)f in e

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\f[2].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10061
Entropy (8bit):	6.016310465259953
Encrypted:	false
SSDEEP:	192:r4g4Kfi5S/laP5Xf/KIHynd2pNZKZ81eSgFgfnsE8anpjnma35xEN:XJlaaIWwNgFgvsE8SpjmD
MD5:	ABE49E60BEC992D89C81C4A1785E52C2
SHA1:	D7EEB8D4EB5A3BBC1AFCE70458904DF06A4E34C3
SHA-256:	5089898270222C64C86E9DB773DB2C933BFC33A8415DE21BAA43C396DD682F0C
SHA-512:	BA8C9C320F462F7CD9043A2A4C9F29DACB9C77EC83BF69388786D0CE4C919C74FB987A88CC5C8944AD884AAB1A77690CC97342C2FC53EADED78604A829FAD886
Malicious:	false
Reputation:	low
IE Cache URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gpt&tv=2021031701&st=env
Preview:	{"sodar_query_id":"Y0xUYOuaN--8-wbml4Zo","injector_basename":"sodar2","bg_hash_basename":"mQaZk5sn6g4GER9MuINCjsV5VWWYcVySOzi9hB9JDGY","bg_binary":"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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\f[3].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	17243
Entropy (8bit):	5.505868826834888
Encrypted:	false
SSDEEP:	192:CjHKCW9Ipp/8KxXCHTnzSDgBR48CjMt0VyejG1KqJ7a9/q8Z6c7jatvF8gK6stR0:AcmxXwTnz7S2tF5KqJ7a9y8LasT1O
MD5:	DDF0BEA0843B16456D78A073B40B267C
SHA1:	D31CC9FB4EFE2CEC72D07AE3233DDA0585F2E8FC
SHA-256:	C49000AB30AAFE0549495B7D3EE3CFD818977F5BDBA7ED6A046C4E61E56DE848
SHA-512:	9FBAE559AB011A9F327E089985B89FD9D6DF9FB72C5CBFF589EEF7DEBCD4F081352A882891B796464FF8D943F53DD2440CA1FB739A6B4A1DDB6B432F0D3726A3
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/pagead/js/r20210316/r20110914/client/qs_click_protection.js
Preview:	(function(){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ea=da(this);function l(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}} .function p(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:aa(a)}}function fa(a){if(!(a instanceof Arr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	2.5771099760897718
Encrypted:	false
SSDEEP:	96:jBp1c9FyCMqatQUdv8Sclw6xak5+yNuzxDudwR54vrV9JZPi/vYMvxdZzjAmEW:jvCynqaiHSclL5BgswmPJM5zj3
MD5:	56DC4D94755959DF08704E9AB69A71D0
SHA1:	D3AE79475819A9195C0A00D658BA707D12ADF9EC
SHA-256:	CEB913412A0FC0DA78DE01F4DE309D3C47D38FE917FC94EC4F472D570CBE8DAB
SHA-512:	0FAFD538843A2F5805546B35DAA3543605A316233E04333DD935E8CEFA4F2F3EB7949C933EA6E2D536260DBAD060FB8BE4F07324B664DABC981D0EDB94C0777F
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/content/dam/ctvnews/newicons/favicon/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\get[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	238
Entropy (8bit):	4.75741157248866
Encrypted:	false
SSDEEP:	6:8NqAcPMBu6hppQeUjue3u2IqmhWSvFIufVX8n:BnibvpQJu2tm6ul8n
MD5:	218260555E239981A3B8B94E53123569
SHA1:	C548FF55F56D0DF6EFCF2DA0ACDD1591F6B5380A
SHA-256:	EC725C74D7ADEC470648AD18437D611E5451748455357685D5778C2DCD9113A8
SHA-512:	2F38D3F94C9806D98E5444D27E6BFCAC621335D42A84FD69752DDC0464498411F11F5A79DB5EAB6D3FFDB8B0ED880AB2EA913B58D5C8120D85835826B6EA14D6
Malicious:	false
Reputation:	low
Preview:	Krux.ns.bellmedia.kxjsonp_userdata({"status":"200","body":{"code":"no_segments","kuid":"OAo8OofK","kuid_long":"v4kkdrasc","geo":{"region":"zh","longitude":"8.52","latitude":"47.37","domain":null,"country":"ch","dma":null,"zip":"8000"}}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\get[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	238
Entropy (8bit):	4.75741157248866
Encrypted:	false
SSDEEP:	6:8NqAcPMBu6hppQeUjue3u2IqmhWSvFIufVX8n:BnibvpQJu2tm6ul8n
MD5:	218260555E239981A3B8B94E53123569
SHA1:	C548FF55F56D0DF6EFCF2DA0ACDD1591F6B5380A
SHA-256:	EC725C74D7ADEC470648AD18437D611E5451748455357685D5778C2DCD9113A8
SHA-512:	2F38D3F94C9806D98E5444D27E6BFCAC621335D42A84FD69752DDC0464498411F11F5A79DB5EAB6D3FFDB8B0ED880AB2EA913B58D5C8120D85835826B6EA14D6
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.krxd.net/userdata/get?pub=ca46aa22-e6b4-464e-9077-7215dc98bc0a&callback=Krux.ns.bellmedia.kxjsonp_userdata
Preview:	Krux.ns.bellmedia.kxjsonp_userdata({"status":"200","body":{"code":"no_segments","kuid":"OAo8OofK","kuid_long":"v4kkdrasc","geo":{"region":"zh","longitude":"8.52","latitude":"47.37","domain":null,"country":"ch","dma":null,"zip":"8000"}}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\grey-dot[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 4 x 4
Category:	downloaded
Size (bytes):	3687
Entropy (8bit):	3.5177256316388816
Encrypted:	false
SSDEEP:	24:Ral1nqNaWuzkUl29VYRUPMI/nrG6xXqXkdPHqTljxu808N:iqFak/9WmPN/allBlN
MD5:	7297051C7B5899EAB668DCE35A0466EA
SHA1:	C96C4AB8F6F9D08AA6734015D972D59E564C0F06
SHA-256:	5DB377B7863FD185EF5814AAC440BD4C6731893148F79BC40511FD5EF3425BD5
SHA-512:	CF9A8361288BCBCE71D2A08B6AAE93E6A315E3547F5B6C3A989576AA6533749B0173075C4B8B704851BD89AB9A22DFB4805D010CB56178BD2E116FD8CB809EB5
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/grey-dot.gif
Preview:	GIF89a.............!..XMP DataXMP<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". xmpRights:Marked="False". xmpRights:WebStatement="". photoshop:AuthorsPosition="">. <dc:rights>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </dc:rights>. <dc:creator>. <rdf:Seq>. <rdf:li/>. </rdf:Seq>. </dc:creator>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </dc:title>. <xmpRights:UsageTerms>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </xmpRights:UsageTe

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\h3-fixes-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	281
Entropy (8bit):	4.65219639593604
Encrypted:	false
SSDEEP:	6:8JyeFfXsyFFdC1HFMSE5XsyFFWZNKFF2VZARAsRGQHFMSE1FWZNnuyFFdJh:SpFfxFwHFMSE5xFIayARAgJHFMSEO7vB
MD5:	16E64EF714BCE2EE7CDCEF7D7535B95F
SHA1:	BB0584C74FD92354C6C6BAC781272B679E3BABCD
SHA-256:	4DBFB8ED8A2E59ED250B6EDA43E628DF3FE54EB6599732F5767AC551F9121242
SHA-512:	138D1FBA6CB00F5CADF27CBB1FECDCDE787DF6ABA4B52208DFD0E5A3B989F6D1B48FBDF31DDFD8B9A2EAB258EEC22DF514849D8501EC40F58E2CFBDE1C4BB152
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/h3-fixes-7.751236
Preview:	<style>.. .article h3 {.. margin-top:0px;.. }.. .. .content-primary .element.list.graybox h3 {.. margin-top:0px;.. padding-left:10px;.. ..}.. @media (max-width: 575px) {.. .content-primary .element.list.graybox h3{.. padding-left: 0px;.. }.. </style>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\httpErrorPagesScripts[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	24210
Entropy (8bit):	5.451485481468043
Encrypted:	false
SSDEEP:	384:xPini/i+1Btvjy815ZVUwiki3ayimi5eqBG1fm304Pini/i+1Btvjy815ZVUwik5:8i6+1B1y815PUNZ3ab3fBK9i6+1B1y8d
MD5:	7B6C8BD51E49F7F56E2B21311D0EA59B
SHA1:	EDB0F7D21BCEC6C48DEDC14E9ED41383740BAE37
SHA-256:	620BD33A4E0358498D9429FE2DBA00F85A86D6059FA796B482E2A9F6B0794F2D
SHA-512:	DD1D524872EE165D230BE5B3872DEE108B806AB684AACFA955F07B7A87C1ACA63FA3B59210442E1E3C9A2D33409583E0AC3B1A6A0D4EB91BBEEF62D311FD1BC4
Malicious:	false
Reputation:	low
Preview:	...function isExternalUrlSafeForNavigation(urlStr)..{..var regEx = new RegExp("^(http(s?)\|ftp\|file)://", "i");..return regEx.exec(urlStr);..}..function clickRefresh()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..window.location.replace(location.substring(poundIndex+1));..}..}..function navCancelInit()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..var bElement = document.createElement("A");..bElement.innerText = L_REFRESH_TEXT;..bElement.href = 'javascript:clickRefresh()';..navCancelContainer.appendChild(bElement);..}..else..{..var textNode = document.createTextNode(L_RELOAD_TEXT);..navCancelContainer.appendChild(textNode);..}..}..function getDisplayValue(elem

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image0TABT7BG.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x349, frames 3
Category:	downloaded
Size (bytes):	124603
Entropy (8bit):	7.942140237940309
Encrypted:	false
SSDEEP:	3072:1CeU5DpWJe96i8ZB/Y+Mt4iq/8fhfq12fm5t+ukw6QnDG4z2m:UDB849ZCRMHqUhq2X7cD7z2m
MD5:	237727717980FA4CEA417EC41246120E
SHA1:	53DFDA6EE930FFF09887C41FB1B097EADAA115FB
SHA-256:	66482CDD26F89A9B2C44782409EE4919D2656A2B7F8B93DED573E330ED53093F
SHA-512:	3E9132381A03D8E85E2A02144E55B1025E487A887FA4840BAEFCA48E334C016F13A8953CF9A133BDFD0F98DCE6DAC70B10649109DA11E0BD93982AE300156C1E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5271121.1610994383!/httpImage/image.jpg_gen/derivatives/landscape_620/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................].l.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..4\|......&.Dc...p=G..l....ct.!u.i.f.k...*..?h=g.......O...t.X^..]..b.B[.#......~.....h.=....]...I.C-...N..^......).l.$7>..i..v.7%.".Vr.8.+..mc......7W.....6.I..../.k.....>...w.>....Q..6.m......(;A..W.V?..........C...#67'...{s....5..Y+E..}O....sB...\|=.6..\|?1.....~8.....B.Z..i"...zs.3.`..U.)....\|\..w./.....[hp..i.W.....J.a..p......K..'.5.{.<qs.]Em%.-..)b

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image1IHMBIH9.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x349, frames 3
Category:	downloaded
Size (bytes):	95272
Entropy (8bit):	7.9541148437275435
Encrypted:	false
SSDEEP:	1536:rp88epWwoRcGgOaobwAharZkjCCi61GDPo1bQEW16na5RM2KlFxtiUpt4xwBAt84:N8Zpuge7HqmGDkbbW16vzjiUp8KAD
MD5:	DE9AFC6648814B46A1475A98B977BE98
SHA1:	43641A85D248B5ADAD931606AB3411D49DB07B2A
SHA-256:	93FC4972B4C55A8BCA88B0DF32B6009E52ECD660379EA4838F991817359E2213
SHA-512:	6AF468780E169A88D64F2A1A61B90D27CADE356CDD4521718FC01C649143AA751C6A1A3BED3593D222969CFB0ABB82AA29CC7B008667A0EADEB7CF7D566BB672
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5232020.1608051112!/httpImage/image.jpg_gen/derivatives/landscape_620/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................].l.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....w.l?..F...x...+.?....\|U.~.h.&.9.N.)M1.[.&..........F?..{.....Ld..E........r.>....z.'..........rp@>........5...'....Z../..x..M\|.Miug.0......n;...H..f..W..^...O...?...k~#}B-}...$.;.$w +..C/.I.......-..iw>....d.Y....`...3g..r+..x.M.,<Ay.........+..Jp...9U..........4.Z..0i.H..4w".\*`deV"..>..0{...N..[...W]O.4o.Z]..s.;o/%.o....8.;..........u.WU..c.......F 7.H ..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image21VX98Q2.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	10034
Entropy (8bit):	7.898036356035345
Encrypted:	false
SSDEEP:	192:UjK/BBFCResB4UyfTHeri1D15cAC2aW8koMuc4D6hvHfa5g5sZ6ORg:UeJWReltTnX5cAC2a5k5uc/hvHfl6Z6D
MD5:	D34C0BB94904DF8088586780EA099063
SHA1:	3D7E74DBBF52C95EC70C46CCB7041C1A22A95287
SHA-256:	26E40402D5E021B62EC1B662EB47F513C2D60EED728453A6767DC87B9352409D
SHA-512:	432930DC8591B10BAAE366A6B238B600DB5D43B64055632DA22CFFA9787E810B7103FA11D4187BF58581237266956F033F97F12290A8C21F100B61E7C5E1C6F3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353552.1616120929!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....BM.O....L..\|W....\|#..q...._Yj.>.5.st..\Go.\.23....B....xZ.....5.[J..>......jV1.Z_i_h.4.-..+e.Q..[!.w..r.."......{._.<g...7.......q.......-4^j...B.k..lY..F...1.$....]wW..s.....k.?.>...WgW.k..Y..V..:.R]\^.#...,n....k?(..*....Q._.WI.IYz[...y.G.....jm$.n.....\|......M.~.?..'..Z...{-Vy.6...N`.....V.H..8n#.Udd20.\..x...>..A.$^...!O...H..}8x.vZK.jp.Ki}..."..B

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image5VJCT6LW.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	4190
Entropy (8bit):	7.797721087776455
Encrypted:	false
SSDEEP:	96:d6E+A9U3uPDgxeqelbl1I+QZuRdOWCA7g/pxrugiIJ1bdvbWI:UHf3+DgQqibl6+5nxCECrNtJFdvbWI
MD5:	ACACF1275135224E4445BAFAFA980579
SHA1:	EA5E32898BD6A26FD9C4D4FCFA438800D09576CD
SHA-256:	E36EA13DA37C74C131941F4C2B11A838450F017AE4E48DF79852D4C99F4AEFBE
SHA-512:	8E6376F85397996DA4AC11BD79D8798A01EBBEAEAE3A8293562BB2CA7C866D76910FD06E47556CE7FA0CEF894CC1B7FDA2B13CF02590D339D5024A5A7F6EA521
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4588552.1568222675!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...?.(...+....{..\|6..~..[..Dr.x.I.c.C. o..QJ...........,.O..k.\j....\|?..XI..g.W=....\|......V...3.<.N..K..>...+.s..E.S...QE.l.NI.6...n:26..i.R.@l...C.y^Ck.....2.3..N*..^.. ....h.v.._{..;.<.z.3..^j:+)0.(....(....e........?..Q.....T...+.[..$....~.....>,i.:.......:_.5...KV.f6..P@U.~b.....o.........C.+.......tO.WF..[o....0.."#c......>\._....\|.}....m..........1.hZ.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image7CHI6WI1.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	10450
Entropy (8bit):	7.9180964087466075
Encrypted:	false
SSDEEP:	192:Uhxt9ZYu1LBzYzxKe2aCFSG5bLl6qiG3VofB+yJV0/n4P1wf+cPpMMT:Uhvcu1Nzo72aCF53l6V0mBLk/4+fNpH
MD5:	3CBE1F6F70325218838B570459C9737A
SHA1:	6E3F96C0496299E9BFE5A09A8F7AA991CEF9E875
SHA-256:	3AA1CF362C8DBDB94CB6F85EC276B7EDEAB9C06D9D818333D7122BE03EB329A1
SHA-512:	508D0907A0877B0AC8C28FEBEE783C8C71BCEDFCE0CD05FE08880846886FA57D78AC55F63E76EB532671229DA0E17819A8967530C758ACD59CC321FF2613F1DE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.3701934.1512080452!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..8.....Af.1by..N..yK.Yp...i.T..[.~Y....s..\|I............<C..oc.w..l.%h.C.]....:.gi#X.K.O..3..^..+%....W}5>.H.4....._..'...Y..x....._.~$..-.........[K...w.k..#.....e...."..h.7.......o...A...{[.7.....v.38..[..8;Y.5......#...ui<K.D.:....S.f.}g..K...Iu..c.dJp1....W.j..~.....g...x.....gH.P....eu.kr"F...(...AP.#......}....9.<=Z.*.QQ.F.........e$.=n\|.....~kz

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image9F4MYJNS.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	143116
Entropy (8bit):	7.970402667572335
Encrypted:	false
SSDEEP:	3072:yZzpxjiPdgJGdQsTf+aYWC9nB3m8FbDpax+Mc0BjzqERimEAypwZrWgy:kzg8GdQsTfah9pagJqzqmimEyZrWgy
MD5:	E1D55905F4863F0C26A05370F824E2F1
SHA1:	CC7D38FCF9F5B24D69112F3B8BFC1BA453EAFF40
SHA-256:	36B92E07FEC0BAAC48370C1861F7EDBD90F6F66787DAD2C9B8674BF17EC067CC
SHA-512:	115BC97F50B77F7527F59809554C3276B07555E71FB83F1B848474FBA1BF9542902662C217896E77DEDA53258C05751DC73BC295EB33C9B3E700C5F73A6C52EC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353631.1616127163!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..<....A........J........>.>O#.Iew...'g...D.M..&E...?..0r...R._..#..U...i...c..2B9..........o.A.h.......&;..B.De."w..f8..>..F.1.Uo..lD\....C+c...s.]....d....vp+.[<..`..Nx...(.G...?.{..\)..V..s...{..lUr.FF@.#.......X..9<..U......\.g.?.j....9.B.pzpk...g..aQl.....g..;.}.r.X9.N!.&..C..~#...I..[.....k.....T.......K..5..$.g.k.......<.g....8....>....b..Qv...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageA9CKIKGD.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x349, frames 3
Category:	downloaded
Size (bytes):	131998
Entropy (8bit):	7.9486603803735205
Encrypted:	false
SSDEEP:	3072:eM8iYMc5KKt3hQ4UifZk6GNnjyeVOX3izau5LEZbDzMxWa:p8iYP5PhG472DNnjyeoXSzautE9zM1
MD5:	1C7C3FCD6B73C3CD58A746B49D65EA19
SHA1:	080915F576AF59627952FE02462E80EAB4A9226A
SHA-256:	91BF2D999AAA0EC5275CAB936A6696ADD7AB4BCA83893806E8F651370CDC9581
SHA-512:	45DF67F9EAEBE1908E4EE2B95FA31AB1AC6EDB39229631FC23FB19FFB887D21B0E9C29E37F0F3E159677009398611501C9303DD2C672EEF22A6C42A06A54F355
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5189079.1605371650!/httpImage/image.jpg_gen/derivatives/landscape_620/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................].l.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..Z:.0"H...G.....m....~.y.U......z..k.!# .zd.:..:...:Vhe...py..R..Fx...l.P.w#8Bs.c..Ap.o.'...P.G.O....+.j,.A.....gH@?..z......V.JIcrG .d..j......?(.MW.N.....;+..'...T.a.F..v..=;.d........E..J...o.8k...7......4.F.....s..-nc..D7.C).# W.?.n...m.z@...O..c'..N!_....3...@.6\|i.......?..:w...p..O.......Ro._..mO..._..;......X.......K.y....a...Iz..E."...W;..5o.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageAEVCMMOW.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	197750
Entropy (8bit):	7.966494579750579
Encrypted:	false
SSDEEP:	3072:0044faETBzXGzLTO04ZepzKTHCzwjyvExvkshUSeooCelCTK:e4TJGvTO2pzqizwyQFhelXl1
MD5:	13871D3A878107186E430A9166359A5E
SHA1:	45348E0541DDCBBAE5D7A3E3DA662064489AFA62
SHA-256:	43229D3056D5ED3A555754989BF358AFE4FEF02788FB8EB076A92086D784DE66
SHA-512:	3E86B70D83BFBB31189477F5E9DBFD8C103EADA26D5361B1313DCC2F76ABB95DBBC16C6F55EEFEB3D1869724FE282D35A6FBF4645EC12BA37E1160B0EE8700E3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4821090.1582242646!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....A..`.2X.Kpz..J..&`.;.m.%...F......u.X.S&..........Q]..y.B$X..."..9.........9.Z?yV.5..hZ".4$.S.6?...t}Nx.j..(......A%..lK..P.3.A?.j.,.Kl V.6Y...N.@.......-YX..:.\..39.,..G..H."s RI8..+R8....s.r6.-...s..>.._.cQ..}............9....6.#.g.*.'VR.W.9...(...l.x&..7..;.s...qO..k..l.%.m.....t...........ii.Y..\.....bl....8BS.Z:.S.r.(^kV[..]Wu....J2...V..I.d1..i

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageB4D5GAFZ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	11983
Entropy (8bit):	7.92547344770499
Encrypted:	false
SSDEEP:	192:3c+zaPAxRFQx79hfncGZCdYybQODw/Q9mV7FVP95aQEsIfDG58W:3i0RFC7/nwDbdDCQ9mVErG/
MD5:	D17D6FE481DD1C5BA725DBF6C9139A6A
SHA1:	D61D6B78E6CD6AEB11B6EC02C188F3B3D6901CAA
SHA-256:	19CABB8F46B7F550FA0E17BD05C98E75A168E8077B72091FD51D287323E97312
SHA-512:	85C6FCC63A8A331831988AFF2B0A14428E4121A648B6321C48A87DE8C98CF7DCA498E16A1EFF56FE4B0DA15038F21EB741074C8D32BD0778047EDC6ECE1D6B9C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5325567.1614350564!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....,..K{H"..0.....U.\...J.@'..A.-(..q@`;.......f..q...u..R..T....X.e#..N....f9BMX.$N.K9>.S.......wsY.^...6..n<.Y.s.m.]-G..e$.5#[\|mirI...iY..L....5.oa..0.O.9.<.6.h...q...._A.i.f...=...a.*.I..!.x../..N..)....-.m5e{...&.......HA.[+v...4.Eo8.?u..M.....j-m..Xcl..\.}S.(.......+.[.......Q..V....P.L...+..f...G!...3....S..Rw1..j)'.v.z.......1.....@..I..[.5..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageHHW80XGJ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	161250
Entropy (8bit):	7.939678481160478
Encrypted:	false
SSDEEP:	3072:9BArTBrxIhEu/95zB2ANvmuuPF4j/yuglmYo9HQ8B7z45F6gMeFIYB:9B2Td/4vzgGmzPF4OTgDgM6
MD5:	CE805AE9CDA025EB544C69FFE0D013E2
SHA1:	D7C93BA7D35632180ED71DF6837984DFB31A8563
SHA-256:	63AB0C41D9E05998E5E16AD85FB23DF4B5C23B01C795AC17B016A199B500298D
SHA-512:	29E0ADE92114F64005AF58BF626BA96840059BEC41EA1FBC2DFE61F79742F469950982A3BA6BBABB82C5B15AB522803006D84C9C218203EFAA1BC28C322E39CE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5202530.1608057610!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?........(....(....>Uw.QE..V..AE...$..Wg0*.?...@9.....-j....QTi.nz....{..... ._.~"k:>...w./t.$....Ov@.....{........"....'D.......T..X./.....>...I.G<w..G...BN.}..~..\.\..<e7...'..oF........,...>....._..\.Y.s..]m.hf[......{...(/.y.z.=?C..o.=R..o.\|K.:,...&.....e'...PH.q]4.lU9.C.q..p.+..'5.v..Wk..3...8......o-.cW....J.!.2.. ...t=z]9.7.5....Y...................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageIHOTKOP8.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	228823
Entropy (8bit):	7.959464891533552
Encrypted:	false
SSDEEP:	6144:spN/EILkHwSylKcAsdR4QvNMYmSy9utG7EE:AN/EItidsblMY8pAE
MD5:	600C909D661F40FA5653B6E17E56CE87
SHA1:	E9DBEDDFEEC4E050FDDFFD6CDA915DAAF9E52FAD
SHA-256:	A5D6238DD95C0E32E1BF5FD32BAB7B8703D69B0615CA3F3C6340349D1437F83C
SHA-512:	B8C8D6A2F7AE1C3B9C529E38BEF7FE1CE6A6C96A9FFF9EFC8789CB257D695526476659E439A89083972A94C7EFD3D0E7D3F7745F95EF3E4CDFB25C8DC485FB8B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352034.1616055622!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..E.&u..dP<Xx..p..:.9$.l.z..mV;4..]6.K.V.:]....<a.V \|..s....^..%...]..Vo%......m#.3..#.f..M.{m.[..h.R.u..d13.PIA...{g....NT...g./..p.Mk...M.r........o.!....d...O.'<w.^.._.j.....6..[V......Tn.&.....x.d...%...2..2.1.(...K......z?...x.\{.......'..5....b.....J/...k~/..R%..{l...o.'1..>.....e.Q...)...b7W....A`GA...Q.H...izv.j2J..+!...X...F.0ps.W..S^.[..Mf.L.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageIXMQNDK4.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	8474
Entropy (8bit):	7.897340639285321
Encrypted:	false
SSDEEP:	192:Uo5e9RL1SfnJv+dVeVUUug5Vol4Nx7v4gljObEeafGHzJEEX:Uok9RL1Sfn58e2UP5akDtePNEa
MD5:	C0D97E999E4FE6C013E817E46F502CA1
SHA1:	6ABAE5F2C6708B111E07C58CE5CF400C75AC7FC6
SHA-256:	515EA0E480F01CD5189D4F95FBF9E96C9E5C67E63319895ABB8770E2C623E329
SHA-512:	AF471D92405751B21D9F60D745E5DDAA5CE5F05A490F99D09D4BD488AADBEE3FAEA7A40703916EF77D450056A02A42D0A1623C2149F4D78984D3329188C861A4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.921770.1615578393!/httpImage/image.jpeg_gen/derivatives/landscape_135/image.jpeg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...N.../ .3.K.r....2+..K....e.r/..n?.........<}=.....;...k.u......<n.0........_...k6..S..IN>.+.c..\|S..5...}.....dX..VK.O..Y....T!......wR....6......]i....z..u./...e.....yRY.Iz.z]...j.._!.:....).1...+gL....x...K.U.....M.....x.7.V./.4......d../.........V^..tq..i+Z.@..!H..`y..CP..Du.k.."2.T3....A=....].jsN.^...w[..+.?.[.~`W....'...........{k.}&....O..]

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageJ61WEBSV.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	12801
Entropy (8bit):	7.914957962109364
Encrypted:	false
SSDEEP:	384:Rv4baU6Kg47FH7qxXZpQfZnjuAtQbTnLpk:R6Vn7x+JQfZcbTlk
MD5:	1C029B64DA034B12CAE08812972A769F
SHA1:	5AD4D6E1B270E45F62FA38D2B86C83F0D8FB36C2
SHA-256:	5ED5EA3165DEF0BFA50DF2E6F6D073D188CFCDD23307744D5273DA5EF329A722
SHA-512:	D2933436D656E111AA61434309AB72BE164E22B1A5206092E741DD52D5538FF81A710E4D9D4F32F0091FECDC82BE3C60430C4F508299F57175E399F1075F62A9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5237698.1608320116!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...?.....\|3.....?....._..?..q..e..A.y..W.....l..+_...D.&.'$.-}....g......w.4.mX.1...O8.......p~...1_...>3......_..._.Z......-....S......^...O.\|w.Z..'..P..n...XI../.S..yX.!./-.k...`..N>K X..).Bz.8..{.....}.-....V..k..o.....4.?O.-B.r...\|g.p....S.oz.......%...4Z;.......=i..;[.y.A.=....G.B..!.._..).[...4..\|=...awg0.{YP..=....~......;H....o...V..j.u...[.v.[i.....0....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageJAMVN95Z.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	8494
Entropy (8bit):	7.913856474971609
Encrypted:	false
SSDEEP:	192:UFVqHY8MBS3Iq3tbTAXJ8PF2S0ZqRm4Yl1mY7EuOwqaru5Ac+x:UrSY/BBq9glSuNl1mYFOaa5Ac+x
MD5:	9764B52A6338653953D6AAD85B613803
SHA1:	9F6272DE2B1BC82C764A326F7D1068507FA85047
SHA-256:	C3A65D45A1AA48A8F8DEDF3842122BB9FC0C8FC26DC5E20AACECF2E0226D547C
SHA-512:	0515E4291CF9F5234BAC5FC45E7372E752F209FCB4DDA889A4CC5B69C80203745C9EACBE3ED9C837364B3E2351ED14D0BCD07998163959765C400AC3B6239340
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353085.1616103748!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....t...$...$g....I.....,......6....{.....gk...4....y..C......:.=...%N....4...mm1l..M.{.'d...q..je....6......6.......G...> .......\|.Jh4."1y..p.\.......>..@[../l.S*..=@.A..j9....Z.z..eo-.l.@....h....U.4.....O....(.?<b....m."K.....O..;+...<....q.#\|.{.4..x.\.H..u.y....v1t=.....Ce-.&x3...q]`.e.+......\.<...1]..~ h....0Z..>B.!g.L/..Z.Au}CL...9M?.O....X.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageJPL3UY1R.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x169, frames 3
Category:	downloaded
Size (bytes):	25151
Entropy (8bit):	7.939680810830817
Encrypted:	false
SSDEEP:	384:FLuq7DYaKV3zRN5IZHslBcSYFznjtGoV/pr1BCjcVy6oOi/8UPqC8AmNIMJS3Ey:FSqnmNzREHsl4zQoVheQE6SqCpdM40y
MD5:	6B60A8A902C1FDABCA6A470A15575DA6
SHA1:	96080FA75602FFA53581C1083BE1DDE9F5FF0636
SHA-256:	F37F6AAF37EB3D4787862A21BD35C5847E1FFC6BC69E9B361856F4E05FDA760B
SHA-512:	BC6D7D219FF9E3AF48F35EB39D99682A990959DF5EAEAE6A619ABA8FA9D25DEF2C3A1B63B46C9950C06B37F4EA76753D2D86150827F27EA3E6D401AAFE250B04
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5326912.1614399657!/httpImage/image.jpg_gen/derivatives/landscape_300/image.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....y....x..b...#.$..}....va.I8.../r..6.[$....iM(..y\|.g.^-.d.... {..~&P.\n.q..W.......H?.\|..t.+....0z.c..x...c...s.8$....G.T#.u$u..f ...z.....(.x.OS_.SF}ZQ.V-...7...5v3...@..gA...g...}j......7s.z.Vi..;B.`x.23...5qI..........T..2. ..w?.N.e......[jE.%b.`x'..3....p9.d..p.`..F...S.$.QB.>.3Mmq.OBbr01..s...w..wg#..)..H.............Ote....c.x...UY.... ..85#>.F

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageKBHTL7M6.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	7727
Entropy (8bit):	7.906719886620431
Encrypted:	false
SSDEEP:	192:Ug77LJGhj0PHDupSgQ6HnMqxxWjKxIEHOOBcXz0:UwyjuHUlHRDW3EuRo
MD5:	85436F5D620545BDFDC507E821B87F3D
SHA1:	B5DA61DB927AFAB53FC9E21047713818C3AF9281
SHA-256:	E5153D1DD047601A5D4EB261908A2D2694D3683EFBB5C48FC15F8B732B0FD910
SHA-512:	1B26CB57CE3F7905D267204EDB755FF8AB899143DED529167227516E38BE19166C7AB7E33EE75E3DB8F77BA73D0F522D28A4C56DE48379B19705ED786DB19114
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5350339.1615968703!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..>5..._.>.jK......,..\^....T.q..>........*.4.rHs.{W.Cq.}.....f..i..u..t.N.g...V......?.5.F....w.?.u.....zd..v<.;...@......9.[.w.g.#$.+._y.~._.J\|[..[.........5.v...yYpID..z....];....^...f..Qxs...>..[....M...\.m....$._...d.O[......Gm.}&. ..RH^...&.2\.9<+.>m......i.lk../....m.^9..\|.Aeso.`C..R...e`s+.X[...c...I.,...\q.......s...iai..)....jI..W.Z?!.3....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageKC07ACG5.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	13321
Entropy (8bit):	7.947029269856145
Encrypted:	false
SSDEEP:	384:3ZFRY5AGzzLXzdPYE78YcpANuo6TNmpQ4T0lEEBhVqnh:3ZFS5Dz778YBe+0a8a
MD5:	87E5FFD6D3E123F3CC7FA34F9EF621C3
SHA1:	9EA79439ED2B4CFD30F7A32B08ACF98F02ADFD51
SHA-256:	64D1238A9A61436356C7CE4A027960E68400C4FAC65C4520125BF28B36D11CA2
SHA-512:	A82E9BA334416CD3A70A14B5DBEED6160833D31FACB95EEE3AEC52713229EC0DD62F1DE601AB8281D634F52FA29FD9AADFD63CD1B7BCE95E2708DC30D9D37A9D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.838894.1516820759!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...\|Q...;.~.&S._*].RG\p...J....&Yme...DT.._.x.7...n.2.._e.ENJH...<....5..../.t.i.....C....O.y.+.?......WIsk.x..zu..zn.... .l..... a...8.....+...H....;.^9..]..HW..).}.u..3...A..w..q..E.ex.4h...........?5.....X\|%..>(.<...xO.W....i\j.[.$E...K$...3...A.>....7.>.O.>...w.t.........C/.\y.=..#:..@.B.$...........'.. .D......5.<......s...)U.M{..Wm.......C.K.. ..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageLCMZE75G.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	9545
Entropy (8bit):	7.906667318343591
Encrypted:	false
SSDEEP:	192:UunwRokylRp/KWZAb7ooiptNhGUXKaxT3+FylqKhJIJ+lZu7:UlRokEDKQoytHbgKh6CY7
MD5:	10B5E27DAE3D20E0B87EC033C59181C7
SHA1:	CB123B529CC5797C4F7248E22383E7C4C33FBAA8
SHA-256:	7EF06BBE7173C3D08A8AAD1A2131567A4A2C3E3B7F151308989BA0A285CB550D
SHA-512:	A4A3C2FE3D369C5608FC66EB08DA935C7034513AB21FBDD99AE30BB70504CF6FEECFDF2F92C17C2773E37F7A3876646DA6174B9F33092794B6C2ECB1FC5D08E6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5276951.1611267506!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....u.i.5...V....I=.....m.......[..../.x.P.....]..\4O...8.q...U......4..._P..%*..w.%.He.3..}1^..=cE.k..w...1I.-SR..N......k..RM.T.Y.,A._Z.....u....J.SKGm.....N...IT.........>../....M]J..?.....S2<.v......y"..._5.L.7~.{.......>.&...5.Of.....$....~...._....l.!...Y.../...>o..h.!.........r..n.g...$.@...`.:.......}...p..S....g..^..W...C......t../.4.0Y[Z.@H..0...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageOH0QYD51.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	11614
Entropy (8bit):	7.930526481326445
Encrypted:	false
SSDEEP:	192:3LPxmBBbbOmR++90URvA3QE1rP0O1DDCdtp3iq/sOFpN:37xYbbK+9ZRx+rPB63LsupN
MD5:	5759AE47423DCCF131DF4DD0D15FE397
SHA1:	75C4F628E185E1C5F3D9292328CD97A406F3DE7F
SHA-256:	54050EA183D65CB32D5031B6DBA393F5F796E9F87652BE6EFF4B79A519ECC6CF
SHA-512:	03F9DBD1622F5982AC85790E24B38449E61C7F515EEAF5ED394633859B8CB198BAD4ACFA90826666024AEC5702135F741A496AFB25324C0BD9EB57392C9E478E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5318415.1613960245!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..8..99........'.&A.......\|...i..B..c..q.....?6.V\.....!-.@..~....'......o.f.@}.W.O..q.^..x.e....i....-...z........}.z....DEo.a_Ki..*>.w...es.&...0 .........x5.O.p}.Z......kZ....../....).Q...<8\|..`....F...A._9.g..G.c.=q_A..F......w..<....J.Fq._ixs.2A.k...#5..$....8...^..h.`c...\|V2.<...04 .+.......Z].s_>x...i2r.9..Z.Z..e/.=k...Qdb.....bh..H.r.:s..`...w...$.^.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageOQ447ZIG.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	10131
Entropy (8bit):	7.928594442631555
Encrypted:	false
SSDEEP:	192:RIuowrRGdfO3rt0O/QBaFykA2i2v+88CH0OUH/ah90MoDlCbYOD66EYS:RpxdGdWwapSCUOWahixDlgHE9
MD5:	1C5F1C10240657CCCFB0366B5FF02E6B
SHA1:	88D259D63D11A075752395D0253B2425D6A253CF
SHA-256:	3E47E8B5CA5960E485D83012C8DA0789E4B7E22A7C77CFEAB8E594D54435304C
SHA-512:	9F3D90989C9C746EBFBF29EEB85F894E51B065C3BF8AF0F9410968A85EC8FCE5D967AA151D24A37E2D33B98A8DE1C7A784F0491515175059D3919FFD2E9D006F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5180548.1604925010!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...z......d.Ce}.f$Sl.W..MA$.....`.n.~n.GH......Z..n..g.k...=N...#..=.......K.. !R.t..E.W.._.......Y...9~......0\|>.<...K..._..s.......K.......A...l`.........<~3..4]SP6Lmu_.x..!u..5....e.g...=r1......iS..(.l.f.O..5%...V.ly.A ...+g..K.J......Ucy...j...wzf.......:F.....tiDk.&.......6..\|/.x.Y...h...q..\.6...m..E%.t.;..[h.{lH...P.@....../'..u8.;.R......O,.....f-.I

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageOVSU45TN.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	104901
Entropy (8bit):	7.967428327558389
Encrypted:	false
SSDEEP:	3072:FrMqByrR94Ie7u1dnu6CLE9PJYQqcUKJ5fZxZC:FrMW4RbLcE9PpB5o
MD5:	254B52ED7FB2608541B32F26494CD47A
SHA1:	E0F4EF47C50C5A8E769576F7C025BD23DFFA427F
SHA-256:	7A9336B431AB5D552E8FCD1887C52DCB3D5DADD27853C72AEABD1B5B31E26709
SHA-512:	E19BBCF9712B8D6B3C55789623EBD0276C6711FB598A0ACA1C98BC96ECAD3BED354513C1C6EEA0F870E0BF3E67679E9AF7FD37709B5B865AADC96ED88EE1DFF6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353523.1616119404!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......Y..n....k...C.. ....#5............5..i....~. }s..8.kFn.-.B.KD.T`yg........../...R.i..'.R..}k......1.........R9.c...........XYeFAR>.#.Y.:../+..}k...P.......9.uR.v..vn?/.0@....cj.H..w......i..]E..\\|.Q...4.K....ke.=9....-......Tb...mu.<..0.v.....P_A ...6...W.J.<...>(22......j....8)JF...^(...V....^HWn...K.K.t..3W..c....k^H.....S.8a.5....\..8.^z.O(..0`

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageRH0DSISV.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	9574
Entropy (8bit):	7.936582612368916
Encrypted:	false
SSDEEP:	192:3KKBQ3ynB18KICJ4Xw/P5oSLuZTIMR2mLjNrWmOXVFsG9v41sB59GDYu:3KNykCJW+OWufI8WmOXVFHv4p
MD5:	0FFCD0BA36B69EFB8592392D1F1D2CDF
SHA1:	316CB0950A651070CC079D7C12CF47BBFBDBCB71
SHA-256:	26128A11DBE09B4816983B0194BD5E0D10B6F3546CABDA0EA64810A25F82BB46
SHA-512:	A56E9190AFE257AA0B51B3FE42F16E1DD010AF75A6F6ACE5BC7C567FDF3B38A639235A93A053B9BCB24FF49384FADDA2C79D4EB1F9A6F1C23D7993E79A411468
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5343689.1615500577!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..B...."B.\.L}.U.8a...g$FH#.N.C@#1........X....W..H..z......<..m......Z.-...I."..D.u+}..,9.+.ueg......NA.s..C.:. .........:...zt.T%..x.>d. .k..U..\|..6N..w>.V..... ....\|.....q..F%%.../.MqV>...9...4`......=.]....(........%w.6.#...HWpk....6.[do..O...u...b...?R\|..........!..M.....KKV:.y..[8.g".....xQ......e<d....Fu....l.^F+...[..Q..:...O..o.WZiid;l.!..s..Z>#...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageRIBHHCXN.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x349, frames 3
Category:	downloaded
Size (bytes):	194770
Entropy (8bit):	7.937180542049437
Encrypted:	false
SSDEEP:	3072:d31A203EnblBswzs3vt95pV9f/UppTizkBSuUe74bPgcjyWA4VrN7:dLeEnbTswAf//fspp2zk98r/jyWA4Vr1
MD5:	0179076B500773782E04541C9020452C
SHA1:	9E8485CB3FDB46F0DC85C96DBEEBB81D6CA5B5C2
SHA-256:	117F8B78CFFB78B561BA05504C0FDCF44F9600780BC13E280723A841E68D707F
SHA-512:	3C1D377C0A17B6F13E747FF0C8674A83242F21A8F414B1B6DCB06689CBEE66CB077FB7A684E4DD2BF9EADF4290E033E809287617C7CE05800E13895CE9D3066F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5237841.1608326114!/httpImage/image.jpg_gen/derivatives/landscape_620/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................].l.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....u.%.ln....V.I......`..}0..qY>'..eb......,.\|..7..s.\g?/\.Z.$....M2B.h....J....I....c.A...N9...m..C-...R.j.w..S...S.....}.=$...[Ej .d......\J.4D6Cq....+....V.F.O.o4.<.....3o1G#.......r..6...Eq$V..3Aw hrY..Q...Uv........~T.q\|.[...Hn.).D........>.'.R..Q.C...5.>@.....ZW..l.]....l..`...Fq...Km..t^Dk.\|.-."<...8l..m.q..?..G....]A<..'...X.??>cK...J.l.i..EK.....(

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageS1MENLGQ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	105769
Entropy (8bit):	7.953585024070889
Encrypted:	false
SSDEEP:	1536:LS5dDRDyKVSem6aoVy1gvXtkZ5RnwyCxGsJoIUE/wm1/1u1JM4lNbZHml2Hz4QLF:0Dyw9aCVdkXmyCxR/wmp1u1tZZH5rz3B
MD5:	61376D019FD3C6422A1C16A3D6B1F50B
SHA1:	AD5B5AC0F0AD89EAA098831E75434C336DD2F3D9
SHA-256:	3E8D11BF457E6510AE2E721500461F2E191B70452C43A8BB6725ABAC06532515
SHA-512:	331F93358EBB61F84D0E9823662195B2711BEB241F785B22C320BB9EEE101A7BFEE7F3FB042B51A205F74FFACD1332240D38CC5ACE3F8873DDFFF7768DC2BAC9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352863.1616095916!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...J.1..L.U\..g..Z......S...c.W....A...&...(....... c.4.I..A.[Cc)J..\...H.4.H............=..gv....5. E..n.aFx...g.A.....A.....J-jD.@A .?Z..~c..K.O'..T..p.#..b..fDW...\c.5....#.u.;.U@<.@..Yr...9$`.\8..ZoA...R*......<.f......W.'r...Z.......Q.d...+...3...Z...<.LVc..g..W62.5....<......c....I....t..e?\..eL.....8.:..W.s.....U.].............6....#.t;sS&F.Q..d

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageSH59ZIJT.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	164008
Entropy (8bit):	7.962056815720606
Encrypted:	false
SSDEEP:	3072:btawiLfDo0GHNl4cCGhLPQ2exrQA6sGj+qUUYrDhKGyHwaDtxDDI4G/:btawQfDo0GtlXC6LTd6t5Qfk/
MD5:	57D267B8E8F151BB427254C2696729A8
SHA1:	35F8715B42D445BA49B6F7E358803F4D5F6BE24E
SHA-256:	BD002AF94B2A2F64BC5CA73EF37672C529B055A65DF4CEDB8866A3A0271ADCA8
SHA-512:	D16877CA0400EA118BF4B8FDAFC7E6D2334235F0A3B62552A92BA75CC44424DF719CC90AC15486F69DCD89F20C2C64C2E3285F5A5292456F55124C240B81B9A9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5335979.1614983472!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...u.......w.^y.j....q._./.Q......A..U.7b.....d.J.cf.I/..F.d..H...{o..m{..K.[cgQ..D...G......Z.%.[(f'....\|O.....h6.1..3L.F.v...B.X.......t..^.{..JmM.....t....{4s...L....y..&...-.m.D..0....9..t.H.ZM.$....=.H)].v&j.z...CK..%.8...qV..\.mgf.......xt^8Y.e.P+...SE...E.J0e....5X/e.h.(.KvkNT.dr.Z.RH....}.pG.hC.Z..)..@dV.kGT.4.._.E.A;............q...<n....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageTCJZPSH7.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	11393
Entropy (8bit):	7.935050640768371
Encrypted:	false
SSDEEP:	192:3oSA0HkBSlKjcxRNht5aDRe+vnQPaRjreIfNFhDf8R4lDsxl0eoaOcBcBC:3xDLNh/aDk+/1RjiiVf8RQDE0e1FBcg
MD5:	18239800E79E2A725FC156179D29C95C
SHA1:	A07CA262A4EADA3D673BCF23ADB88B29A759A12D
SHA-256:	855FAC2F441ACE80864AA21C93A7B66DC8A093E6C9E9656A4B2C3D35896C1382
SHA-512:	5143F7A58F90FAA0131A48DF70ADF840E1AB7288E689EE393949A19BF7AF50B36ED1B914DC35BF4DCC81EDE5122F220A01289EBC62F8F4B3040C60BAB9E0C1C8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5309715.1613416930!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..B</.[.......c..M}u.jI..pk..0,,....+.o.....{..............+1...N..............9._.....-:......}+..H....T$...J...f....f....>..-.......g.Y.]G3.9.+....x:+8.F.m.v.}..i0@....8..-....N.A.8..........6.b......4.S.F.....@..T:..7VwV...wV....AVR....G{...N1.^C.6.zQ....~?...D_.~,~.......~.\|{.O.[..d.5Bn..Gu.!\....o.....7....\|y..g..6Wv..4....~.M.W..?d/.j...-.h.^:..g.Z

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageTT2FLU70.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	17747
Entropy (8bit):	7.954161773963039
Encrypted:	false
SSDEEP:	384:3h+sOYHjB0XdidZ0AIKM91WxoFf7hidbJpfD2TeMgzBk52nt+U3ofai:3EHeOdidZDBCWqf7ipL2TWdYP
MD5:	1FC5585DA544626B99B849AA17CD43C5
SHA1:	98C375E7602C26CDA945FD39E5461049A9B8D2F6
SHA-256:	5299C1005F2BE4B6B368DAD22ACF7B1BD1B4A078759486D7797EB35008F27D6C
SHA-512:	D6E6CAF6D3B962888B1E232DF953FA29F33E68ED1CC803E3629A0B6C725564CF706FC1A983CF231331BF0484AA8FF855C2D1E3B0AD0BA31AAB5AA0A9BA504AE4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352034.1616055622!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..J..u>...w..LV...'.+.$...F.=.GL.v6.F.9uUU.8.iu.../.B..1.;.Pq.X.C.......D[..~b..._....UJ.x'...z..{.zI0......(.....`H..V%b.B...\|.m6V...TN(..Y[G..{\|.M..o#..S\|..s.Q.p......{.{u.......Q..Xan.V....3>[....5....qL......Q..A..,...z.li..6...{5......#.=....kor..PH#p.d..I._\...K..h.G.....\|B.....8.x...V.'.m..G...MZ..[j.....0>I.h.R...Q...k....x.G.{._........\|E...J......X.`......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageUH8APDX7.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	9318
Entropy (8bit):	7.910009508154802
Encrypted:	false
SSDEEP:	192:UpQP2CpR5BoD2VmEcFBMZlQb7AHYx9Q0HBpV2o0o1v:UpQppPBrGFaonQ0HBLn0gv
MD5:	E702E9B14DC6663EACA139B360614CD7
SHA1:	73092D5273CCB296DC3489D429A05D847368785E
SHA-256:	28985A5FFAB35683BDA22D066D30127D35CB3F14BBC5AEA53AA9A185E6097D28
SHA-512:	DDE7CA96A1B76B783D5AA09E2B8A775BF9E4CFC8AF3002B436653717A377BCBB5A47BAF41F2CA9182F3DED40B930306BB6DEB9372C980E883FD65ACCF672E5ED
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5344509.1615554525!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....3....#..SX.y..1...'..x...3.J.#.\..j.L......k..1.# c.G.D....4.c.[d..b..}......X.\..F.pT..NzzW_>.E{.>k...v..........M.....F...P.<...`o.{.\| ....G..^..?\|(.............3O...>.G..m..ht.{..Yn.Y.J..w./.gE...?...._.O....z._.4..?./.....?.\|s{.j....E...=........E..% .b..;...d.....J>g..._...u.....%....-...)......... ..Z..=B{_.x.\..........%. .B.FO;N=............#J..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\imageY99SNPDL.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x169, frames 3
Category:	downloaded
Size (bytes):	31579
Entropy (8bit):	7.934605922161247
Encrypted:	false
SSDEEP:	768:F2YbVsz8e7Z9e57gtJwyStCm4YsrgJoSicdu95+VAiiJRHE:F2YZKF9e57ghStO3rgJjiUNVxgRHE
MD5:	763E6F4A6BDE1F453E95023AF48B59DC
SHA1:	522450E9031FA93AEEA41A52A380B18745976B8A
SHA-256:	11AC1E99BC754B4770E0FF398296D5D683F78A66FC152F41E83A936515B1BB77
SHA-512:	EE2237EB4F6DDED222D8A547B8CD2AC9A42E1B4019342B081387FD3A67A0154E1631614ADEA23B40A5160B2F817356D0FD43531C93E067707C5EC20D7FEACB28
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4859921.1584637596!/httpImage/image.jpg_gen/derivatives/landscape_300/image.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....yRVUq...W.4...RfI..n...d.,.0..<(&...X..?.A..I.Z.g.....IF......>.......y.....X...+..U...2..i.-#S.=7.hf....36B....?.........\|0.]..j..;X...V...6......~$......<M..FI$...y.?x..."..._..^=.....T./.Vo..U;.y).}.._.7..w?..e..^6.f....m"H.........%......_e&_...q.G9....R.I.!..#\|g.......1...b..].+..5."=k.)......T<H.W..\g....XQ...w.[.....!xw].....x.f....(.W.....#v0

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[10].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	10289
Entropy (8bit):	7.915068814525535
Encrypted:	false
SSDEEP:	192:Uh4V46vM7wVbXRCQrrC6uEtT9Lt6MR4sTUXLw+VTocfejxiqET/:UheswVbXQQ3C/cRLtHe8+oNYlT/
MD5:	FFEC87CB0EE2DA1437985B2C8284BE10
SHA1:	B48172788D89ED6A3AB3E2E91F39304E7523BF3D
SHA-256:	D89CBE42689B7921927BD9A1ED5EC71C433A61562F8EECBA2A68FA254CE9AFD7
SHA-512:	025B70DA20DB7725D5C063DFC607EFF4D8CECAC7D3AD53232E8808F6006D74B87D2D078C876AA8B22C2CF107A756C2A06A4BD0C3264508C4066E30881731875D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352771.1616092229!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....V]..O..cm4..kZ..)!..&..B.s......-.....yp.e.~-.^'..%.\|F....?h..+........W.e..Dk{.".n..A.<g...Yt_....C.g.CHM....yD..O.h.s..q).=k.JTd.Q......<6..?.?...k{......2......)=.P..5{....`..?f...#X..>s.....+...D....R........q..o...W....`Z;..?....H.].C.0......4.x./o......C.?....E.....]/../.&}..x...V..yR..+.O0.....~X...$<b.....q.\|22H...[..6.^>..w9/...i...S4....'..._

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	10597
Entropy (8bit):	7.9194995854813435
Encrypted:	false
SSDEEP:	192:RyaGP+aYgznmYGBpUBy83UVPagoDxyUx0SFfGmEPq8kn5FntS4OY1g51d:RyaGWaYCNO+JQyDDfGGIfGltS4On3d
MD5:	9A97529F90655DC05ADC9807FDA91ED5
SHA1:	E9673CA4756C6FE5B328768CFFAC1435115FD0B1
SHA-256:	B06DC0707B4F7533173708BC97A538A3F0CF592832BB692BEDAA305B1F3CEC19
SHA-512:	970DB66BED001946E059E6B4138B4B1594ADED593AA8E5AA8AE429F8C61530C33AD2420354A16BF58655D9EA351114D93D343CA4FC4FF59F6805543B3A5D7AB3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5219358.1607282020!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...-[O....[U......[.GP..G..D......I<.+.Y........cZ....e.b......Cq.7..z,.k[.$I.F...$Dw..~.~...o......j.GC.....o.<..tx.h.>e.i7.n.67...P..f..H.....~..=.....^..l..&..J....[4.2...v.,..jx...'.............y..J>!T.p...B.W..[.=.^......j.....x..._.~)..(n.I>.~....;"[......[....C.v.R.?h{.......O..YM.k..<e..g.7...l.1.....*..U...\|%.....x...[....?.G..k..+.../.R...bA.l.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 150 x 84, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35399
Entropy (8bit):	7.983032412762046
Encrypted:	false
SSDEEP:	768:ZpoCIyNEikhreol13+lhK6yWJDx3mdrisVRlfYSYUqPU1f57eRHBfSeq8GS:rqyPkhr/3+r3lxWr91fUNP67ev9
MD5:	D200FCD109B1A97BA7F23F7E7DA50F21
SHA1:	C5BB4EE0676E76721D96AED93CEE1AA6CB70A3C8
SHA-256:	09A5ED70EB47C72B8E7A6CCB1CFA050E39D9BF2B96BB2FC122507C6A5F744727
SHA-512:	082631BF0751B39020E06465E245A6115751247D51B42F9D4E850CC494362F61AAE45D25B60787D946F9A9E4090A81FB9710108E7929F9161501A90C4B0E4667
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5217566.1607108207!/httpImage/image.png_gen/derivatives/landscape_150/image.png
Preview:	.PNG........IHDR.......T.....`!.]....IDATx.t.u\|Ug...www=......w...ww..H ....Hp(...v....Xg..L.....z........^{.}$..>k..w..<.....w.{..8..7..O.....x..........G...=.....{?J...WOp....O............x.M.{.'8...08.W..~..o.....7Z...).^.c.r(.&A.,..C...J..00.E..1..M...8.Tu.......~(oGY....!.,...fHO.AQi.......-C.h..kP....NTw....z7l@..h]...6.y.&......c.1.:0....b9......?..c.\|b....G.`..I......82}..gfpf..3........K845...\|....}..... +&.q...K.#"4..KJ....D9.#..D_A(..=..`..!..;.=g....i..r...q.......S..N....4.n\.y.;].in._...K..<.#.'p..i.?;..a..)..0!...s8\|.<..\..?M]Th."N]....?w.G.L..8..9...N`....q..?o...S.9~.J..\|.}/..g~./.~.o..oO..../...)........o......O..u..?.......o.......w...^....g...C............G..?!....o..}..LB.dN.L........b.dW#..h.0...}..t.FD.'Z*..Z.\....x;Y!--....n.B}o3Z.u.u..5.M..i........#...].6.m5.n+..nE..X}.(..:...c...9p.+.....'...2v..N...c..v.<O.%..\|.G....x".c\|A.S...N\..cW...i..=..cUW...}.%.A[q<...PP...q!h.B.<.....K.AC^...9..gG.o..a8...38u....D..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[2].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	7398
Entropy (8bit):	7.919296249813869
Encrypted:	false
SSDEEP:	192:RDg9zXTShsKhe2PlPjp3PAKP5GlwvRSL1K50cdEe:RDgGsUe2PVp3PJ5XKoWI1
MD5:	97C81A3EA372167E777B9A056A036A93
SHA1:	D2B4560428F1E6D2867A5910147DC40B116F4056
SHA-256:	070B55D0BB4BC117AB6FDF7BACAAE197C792A31C5031C6970CD3686142BBA47B
SHA-512:	E1BC9FC4681168506218A4FFF70D97CB376F391B35AF51986A4A6BA0739BBF5BDD81CA02E6E38A2251125F9A2B28FD376CA2992817A51D96F3AF3E6024CC028E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5217869.1607120087!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......z..ch..."j..%.s.f;2..#..b...I.).).a..f?...l......$?.r....H.u?m.`~....<.7..f.c......!..v.].f;.'..N:W......g......!.=......#.W.y...K.31o..G.-s.y..G?..Q[..d...J.&@.?S..w..D...s...Z........i..LB.<...l8..CT<_...[.m.x.R...-.....$.:.........y:....pb....f...cUk.?.A.....o..4r.+...Z....3............d.A......>.....xGR.m.D.f...m.m.X........+...x.V.1.7..Ir..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[2].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 135 x 76, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	16254
Entropy (8bit):	7.974202763679431
Encrypted:	false
SSDEEP:	384:fsvGtQ8B0dinM8NTFc1hx9FO58FbLRARWG29afO4:fLrnM8tqx9g8BGkGqC
MD5:	201BB2D17CD14AFD74D99ECA56C89532
SHA1:	5522732961E239B09004CE8533C9C4FF3DC49CD8
SHA-256:	172BB787F0E8E18230CD1460E6F2E6D771BB89F4F6B6A67252AF8BB0A7671A21
SHA-512:	9E6F57412423CD856ADE14DA70D032F2FEECF8AFFCEBF70CA7CB25B1004C21A2D10EC53E314325BB4AF4B6D05C03EA7BFC9C5E86BD79A2DCD01BEBE434E2F140
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5301527.1612884559!/httpImage/image.png_gen/derivatives/landscape_135/image.png
Preview:	.PNG........IHDR.......L......3..?EIDATx...{[U.........{.m.r.{U.w....!..BB.50..z'..j(...3.a.C..[k.-.......z..$.Y?._Y{k.P4..&......$...V.....D$.lU4..=%~O.d.U.T.U.t&...i(...X.m...B"_H..\|1ET(...4...<...V3..([..J.\...P.U.s.z...Z=.'.Z.P]).W.+D{..{....+.UXY/.l4TZ.(..#.Y/.Y/..m..(U.]V.w`.Y_...L.#....V........).mH... ..'.yD..M....D..a.Jx,..UB.U.#....#[.e...L..x......L..hP..@..@lV7J.....Q.Hk.........:..,.l..Y.]..C..H..J2.M...."..B..#.....I.....R)...&...R.S`.D.........t..R.Q.s..A.@..$..`.........%....U,.&...x2.3.t.....0.,.J....R.B&W.e..l....3.\6...X.\|1..U.P..EZ(v..(T34.<..]e...H...#_[AjD0...J}o..=v5..vI..e...Q....@$..."H....T.T.N.D.X....v....d.......T......J6...]U....#.+..=...R.T(e..t..F.( ....B..#..D..Z.(.....\ T.(...m.le.A...E0.......U.<.Z?X.0j....C.B.8.bl./&..].C+...a4.U....r.R..7.<.._.].)...=Y.^....6r.J>.!. Q..R#.7.d.[.;..+x.....{..N...6JC[.@.iA..... \|.=.V.;.F.q.!.w..~.........A.{K...3..I......$I..d..L*......y...N.........W....9.tUxz=0}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[3].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	7718
Entropy (8bit):	7.926093979908309
Encrypted:	false
SSDEEP:	192:Rd10OZzGIAexKm2olrbvWZIjsMjNcoI/dxtr:RcOAIAe7rWwjUdxtr
MD5:	BD458F52CABDF63AA91AB3FD7E90805C
SHA1:	799FEC33144C104FF36EA8FB70D0E52BDFEEC1E1
SHA-256:	B3FC5F61F8A4CE5D57D655FD228FB2AAB6A55E06A95159EBF812B86428283A09
SHA-512:	307A8F25EA7734E3912F74425452E4B8E0D6346B0826E6E47DAD73188866C17C303BC5F6DB32F6F474BE929112FF0B3C9306D49FCDFD6EB4C2B850881B00FE65
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5219405.1607285329!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..:_....$.3...IM..dd.j.. ..s. ....d......6.............=k.\|.....[..c.i.4.d.E.<{..!...)..{......i....sOK.....\|.,0M..]..~.=G._..J..N._=Ky..x..^..=SO.5=z.W.o....$.-..fl.Ia.=.j.H..b..3Yx.B.b8..._,.c.)bp...}+7...]4...'..d..x.. c...%N1..g<..Vl..5m..R...Y.d...eR...#.q.[.FTW.s..j.U..?....N4.....n..A..z...\|./.c.E.x..X.T..%Vx.+...\|...7H..;N...ZH....VDu8..VOT.p..x.../.G

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[3].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 161 x 62, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3866
Entropy (8bit):	7.785112869587921
Encrypted:	false
SSDEEP:	96:zf2RmVNSPF+zDKqllf5BtG2G50WolZElCoT:ay0PF+z/xl+olZEcI
MD5:	13D1E0DA89D0B5D50B0E1A43E21A0428
SHA1:	F5EB3A07BC696FF0E706B8722674680CFE9AD512
SHA-256:	D9052444A80FB7E90EBF50EADDB64F878DE39A15C06F7FE4F461316A32D1E2BE
SHA-512:	A043EC5FEA23F9FD922554FDD63FB1DD35A3735E5255C8A7F20C281C5AFD0042DBBD1337E17215B31F740CE27F33B28E0816336CF3364571E9ECA3C181167120
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/7.711875!/httpImage/image.png
Preview:	.PNG........IHDR.......>.....Ca{ ....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c111 79.158325, 2015/09/10-01:10:20 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2015 Macintosh" xmpMM:InstanceID="xmp.iid:2E016AC4427011E8B54FE2FEF3503A08" xmpMM:DocumentID="xmp.did:2E016AC5427011E8B54FE2FEF3503A08"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9CD170FF426211E8B54FE2FEF3503A08" stRef:documentID="xmp.did:9CD17100426211E8B54FE2FEF3503A08"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>/H......IDATx..]..VU.......+b..1L1.).)..1.......5j.T.D.:&0.hL.C.e............z..3..jD.....o.9..._...{...kf..g..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[4].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	10365
Entropy (8bit):	7.925893923918759
Encrypted:	false
SSDEEP:	192:RX7HrLj5PL66hkeRJlB7ZOOU68gePoqaNtQ8B/Lsy/hWbXhaEQuLRuWU:RrHw6h5/btRegiW88B/RITc/iXU
MD5:	FB643374D0913200F17266D7B49C1DD0
SHA1:	420173CBE63B508D916FE4085F673990FB0DF577
SHA-256:	B77DF57901B85537850EBCD6CE001730CB330A2DDF1F7444B85F2AAEB55D5797
SHA-512:	958FF7B5906A0A85F17FD70E16366FD8CF92F6781045AFDE05E97DDAE89E838F86829663FA3A735FEF2F2943556E401BA6E89E97B58D28F0445435BBBFDC2D43
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5214842.1606960630!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..5f-..f.J..l._.....1._....\|....h.4.g.....++(....n.>Y.}.8...Z..y.n...;[.:];Z..zm..i....3....W.x...V....../.c..!Q.W.3.W...8M.#....kJ.'h....@....~1..3..W.{];W.^.....=Z....2.D._....z.u...?f.m.....I..z.>...P...Q.Z...7G.....nf......u...4.s...k>........w..)..b.U.T.....3..~.`j...5......;.k....}K...Y.]...j.[d..w..150...-.z.;....].k+..'.o.Ux........kwwI.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[4].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 190 x 106, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4331
Entropy (8bit):	7.91914777587639
Encrypted:	false
SSDEEP:	96:sOh3fNUqlkQ46Px12yYOlAGvOB+80m+3rq3j4uwu2qrusQA+q:sOj3+Qv12Tt+4uGAJMV
MD5:	C84AE8AAA5F9F4314D0368BBD9D86423
SHA1:	534F7D17A37855C96485B9DE7C6CB68396A64D7A
SHA-256:	A53B2917228953C4F01F73F3E65F7281988B588AA481BD0EBBEC79E947663313
SHA-512:	DF2428A2A9B616F4D9A6725B709026D8D849AA596A457D93F4528A25D840832C80FD74B55D8CB959F88AA35FE01859DBA902E146AB83D2DE26FFC88DCB0ACF1E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5348917.1615900523!/httpImage/image.png_gen/derivatives/box_190/image.png
Preview:	.PNG........IHDR.......j............IDATx...[.W.....j[kw.j...mm.R.....".....(...K...$.s..9w&...@ ...3...d2.=.3......R.iZ.;A..W....._.R.T%i....H$bn.e.....7.'O..9......1.O.6..?^........d2i..:..D.r.O..f....;...s...TTTLi.....s....zi...33::j...Loo.....1.XL..)....jhh0....o....Z9.<y.^.._....{..\.2....o.<x`...{1~UU.....]...../.o..&....?%.h.v.Z.y.f.H$..._........d...K.......`.}bZL..O.8!.1?...o.-..5e..?.`...M__.._U..'Cc.u....6....Y...'.H.B`TWW...J1...eyYY....3..........5..\..Q...U.a..g.k...;w...N.G.>v..v..r.m..tuuI.P...S...O..._~..r.....0...fppP...Q..p&...;Z....._.R.Tj\|.J..R..U5.J.j...o..d{n.l.i..>S.VJ.....x...Z.f.x.}.....g^."5.\|.A............\.L'.......d.9..?4..r.i.k2.....Z+M6~...5l........./.z.n.g....y^.[...O..l.]....a.7..d.+9Hd.T.N...t.?M..<..F...<u...8h..M6z.dP..8i.="......[u.....V..L6qG.0.I.Evf_e...l.U;....v...........>.........F....v.q.9\|.....1......;.....&...q.$.L7...bM.;%.w.;w~.....~..l.5.....dO........0.S....J..I.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[5].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	6067
Entropy (8bit):	7.892279661155003
Encrypted:	false
SSDEEP:	96:dXE4EqU5adhD7XcovdRp+TvkvyI6vc0y0nwLb0Lxt+K6pXUJfR0CSadfy:RJi5adhD7F9+rkvyI6Q0w3g+tYfJ3dfy
MD5:	6B98B078BDCD944331CB4E1CD1655412
SHA1:	B7FF9C331EF5675776070DDA15E8E39A0E69A928
SHA-256:	551BE290D4320285819188908EDF042E31D775412A77AEC20F318AAD96098183
SHA-512:	468856411B38E59C3555ACCCB461D9FFDAC1BE24595B4F7CA53B8BA426CE557122E0A3406CC33920A476D8127D51EAB2416120FBCB11F6BEEFEE554E1465FB9C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5212608.1606863597!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..yX.9n.8..m.#.1..g...%I>...Xt88.....SWl.....%.`...z.VF;.'....M.<....&..7......l.......mE.q..`.5".'$..Iu........\u._1....?.....&..T.......F..R.......2.>.&.o..=..G...\|F...4O..W....B.@.I..r+..........#....^..P.g.f....;xT.....c.%..@$.x+....=.&.x..F-....R...^)o.E..3..L.^.K..$A.q..u.H.O..^..#......F..A.\|J.l...K.....yS?2.#..9...5.......u=3Y..q.@..s-.....W

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[5].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 190 x 106, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8619
Entropy (8bit):	7.962601053719853
Encrypted:	false
SSDEEP:	192:1KoUnIU9iCQFd7MNerr3gx6MJblZG0SALHgA1XHebc84/54+Mu0db9:1/Un56bMNeXQxTJbl0pALHgA1XHA64+e
MD5:	235E1304756B44F4EF2D64538BA0CF1D
SHA1:	BD8F6619D48F10CA11CA0363E84E60639DB988C4
SHA-256:	C278D87126C527F25715998CC2A6F975B7336370B552602C0F3AA3B3A9246B8C
SHA-512:	BE4DA56E4ADBA0D4BD480B915FEBA9FAF3E08FAC6CBD7D0B7827D29F20F9BEA0D25102927D09720E99125884A5ED40985BCA22CC94FE7BBD973D79F7D6ACC91A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5346152.1615650995!/httpImage/image.png_gen/derivatives/box_190/image.png
Preview:	.PNG........IHDR.......j..........!rIDATx..w\TY..g.y..}...}'m........{..0......%.sh..C.....sFADAAE@r...(r...w..B...(......=...s..u..AR.A.:[...(...._.B..P...\|?..].1.......!...qI.r...u.....t.-y...M......{... .W.....).&-A..?..m.J.....P..+..,.....2^I2....1..WS..z.2..F.3({..j.N.......2.......\|A..G....05.G..LD\|>.......i<N^^..E...z....O..,A]r2.}.........:.+...B6..i.(?....P.e...E...2...H.{N"....<c)...Aux.2.oi..D..yW.....A...bzO.h...dX.+....o>.R....%.U.......5Uc.u....t.l.}...p...z/.C.......pF"YA.../@..GjU._.!...1=.....\....b.MF....}9.ui......=...GdO......[.&&...1Z..v.^\|..g8y..........4....V...+/.....H...... ....>....`...e.`.N..^...~>..'/.7]/..K\....p...8;..[vlIA.r0........o.!62..Ey...i........._.}....Y.........c...D.5..^....!..9^.BQ].....?.....X..a./.\|../f q....-..,.......af6.C)g#z..5..7...[7...+.2d0^.\|....`.......'(.._....Nm......f..c;?.A&x............~.\|.<f....c.......NO....p..1.?s..OI....9.B...Y.v5N.;,....={..Is..{4.FZ ..X..-J.m.4.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[6].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	9680
Entropy (8bit):	7.9276555400109014
Encrypted:	false
SSDEEP:	192:RsPywvBOaOsZOLwisyG6gRFVUUDtSpukeZLCuYK7TPzm80CvrHyzTw5+a3:RuyQDOmO8isyGUfABEuTPSAzHITw5L
MD5:	5162CA5FC373716F92819092105657FF
SHA1:	5DD06E13266592616CFB75C92111A57F3312BF87
SHA-256:	5B2226F6828ABE2F1B3B0E8CD197E81E7FA161CA98DF2AEFFEF5FD712CC93590
SHA-512:	BDB98FABA5D0E10FD6725509A0785992599D156D378AF4B085EAD35B5AD49B2A9EC307D595F589BE1075F9B26B7B4DDFC303D35C1C58E7F8BBC8C1222636C16A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5153813.1603251756!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......x+O-.k..H=2q...5.%o.W....W..}.K.M...o.D0{d....~.3..?h?..&.......'.V.c... .3....wb.\|w..Y..Wm.......K.9N..Tn..a...u..._.x...o.;h4._.#....X@._.p../..Hq......'....~."....^.>..........\..4..n...7u.Fu...!.(}.W....w.O._.<.....^..G...~!..."...G.Y..2.yh.<...$.o.VL.u?.v...Y...\xB.....U.M.I.jRB-.(O......IcX-T$j.\|Q.>R...a......Yr.h.WW...w..s..[..q=J..Tn.."...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[6].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 800 x 450, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	27563
Entropy (8bit):	7.875225543342445
Encrypted:	false
SSDEEP:	768:xdZQ9oUSCcM2x7muz8K+5lAMF03ZZ82urEDvGzx0:i9bScmAKK6LurEjWx0
MD5:	9E4DCC029AE97653216D4118F50A1A91
SHA1:	EB63DB3998F829A5E32F0FD81B1D30789E2A91F3
SHA-256:	64DD32400F380E36FED4E374D4879B43E9935F6E5F013FDD3F4D964E799EA616
SHA-512:	0119DC0D8F2680F3780726D9A8133700876D5047E84BCF18DD066921CD96336D2681321A73765C7DD661182A3521C28DF87FBE86AE3A451A2B1C0FE578B596E3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353278.1616108247!/httpImage/image.png_gen/derivatives/landscape_800/image.png
Preview:	.PNG........IHDR... ..........c....krIDATx..........2333..237..M.4e..Rn....s.f.D`.lY.I....U.U.3...3...<..O.H...p..{..."""""%R.:T..o..]....\|."""".........,J...-.w<.M. """"".....;Ce..h.......)W.L...?&.........(@DDDDD.".........(@DDDDD."......Q.(@. """"".. ..../.... """""....SCcfc.m.......j[..!)@DDDDD.. ..eM.rJ...8 @0~........b.H.)@. """""..Q.......D. """""..Q........ .....;.F........)W.T.V....Ccf..K."""""R..y...}X.........(@DDDDD.".........(@DDDDD."......Q.(@. """""..Q.......D. """""....{C..j.....DDDDD.\.R]{F<.......DDDDD.\..?!.........Q...DDDDD. ...H.V...zk8..c..~.....o~............./.[.l)...F......^...z)/l.=....g.qF....~.~.....K..$..........].v..N:)..{..k.oO=......>.~..a.......[..+._...x]i.7._~ya.w..w.?....Z.).<?.......'..../..K...1.V.;.....B..m.Z.....>..O....w\.....+.J.\|..?....F.h_E.....vC....h..sN.iS........u..{......O..f.5.o...Wy/\|.1....?....x.e.....p.y...B?.wC...k.._rO....Yg.....{....K{ig..m..2...7<.......;......K.e.*.9.~v...%...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[7].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	7240
Entropy (8bit):	7.88085453503755
Encrypted:	false
SSDEEP:	192:RoeSDnlb2nvK91zBlNSfsuJIBtNR66xWKzS8tbOpNsb:Roeglb2nv6lNSfBJo508SgkNsb
MD5:	C173DCEB3E95EDD6779C7EFD724766A6
SHA1:	91E432050779C7075A59A7FDAB813EA4D1182776
SHA-256:	584A229D9B2A066AF4BD55F64949384BBB6F90D1CEBD4BF95CAE8DF598193FE1
SHA-512:	8C79FAEEF4C6451A2145BE87F48C2840D6CC87EC7A5CAC606EE18C9C1F291161519858CDCC65ACE9F44B8DB29009E4B528E0484C274C836600D60091F6D2BBD6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5206138.1606423896!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...+.'..>.X..9u..^......h_.5O.kI.Yi..3......r...gO5e.w........?....N..I..L....h...u?....2Es..\|W..7..W..........R..V....v?F.O.3.\|...4.k....T.....7T.....M*";.q..%... :.........f.O..;..+...D..S.i.zA.> X.\..1-.I....J.\C.....p.n8....?.O..x...F........c.Q.\|Cw._.q..t.CN....%....][#Z7.;..t.q]o.u_.CC..a._...."...2...6.^;............Io.9&Yl.- .$.....;.\|..%j.7#.W

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[7].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 800 x 450, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	26962
Entropy (8bit):	7.816800096958428
Encrypted:	false
SSDEEP:	768:BFteymKcbnHnvSxQDnJHncusWQ5+bzZlM0kHf+:BFtK7nKOjlncusWfzHM0W+
MD5:	44A6A06EEA1C830833A802EDA4CB8C08
SHA1:	AADD4196952EC3FFCB495C1310CD44F107F648DF
SHA-256:	BAFD0F64C5D3A0A7D39D57AF5CAB2D07F28FC6120177E110EE9D53F2BC9446AD
SHA-512:	0579A5A609C7F1A2C3B212FCC18930532B8CED3223C05D05D127DE367138DD90BD422F8A079925B3103F8D5AA705884FB28D7CE187AD60500190821B5F789C8F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5348917.1615900523!/httpImage/image.png_gen/derivatives/landscape_800/image.png
Preview:	.PNG........IHDR... ..........c....i.IDATx....{.G.....-3.O.)3>eL.&i....4.5.PCff...k..j.".L....s9...[s..9.............. .... ..... ................... ..... ..... ....@.....@.........................@.....@................................... ..... ..... ................... .....w..9w..YW__.........u..\p.O.67n..q........^.m.f........L......{..8q".gJ.\.4P.<^9....;u....pQ........[.f.{....}....\|.Mw....9...{...]w.e...K.P...X...A.'.\|.............<..LN.<......^x!.gd..U......s......~.}....FV.B....>.{...n.dccc......f..}..{..r...?.<o..w.}.....s...y..n.:;....$..?...n...+.E.......^.......@...PS.D..y....j).........j.Owww.W....~.=..S6..r.=.X..u...O...z......\|.?..,......;..^..u.....,....@.......]..G.y..>\|8w...hp.....Z...@..CAD....@...q.w.^..b.].d.+.i.....o.....W.......... ###y.A.........P.g.;.,y....@4......+W./..w_................s.._.x.C.@...@.).A...~k..O?.....TK.T..D..a.x....8Uk.D.5.}.Y...gsD].6l...._..GGGm..j.*.......%.S...7n.eO.<..?...<M.........?.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[8].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	8636
Entropy (8bit):	7.905280985164421
Encrypted:	false
SSDEEP:	192:RhdN2LPxqijScZwxlj1uznyOdOsuH19Oa8t3ZSd4lP1+0MIbyT:R/kbEijjZWUz0suHXbkwd4lPC6yT
MD5:	786FDDD3C4184952E7888F72CC3531F8
SHA1:	3C13FFCFFDCE28298909210AEFA6505564A97EDA
SHA-256:	E41DD6EEE5AFCAFF8ED782F70167AC500D410E88694C9C6D768433F7A18C5C1F
SHA-512:	D183EF8C38E610F8C71D37904EBDF572316973C7DB721AF56643F093BFDE519F10A40F0A529517143ED53816478C8649A603A8F369F7249C914D8BC26E29D3AC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5209639.1606697514!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..l..&...A$.6....\..B.\|.?.[..4.:..-.=..-.[d..,.O. ...N!...gC.Q.......4?....4."K.#.\Emz...Vh{)B.z..J._....].*..<I..+...B.!...N.rE.e./.....3^Ul...WO...3.Bi.............#..........:'......6.%..w%...wf....X,[.........D......j..XY._&..BHb9..]............ho.\|.......:\|A..[..2&.d.l.=.~..........X.5.%....5.k....$....<..T...z.E.....>w0...^u._..y..?.?..~......~O.6.l4......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\image[9].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	11412
Entropy (8bit):	7.912531584603528
Encrypted:	false
SSDEEP:	192:R51z2I8Y+KhBpCLNemmmoFND1vdtWFLs+JEJaH39LmAhwk+//IurfY+W6G1Y6Vl:R510sBo+muh+JS439ySRmrrf6w6Vl
MD5:	FA4F228ACC3AF83FF259B85A30120CA3
SHA1:	FC9CF79E832490687AEE7D7C6B70D9A86579124E
SHA-256:	91577E920F67085DDCEFAB84981F41D31D9DD9E9DB17EBF6CDBD0E244C34AFB3
SHA-512:	17F5509C07780203EFC01A671A786F3E52607D13C1E53DA98FECD0707ABE63EF429B9BF6DEF3810FABD89388A12AF8E6C1543F08F0FC2EB0E41F6A5148129F0B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5212387.1606855607!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..7....G.W..g.........Y.1.../.....[b.r...=k.{..#...........'.........x....w.Z2NAe.........../...A\|O_..?..?...=2.;..... 6."m....H.i.w...o.j.'......we.Y,.....h.Ic.d...v.r..,...].=.6.E.+^p...k..v}..r.&.6...b!).....M.Mo...W........\|..3.cB..9\|...;.].;.H..t.W.s.O.j..G.m5;}.H...X.d.X7.l..G..r{W.'.......no.6..+}...i.zw...`...U3.+3.._...&G._....-...'....>+M.Z6....4.U_4.l...7...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery-1.7[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	139520
Entropy (8bit):	5.2480547239636905
Encrypted:	false
SSDEEP:	1536:LEyAWoy8S+nHHsfwhi2z4xJvaJZWroLkVtYky8ChyW5ODV1ibyMN7QleRNn7Ah29:4yfoyHEkxJ/CVZtcKnbNx5AACYpL
MD5:	90C83CB74508E36C721DF795A5887ECA
SHA1:	DFE7A88FC4C32D35F79E0C4AB9CE7F8B460AD81D
SHA-256:	9561488EFC9CB79AF921B8FF53E83C84A175567F3DD27D2E8F836FD87673545E
SHA-512:	F081E6501125FD481F4233DEE59B263CDD30EF4837A29A8A9AB50F7196A8958E2CE0152C0308D14287AD01D1538B6D2AFAEED48FE30B2B790357003B01631682
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/jquery-1.7.js
Preview:	/!. jQuery JavaScript Library v1.7. * http://jquery.com/. . Copyright 2011, John Resig. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://jquery.org/license. . Includes Sizzle.js. * http://sizzlejs.com/. * Copyright 2011, The Dojo Foundation. * Released under the MIT, BSD, and GPL Licenses.. . Date: Thu Nov 3 16:18:21 2011 -0400. /.(function(window,undefined){var document=window.document,navigator=window.navigator,location=window.location;var jQuery=(function(){var jQuery=function(selector,context){return new jQuery.fn.init(selector,context,rootjQuery);},_jQuery=window.jQuery,_$=window.$,rootjQuery,quickExpr=/^(?:[^#<](<[\w\W]+>)[^>]$\|#([\w\-])$)/,rnotwhite=/\S/,trimLeft=/^\s+/,trimRight=/\s+$/,rdigit=/\d/,rsingleTag=/^<(\w+)\s\/?>(?:<\/\1>)?$/,rvalidchars=/^[\],:{}\s]$/,rvalidescape=/\\(?:["\\\/bfnrt]\|u[0-9a-fA-F]{4})/g,rvalidtokens=/"[^"\\\n\r]"\|true\|false\|null\|-?\d+(?:\.\d)?(?:[eE][+\-]?\d+)?/g,rvalidbraces=/(?:^\|:\|,)(?:\s*\[)+/g,rwebkit=/(webkit

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.cookie[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1451
Entropy (8bit):	5.174593983185188
Encrypted:	false
SSDEEP:	24:NONlgdZGnvDcYOyie+W8vwz1Zj8ou8HwYlcKgMdRZRVRltog3HB7GF:NSrUwz7PfHwuNZRVRlD3Bu
MD5:	AD2432C4A663FDB655C8822F93C9E7B3
SHA1:	2FF25FCF9C9F2154AD68E69C9695E52F800424EF
SHA-256:	9584C9F04A6E43C884C620944CB122157C48ACF556722534170327C26D5D5E06
SHA-512:	9EF16C9AA7D98F5D1FA6BBA6602DE8833C0041F43E566A8980E99239F73DEC514133F93140DCAF9794D11D52B91897F90587A14EE51ADCC7E0CBDAB94DE24685
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/jquery.cookie.js
Preview:	/!. jQuery Cookie Plugin v1.2. * https://github.com/carhartl/jquery-cookie. . Copyright 2011, Klaus Hartl. * Dual licensed under the MIT or GPL Version 2 licenses.. * http://www.opensource.org/licenses/mit-license.php. * http://www.opensource.org/licenses/GPL-2.0. */.(function($,document,undefined){var pluses=/\+/g;function raw(s){return s;}function decoded(s){return decodeURIComponent(s.replace(pluses," "));}var config=$.cookie=function(key,value,options){if(value!==undefined){options=$.extend({},config.defaults,options);if(value===null){options.expires=-1;}if(typeof options.expires==="number"){var days=options.expires,t=options.expires=new Date();t.setDate(t.getDate()+days);}value=config.json?JSON.stringify(value):String(value);return(document.cookie=[encodeURIComponent(key),"=",config.raw?value:encodeURIComponent(value),options.expires?"; expires="+options.expires.toUTCString():"",options.path?"; path="+options.path:"",options.domain?"; domain="+options.domain:"",options.secur

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.lightbox-0.4.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	9659
Entropy (8bit):	5.341381729905138
Encrypted:	false
SSDEEP:	192:ob0lvc5KibDKL8vA+nf3jwztZUAQ3GEDPL0EnRPfh3bWiiiWFAbHM:o4UQiJ3k1n
MD5:	F504639F85A48B6C477660614AA2D850
SHA1:	C3447ABB89C6DCEB1EF98682904EBC4AF87D5095
SHA-256:	55AEA746FE4D86C636520EF53CB04C7932DAF3B99DA88318CD8D5E506C0F7E7D
SHA-512:	4471548D8B0BDD8C2811A99C2C8A6F15B3ADC03DE9A2E22E8565962C823AFD9101353170816AD4A6F8EDC83016026A129FC955146DC51F6985C87577CCA04E4E
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/lightbox/jquery.lightbox-0.4.min.js
Preview:	/*. jQuery lightBox plugin. * This jQuery plugin was inspired and based on Lightbox 2 by Lokesh Dhakar (http://www.huddletogether.com/projects/lightbox2/). * and adapted to me for use like a plugin from jQuery.. * @name jquery-lightbox-0.4.min.js. * @author Leandro Vieira Pinho - http://leandrovieira.com. * @version 0.4. * @date November 17, 2007. * @category jQuery plugin. * @copyright (c) 2007 Leandro Vieira Pinho (leandrovieira.com). * @license CC Attribution-No Derivative Works 2.5 Brazil - http://creativecommons.org/licenses/by-nd/2.5/br/deed.en_US. * @example Visit http://leandrovieira.com/projects/jquery/lightbox/ for more informations about this jQuery plugin. */.(function($){$.fn.lightBox=function(settings){settings=jQuery.extend({overlayBgColor:'#000',overlayOpacity:0.8,imageLoading: '//static.ctvnews.ca/bellmedia/common/js/lightbox/images/lightbox-ico-loading.gif',imageBtnPrev:'//static.ctvnews.ca/bellmedia/common/js/lightbox/images/lightbox-btn-prev.gif',imageBtnNext:'//

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.lightbox-0.4[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1328
Entropy (8bit):	4.92493751016138
Encrypted:	false
SSDEEP:	24:LcipJ380AwOEsKg5g4Ty43+v3m0nBmsEJUnHyt7kgNhhiZj:h3JhOEsPg4Ty43+Pm0nmUnHyt7kgN7i5
MD5:	DF340238B7F8856B6527AD4C6FA8D463
SHA1:	871F406210DED48B219C546FE68DEE18560A9F50
SHA-256:	92CB79783D2D922B60BBCD9CC11B2244C49BD6E8F199D78AF2ECC388EBF57612
SHA-512:	C3A73123E0B626C5118B5CED5D6D57803C768DE69602B8EF9D8978C65A86C116147CCFAC47425F7815AA783F48FD0CC0CEEABC765BA5AEE3FBA7E9187C0E30D3
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/css/jquery.lightbox-0.4.css
Preview:	#jquery-overlay{position:absolute;top:0;left:0;z-index:20000;width:100%;height:500px}#jquery-lightbox{position:absolute;top:0;left:0;width:100%;z-index:2147483647;text-align:center;line-height:0}#jquery-lightbox a img{border:0}#lightbox-container-image-box{position:relative;background-color:#fff;width:250px;height:250px;margin:0 auto}#lightbox-container-image{padding:10px}#lightbox-loading{position:absolute;top:40%;left:50%;height:25%;width:100%;text-align:center;line-height:0}#lightbox-nav{position:absolute;top:0;left:0;height:100%;width:100%;z-index:10}#lightbox-container-image-box>#lightbox-nav{left:0}#lightbox-nav a{outline:0}#lightbox-nav-btnPrev,#lightbox-nav-btnNext{width:49%;height:100%;zoom:1;display:block}#lightbox-nav-btnPrev{left:0;float:left}#lightbox-nav-btnNext{right:0;float:right}#lightbox-container-image-data-box{font:10px Verdana,Helvetica,sans-serif;background-color:#fff;margin:0 auto;line-height:1.4em;overflow:auto;width:100%;padding:0 10px 0}#lightbox-container-ima

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.min.1494c0abbe501301e2ab9daecc6082a8[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	100237
Entropy (8bit):	5.436700087924183
Encrypted:	false
SSDEEP:	3072:ulaAH/h3z05GRaBo4afayvRGiMkNrpG8MIf:6LH5j05jFkppG8MIf
MD5:	1494C0ABBE501301E2AB9DAECC6082A8
SHA1:	60A64663E99EBE9B47E9C1A2066F36548E8D68C1
SHA-256:	1D5DCC1F5EF70E9AB2B6190C1BC183D8C7B7BB7E37F99A2A426174C5C4F2B7C5
SHA-512:	87361F760CD2846A84E3A245ED5401B0CCDA1D21C9F7817F03C30653F2B9E5E3A45CE23B5A6357935FD54891910FFA2530E7C663590A7110585BC9649F89163E
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/clientlibs/granite/jquery.min.1494c0abbe501301e2ab9daecc6082a8.js
Preview:	/. jQuery JavaScript Library v1.12.4-aem. http://jquery.com/.. Includes Sizzle.js. http://sizzlejs.com/.. Copyright jQuery Foundation and other contributors. Released under the MIT license. http://jquery.org/license.. Date: 2016-05-20T17:17Z. Sizzle CSS Selector Engine v2.2.1. http://sizzlejs.com/.. Copyright jQuery Foundation and other contributors. Released under the MIT license. http://jquery.org/license.. Date: 2015-10-17./.(function(n,T){"object"===typeof module&&"object"===typeof module.exports?module.exports=n.document?T(n,!0):function(n){if(!n.document)throw Error("jQuery requires a window with a document");return T(n)}:T(n)})("undefined"!==typeof window?window:this,function(n,T){function Ha(a){var b=!!a&&"length"in a&&a.length,d=c.type(a);return"function"===d\|\|c.isWindow(a)?!1:"array"===d\|\|0===b\|\|"number"===typeof b&&0<b&&b-1 in a}function Ia(a,b,d){if(c.isFunction(b))return c.grep(a,function(a,c){return!!b.call(a,.c,a)!==d});if(b.nodeType)return c.grep(a,function(a){return

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.polopoly[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	521
Entropy (8bit):	4.822648044128039
Encrypted:	false
SSDEEP:	12:AipYII1Yb2kuRWWM99GtgA/cI/Z+XOKuRWHSvmK/gbx/kv3o/f/rkLA:Zpw1IeWD9h8cEZ+XOKeWy+Kekv3kXrk0
MD5:	FB3E3289216E2489EF5C0066DC107F62
SHA1:	A1BDFC39E673DEC26B064577F4250175B4835462
SHA-256:	D58477AF72A8BBFE02D5281599BDAACBBEE94781AE3BB3005051D963BC42B0C6
SHA-512:	890434FF49154D65BC9F0B4AB4993EB197A1B9D3CEF837C5A9D46ACD27A8C773D4B1979544E4A15683CC70B3B0125A9825B6E249F0B2A6F00E1FCB7E61BAA025
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/jquery.polopoly.js
Preview:	function ajaxLoad(){var elements=$("div").filter(function(){return $(this).attr("polopoly:ajax");});var numberOfElements=elements.length;elements.each(function(i){var ajaxElement=this;$(ajaxElement).bind("ajax.loaded",function(){if(--numberOfElements==0){$(document).trigger("document.ajax.loaded");}});var ajaxUrl=$(ajaxElement).attr("polopoly:ajax");$.get(ajaxUrl,function(data){$(ajaxElement).before(data);$(ajaxElement).trigger("ajax.loaded");$(ajaxElement).remove();});});}$(document).ready(function(){ajaxLoad();});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\jquery.tooltipster.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	13817
Entropy (8bit):	5.143979757282817
Encrypted:	false
SSDEEP:	192:QCKQMfbluyQZiYTMBkNFLtp6z0Da7BVpUE4cIiuepkJzbJsy0UM2X4Q:7ublxmD7pRk/mB5MPQ
MD5:	DA03BA7823C148CC5A19A75F38786F78
SHA1:	92790ED0C528CA709303AE2E86BEBA3C65F365BC
SHA-256:	B040CEFF18C8A5BA0899A339231DAC7BE4834A190FBE4CAA8BCB5C1A442BEFDC
SHA-512:	CB8D4CAB6DA90B4A0D72C6B48247A68B5107369C1FC8954721ED1709562005E37BD362CC4F0240511826F35489CEFEAF6228EBBD08119DAE571504A876B77514
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/jquery.tooltipster.min.js
Preview:	(function(d,f,g,b){var e="tooltipster",c={animation:"fade",arrow:true,arrowColor:"",content:"",delay:200,fixedWidth:0,maxWidth:0,functionBefore:function(l,m){m()},functionReady:function(l,m){},functionAfter:function(l){},icon:"(?)",iconDesktop:false,iconTouch:false,iconTheme:".tooltipster-icon",interactive:false,interactiveTolerance:350,offsetX:0,offsetY:0,onlyOne:true,position:"top",speed:350,timer:0,theme:".tooltipster-default",touchDevices:true,trigger:"hover",updateAnimation:true};function h(m,l){this.element=m;this.options=d.extend({},c,l);this._defaults=c;this._name=e;this.init()}function j(){return !!("ontouchstart" in f)}function a(){var l=g.body\|\|g.documentElement;var n=l.style;var o="transition";if(typeof n[o]=="string"){return true}v=["Moz","Webkit","Khtml","O","ms"],o=o.charAt(0).toUpperCase()+o.substr(1);for(var m=0;m<v.length;m++){if(typeof n[v[m]+o]=="string"){return true}}return false}var k=true;if(!a()){k=false}h.prototype={init:function(){var r=d(this.element);var n=t

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\lock-icon[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 22 x 29, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1915
Entropy (8bit):	7.413827883161142
Encrypted:	false
SSDEEP:	24:iOy1htZdWwjx82lY2T3pHEVFIM02yJ3VGFujG9KTMrmBR1EdB6mdDOCKVIt0gaME:iOwqNn2SfeJ3TPTtOdFDvA8a
MD5:	0E1F7122CD03DA3DBAB1198D4E2E7C81
SHA1:	52E761E368E8ABD016F444599C48B36BFC4B6788
SHA-256:	43098F24C82DE584FDCD94075B4E2AAA326808189BB8B44ED65FC9CED214C3C1
SHA-512:	E3C449E05AE8AE5782C1D11A65FEC7E0D738737E488ACD6E7F344147B3F1B0B1076B98762DD932E886885D15753EFF2C9F1D512B0745F50675C69D9B3968B67B
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/lock-icon.png
Preview:	.PNG........IHDR..............s......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-c061 64.140949, 2010/12/07-10:57:01 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows" xmpMM:InstanceID="xmp.iid:464F58D08F6511E38A4AD3B046820C9B" xmpMM:DocumentID="xmp.did:464F58D18F6511E38A4AD3B046820C9B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:464F58CE8F6511E38A4AD3B046820C9B" stRef:documentID="xmp.did:464F58CF8F6511E38A4AD3B046820C9B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx.V]L[U......Z...J.aF..b..hp......}...1..Y..D..Oj...Q....D ........m.F.;(KK?....{...s.E..I~m.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\mQaZk5sn6g4GER9MuINCjsV5VWWYcVySOzi9hB9JDGY[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	20937
Entropy (8bit):	5.54955406396905
Encrypted:	false
SSDEEP:	384:TwFSnwrW+qg0Sv6WQEZi3H1xr0YkaX0kFFpwMQT2:CSnwrJqgJ6OgHrD3VFj
MD5:	AD0B1CDF590426C77E7A9317FED7089C
SHA1:	A8787E016EF9CCA15816C6F40D2D2C56C0372D55
SHA-256:	990699939B27EA0E06111F4CB883428EC579556598715C923B38BD841F490C66
SHA-512:	A41A8E9A4C07E7E54D214336D410DD6E3191A5C40C425B6D74CD13540CC90B2594477547E01626D8A3D1BD1819D37750D069714DF1E9E8BFF4F1C8D3CA1D41BC
Malicious:	false
Reputation:	low
IE Cache URL:	https://pagead2.googlesyndication.com/bg/mQaZk5sn6g4GER9MuINCjsV5VWWYcVySOzi9hB9JDGY.js
Preview:	(function(){var P=function(C,f){if(!(f=(C=I.trustedTypes,null),C)\|\|!C.createPolicy)return f;try{f=C.createPolicy("bg",{createHTML:c,createScript:c,createScriptURL:c})}catch(U){I.console&&I.console.error(U.message)}return f},c=function(C){return C},I=this\|\|self;(0,eval)(function(C,f){return(f=P())&&1===C.eval(f.createScript("1"))?function(U){return f.createScript(U)}:function(U){return""+U}}(I)(Array(7824*Math.random()\|0).join("\n")+'(function(){var Ul=function(C,f,U,c,P){return{invoke:(c=(P=function(){},U=void 0,CR(C,function(I){P&&(f&&y(f),U=I,P(),P=void 0)},!!f)[0]),function(I,e,M,N,K){if(!e)return e=c(M),I&&I(e),e;(K=function(){U(function(m){y(function(){I(m)})},M)},U)?K():(N=P,P=function(){(N(),y)(K)})})}},IQ=function(C,f,U,c,P){for(f=P=(c=[],0);P<C.length;P++)U=C.charCodeAt(P),128>U?c[f++]=U:(2048>U?c[f++]=U>>6\|192:(55296==(U&64512)&&P+1<C.length&&56320==(C.charCodeAt(P+1)&64512)?(U=65536+((U&1023)<<10)+(C.charCodeAt(++P)&1023),c[f++]=U>>18\|240,c[f++]=U>>12&63\|128):c[f++]=U>>12\|22

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\mainnavigation-arrow[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 9 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1482
Entropy (8bit):	5.624638681858233
Encrypted:	false
SSDEEP:	24:gSnjkUnLWWu1Dv/fAsAZlTkISHiaXgkTntu9q91Wb8:gUjnbQvXcZkItSLtu9GU8
MD5:	ECC9291F17A7602AC8CF4FB36427EA7E
SHA1:	34CFDEAB9480A6DD474166A2EC06DDF6B399751D
SHA-256:	34DFDF6FFC9E50A2CE0381E05873903C77EBF80FB1228BF846FF2FF48CEB8853
SHA-512:	646BDA81CC161BBE4B529F682C2FD4F9B0FD43CEF0BC799C827077B3BFEA7DEDEEDF6EDDB4E56E7FB4D7C58521A5DC23A050BAB9E51D6372DFCE2E199A0EA70B
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/mainnavigation-arrow.png
Preview:	.PNG........IHDR................H....sBIT....\|.d.....pHYs...........~.....tEXtXML:com.adobe.xmp.<?xpacket begin=" " id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.1-c034 46.272976, Sat Jan 27 2007 22:37:37 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:xap="http://ns.adobe.com/xap/1.0/">. <xap:CreatorTool>Adobe Fireworks CS3</xap:CreatorTool>. <xap:CreateDate>2012-02-23T21:26:21Z</xap:CreateDate>. <xap:ModifyDate>2012-02-28T19:47:25Z</xap:ModifyDate>. </rdf:Description>. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/">. <dc:format>image/png</dc:format>. </rdf:Description>. </rdf:RDF>.</x:xmpmeta>. .

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\navcancl[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	2713
Entropy (8bit):	4.1712007174415895
Encrypted:	false
SSDEEP:	24:r3avxU5hzsIVmVMeLmVMyHf63lboxMCLxvriN6LOAPAnQay78eLx5Tb87nVkEhML:upU0GVeLVGBXvrp4n/1a5TI7Ve/G79KX
MD5:	4BCFE9F8DB04948CDDB5E31FE6A7F984
SHA1:	42464C70FC16F3F361C2419751ACD57D51613CDF
SHA-256:	BEE0439FCF31DE76D6E2D7FD377A24A34AC8763D5BF4114DA5E1663009E24228
SHA-512:	BB0EF3D32310644285F4062AD5F27F30649C04C5A442361A5DBE3672BD8CB585160187070872A31D9F30B70397D81449623510365A371E73BDA580E00EEF0E4E
Malicious:	false
Reputation:	low
Preview:	.<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">....<html>.... <head>.. <link rel="stylesheet" type="text/css" href="res://ieframe.dll/ErrorPageTemplate.css" />.... <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.... <title>Navigation Canceled</title>.... <script src="res://ieframe.dll/errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="res://ieframe.dll/httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="javascript:navCancelInit(); ">.... <table width="730" cellpadding="0" cellspacing="0" border="0">.... Error title -->.. <tr>.. <td id="infoIconAlign" width="60" align="left" valign="top" rowspan="2">.. <img src="res://ieframe.dll/info_48.png" id="infoIcon" alt="Info icon">..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\newmynews-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.694467763670056
Encrypted:	false
SSDEEP:	3:Nxrwcs5DRfU1wvLdmAdRFN0NfGTcJ5DRfjv:4cANZk4Rb0NGUNrv
MD5:	AE50CB56D9CBACF3D0DE7C788552AB10
SHA1:	1485235B915B4D40E4B5942C8073F6A5BBD19BAE
SHA-256:	488083E80C28FC2D01F5C4028AE51168DD2C6421557E0474FB9064ECA89909E7
SHA-512:	CF7353982AF4F800711549CC0EA6470CF16491627BBA241FD382E6BE57E4AD1EA5D97CDDB5AD99624014543C93A7844CD1292D4A69FFFA78147D4E28FB61FC96
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/newmynews-7.701063
Preview:	.newmynews {padding-left:100px}.....mynewstext {width:235px; padding-left:30px}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\ontario2014-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	2883
Entropy (8bit):	5.245097695343798
Encrypted:	false
SSDEEP:	48:W/UX6C//UBT/UERT/UK3L5dpq/UERxJ/Ua/UB/Ufox/UeZwf2KL6AtxtKBUzukHv:xpEBA0A+5db0x2NefoOeMmayBUjf/f
MD5:	EE82F51E22C193F727B9B0AA310F0019
SHA1:	F846222D5E859AB40952C7511E16FC3E05180E1B
SHA-256:	C3B5076B7D56A5280C4EA7D38095284928FEF8FBA515EA8864E9DBAB06F3CD60
SHA-512:	C63AAA9FA4FB6EC65EED7D8A7D2ED3696F69FE1768A455F60E05763B89A302C0AC2EFFD2C7234AD811C6ACC0DFE0517B8E70246FD535F73B118E12FCE23E9B2C
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/ontario2014-7.523345
Preview:	.e-l {background:url("http://ctvnews.cookieless.ca/bellmedia/common/img/elections/resultHeader.gif") repeat-x scroll 0 0 #858585; width:938px}...e-l h2 { color: #FFFFFF;.. font-size: 14px;.. padding: 2px 10px;}.....pop-vote {margin-bottom: 5px; border-bottom: 1px solid #D1D1D1}...pop-vote:last-child {border-bottom: none}..span.LIB {background: url("http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_red.jpg") repeat-x 0 0 scroll #EA1B2B;..}....span.PQ {background:url("http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_dk-blue.jpg") repeat-x scroll 0 0 #0D3D85}....span.QS {background: url("http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_orange.jpg") repeat-x scroll 0 0 #F46102}.....pop-vote span {font-size: 15px}....span.LIB, span.PC, span.GRN, span.NDP, span.OTH, span.IND, span.PQ, span.CAQ, span.QS {.. color: #FFFFFF; font-weight: bold;.. border-radius: 3px 3px 3px 3px;.. clear: none;.. display: bloc

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\optout_check[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	164
Entropy (8bit):	4.956407455964654
Encrypted:	false
SSDEEP:	3:DLMNNNB3mXHWiBdVJX/YcHfH+FuH1vAdUNNNB3mXHWiBdVJX/YcHfH+FuH1M:8NYDBdVBAcHfZ+dkNYDBdVBAcHfZm
MD5:	AC2BD8FDD7314F6A38B6923B3DE64489
SHA1:	0B6E689F0987E318033562E17612FC8BEB48893B
SHA-256:	A189B676E9B260CBCC82B85B76D3AB83DC6528B49A62CF323486709903CEDF96
SHA-512:	8F4BFEE423491A0D5960E3DFDE9756237D5898BB43BC8320F3A046D9632C1902A74CBD451BE8DD4F283A298FA5900FEED4EF66959ECF7AD416A17BF7D291C799
Malicious:	false
Reputation:	low
Preview:	Krux.ns.bellmedia.kxjsonp_optOutCheck({"status":200,"body":{"_kuid_":"OAo8OofK"}})Krux.ns.bellmedia.kxjsonp_optOutCheck({"status":200,"body":{"_kuid_":"OAo8OofK"}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\optout_check[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	82
Entropy (8bit):	4.956407455964654
Encrypted:	false
SSDEEP:	3:DLMNNNB3mXHWiBdVJX/YcHfH+FuH1M:8NYDBdVBAcHfZm
MD5:	6A2B99D5F18BFF33AC253C2B4558FC32
SHA1:	74FD84C5E92E3527CF029C60AD9886C3ED7DAB59
SHA-256:	CBCCDED655DB5E0A42239FB8DAFD699D35DE3A81EDF9993467CEBED65A833371
SHA-512:	9C8364AB9ABF0BB2E4EDCFCC7A44FCF1116DFC65499EFB3B4708DDAC8FFF6751DC25289081D6716612B00B893F3AA3A0DC599250F82F4CF2C940AF0D7F8EFCEE
Malicious:	false
Reputation:	low
Preview:	Krux.ns.bellmedia.kxjsonp_optOutCheck({"status":200,"body":{"_kuid_":"OAo8OofK"}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\pixel[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\print[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	926
Entropy (8bit):	4.908886024112618
Encrypted:	false
SSDEEP:	12:SJDLWMT6tMYcE6BSR5NcW/DRhnYUHfGYE0Bd6UxOMeEbYS/h:mDTT68E6E2W/NhYcUfFg
MD5:	2017C614E515DEFC63563FC991B0A9E6
SHA1:	739BF49BF2C355B690BB5C76B729620EEDEFC575
SHA-256:	10BA22038ED2EACD2EA271BA16B71A4BF839EDE33F7346C84AFF47B907CBBCE2
SHA-512:	5C226C1E753571A3D28FEAB2B26CA4CBC027D2F25FBA3D56D811E2B10DE4C81F16A3B7FCD50A6818CF1D9FDC863E5C2ACF0D2981DAFBB85F07D76A971BECEC68
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/css/print.css
Preview:	body{margin:0;padding:0;background:none!important;width:98%;overflow:visible}h1,h2,h3,h4,h5,h6{text-transform:none}h1{font-size:16pt;margin:0;padding:0}h2{font-size:15pt}h3{font-size:14pt}h4{font-size:13pt}h5{font-size:12pt}h6{font-size:11pt}a{color:#7e7e7e;font-size:12pt;text-decoration:underline}.container,.article{vertical-align:top}.footer-logos{border:none!important}.content-primary{border-bottom:1px solid #000;color:#000;font-family:"arial,verdana",sans-serif;font-size:12pt;line-height:1.2;max-width:100%;float:none;display:block;clear:none}.banner .content-wrapper,.playa,.viewLarger,.breakingNews,.content-secondary,.content-footer aside,.content-footer nav,.back-top,.topAd,.tools,.StoryShareBottom,.articleComments,.footernav,.footer-logos,.mainnavigation_wrapper,.trending,.micronav,.content-wrapper .content-wrapper,.search,.logo,.time{display:none!important}.content .content-wrapper{display:block!important}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\pubads_impl_2021031601[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	291603
Entropy (8bit):	5.485638678562598
Encrypted:	false
SSDEEP:	3072:1V+x/ElJ1iM1AdKAtvYw77wYgCjYaFD1xXBaoecsQrQHgs1/69SednaRLcSM:Cx0c7r9BaI/M6IednMdM
MD5:	78533E24E91D3483EBB67AA079390AE0
SHA1:	5831BCD7E5DF74D87F64E502C735EC26B2F1F3CF
SHA-256:	EEA4A3705B3E19174B9F0F127702BFC02CDA65DFF1F5B25E65F48A9C65CE9A7E
SHA-512:	27B14FCDB56C0C7AC3C45E2B9131BA6B6085C34DDDAD981501B09EA9EC082D59C0B0F21B8271FE5FF313D8DD9263074974D97702368DF22445D5274CA7AF2B73
Malicious:	false
Reputation:	low
IE Cache URL:	https://securepubads.g.doubleclick.net/gpt/pubads_impl_2021031601.js
Preview:	(function(_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var ba,aa,da,ea,fa,ja,la,na,ka,oa,pa,qa,ta,va,ya,za,Ba,Da,Fa,Ia,Ka,Ja,Na,Pa,Oa,x,v,ab,bb,cb,eb,fb,hb,ib,tb,vb,Cb,Db,Nb,Pb,Vb,Yb,Zb,$b,bc,dc,gc,lc,nc,oc,xc,zc,Bc,Cc,Fc,Gc,Hc,Ic,Kc,Lc,Mc,Oc,Pc,Rc,Tc,Xc,Yc,cd,ed,fd,hd,id,jd,kd,ld,nd,md,qd,rd,ud,yd,Ad,Bd,Cd,Fd,Kd,Md,Pd,Td,K,Ud,Vd,Wd,Xd,Yd,A,Zd,$d,ae,$c,be,ce,ge,he,ie,xe,ye,we,ve,ze,Ae,Be,ia,Ce,De,Ee,Fe,Wc,M;ba=function(a,b){b=aa(a,b);return 0>b?null:"string"===typeof a?a.charAt(b):a[b]};aa=function(a,b){for(var c=a.length,d="string"===typeof a?a.split(""):a,e=0;e<c;e++)if(e in d&&b.call(void 0,d[e],e,a))return e;return-1};_.ca=function(a,b){return 0<=Array.prototype.indexOf.call(a,b,void 0)};da=function(a,b){b=Array.prototype.indexOf.call(a,b,void 0);0<=b&&Array.prototype.splice.call(a,b,1)};ea=function(a){var b=a.length;if(0<b){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};fa=function(a,b,c){return 2>=arguments.length?Array.proto

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\publishertag[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	117201
Entropy (8bit):	5.27026873814519
Encrypted:	false
SSDEEP:	1536:k+stamkwxupy8S0lUEEltGiYA4isR9HlG3g8mkvTyKDymXCfG:kWdy8RUEEltaDisRHGw8mmWmz
MD5:	66F62D66A306CB2B31135D61B7824C77
SHA1:	5E4DD929B406883C7FA088B5C8D37C50F765C9BF
SHA-256:	59883DC82297DE1D8FF485A115678FF6E56102EB1FC170C9808737535F6F8070
SHA-512:	3440D4A650E4950E8C669E52115B87705D6AAEF8BEDAC7FE46FE39A1687C9B1F920090601A2F528766ECE7E17EA62C4EA75F342EB2997F0F7B7968C1017EFE3D
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.criteo.net/js/ld/publishertag.js
Preview:	!function(){"use strict";var v=(i.prototype.isAdBlocked=function(e){var t=this;this.createPixel(i.allowedPixelUrl,function(){(t.allowedPixelLoaded=!0)===t.blockedPixelFailed&&e(!0)},function(){}),this.createPixel(i.blockedPixelUrl,function(){e(!1)},function(){(t.blockedPixelFailed=!0)===t.allowedPixelLoaded&&e(!0)})},i.prototype.createPixel=function(e,t,i){var n=document.createElement("img");n.src=e,n.height=1,n.width=1,n.style.display="none",n.onload=t,n.onerror=i},i.allowedPixelUrl="https://static.criteo.net/images/pixel.gif?ch=1",i.blockedPixelUrl="https://static.criteo.net/images/pixel.gif?ch=2",i);function i(){this.allowedPixelLoaded=!1,this.blockedPixelFailed=!1}var E=(t.create=function(e){return new t(e)},t.prototype.adBlockFlagEnabled=function(){var e=t.ADBLOCK_FLAG_KEY;return null!==this.localStorageHelper.getItem(e)},t.prototype.enableAdBlockFlag=function(){var e=t.ADBLOCK_FLAG_KEY;this.localStorageHelper.setItem(e,"1",t.ADBLOCK_FLAG_LIFETIME)},t.prototype.disableAdBlockFlag=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\requireDependency[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2207
Entropy (8bit):	4.986677921809749
Encrypted:	false
SSDEEP:	48:Bf59LeqyqYBUDDuQRte/t9naZe/y7ge//eKwJpkAO:h59vvk7nagy7LU4AO
MD5:	6AC49C3AAA041010C95303BF949E02DA
SHA1:	A4369C95B856F552162403DE69135D1D35EA51E5
SHA-256:	C831B45D68C45F1A4665D084C145FFFAB9A09DFDEC4AF94B5CD86CEB34DE3D57
SHA-512:	A6343DA0DCA14B3E7E0B05493EA41FB06D3921C34AD83EB64A7BD0D54BFEFE8F0BFBFF5FAB8BC156B2590176E7FE586E2F665B332104C85D5F6844EF5381486E
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/requireDependency.js
Preview:	var loadedResources={};function requiresDependency(dependencyURL,callback,id){var dependencyHTML;var isJSDependency=(dependencyURL.indexOf(".js")>-1);if(!isJSDependency){dependencyHTML=createCSSDependency(dependencyURL,id);requireHeadDependency(dependencyHTML,dependencyURL);return;}var resource=loadedResources[dependencyURL];if(resource!=null){if(resource.loaded&&callback!=null){jQuery(document).ready(callback());}else{if(callback!=null){resource.callbacks.push(callback);}}return;}else{var callbacks=[];if(callback!=null){callbacks.push(callback);}loadedResources[dependencyURL]={callbacks:callbacks,loaded:false};}var success=function(script,textStatus){window.console&&console.log("Loaded: "+dependencyURL+" with status: "+textStatus);var thisResource=loadedResources[dependencyURL];thisResource.loaded=true;jQuery.each(thisResource.callbacks,function(index,value){value();});};var failure=function(jqxhr,settings,exception){window.console&&console.log("Encountered exception while loading dep

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\responsive-override-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	4.7933853840100715
Encrypted:	false
SSDEEP:	3:NxSCJgXXgkZTfuFl62Vx6IUARCR8kWACJgXXgkZTfsVyC3n:GlgrfViARCBBlgn3n
MD5:	A77A25AE95B35C6575FDAE2D3C364139
SHA1:	67CD6DD46CB20319812EA6F288AF505608A86DAD
SHA-256:	42F5DD5CF8D92B493A558DAF75CF1D146F1C3FA298785DC81F2A608B07E81ABA
SHA-512:	86252945EFD15ECF99FFF4803AD4AFC6206E7F8FBB88B0DFA44012709DCAFAADD3913ECD862809A7FD91CCA298CD8AD8DE8A8EE3455949EC9918E3553E178192
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/responsive-override-7.726278
Preview:	.specialArticle .articleBody li {margin-left: 120px}..@media screen and (max-width: 768px) {.. .specialArticle .articleBody li {margin-left: 35px}..}.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\responsive[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	779
Entropy (8bit):	4.699450941999939
Encrypted:	false
SSDEEP:	12:2X9fvgefeyPTX2KTPJrJWt+XKTPJ6iVi/iqLAf5JDzf:2X937dTjTPJdXKTPJ6iLJDzf
MD5:	62A1329857273FB5F9D2E85DBFEBDDCC
SHA1:	B455D0FF507ED4704CAA5479256EB6371C61F59C
SHA-256:	281F42CA75CA2698089202BA461C6ACA36A4BB1B215E2DB6FB67F5AA3A9F7D18
SHA-512:	79A8FD369DB278002543FFCEC8A06F1CB61FECE22A6947B259BB0DDD41C1EB1551F3B49D3922E58046DFC536D5FB21AD2D710965F96D515E21AA8B87D4C5AA2F
Malicious:	false
Reputation:	low
Preview:	html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,figcaption,figure,footer,header,hgroup,menu,nav,section,summary,time,mark,audio,video{margin:0;padding:0;border:0;outline:0}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{color:#000;font:1.0em/62.5% arial,verdana,sans-serif;text-align:left;min-width:320px}.clearfix:after{content:".";display:block;height:0;clear:both;visibility:hidden}.hidden{height:1px;left:-10000px;overflow:hidden;position:absolute;top:auto;width:1px}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\responsive[2].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	779
Entropy (8bit):	4.699450941999939
Encrypted:	false
SSDEEP:	12:2X9fvgefeyPTX2KTPJrJWt+XKTPJ6iVi/iqLAf5JDzf:2X937dTjTPJdXKTPJ6iLJDzf
MD5:	62A1329857273FB5F9D2E85DBFEBDDCC
SHA1:	B455D0FF507ED4704CAA5479256EB6371C61F59C
SHA-256:	281F42CA75CA2698089202BA461C6ACA36A4BB1B215E2DB6FB67F5AA3A9F7D18
SHA-512:	79A8FD369DB278002543FFCEC8A06F1CB61FECE22A6947B259BB0DDD41C1EB1551F3B49D3922E58046DFC536D5FB21AD2D710965F96D515E21AA8B87D4C5AA2F
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/css/responsive.css
Preview:	html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,figcaption,figure,footer,header,hgroup,menu,nav,section,summary,time,mark,audio,video{margin:0;padding:0;border:0;outline:0}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}body{color:#000;font:1.0em/62.5% arial,verdana,sans-serif;text-align:left;min-width:320px}.clearfix:after{content:".";display:block;height:0;clear:both;visibility:hidden}.hidden{height:1px;left:-10000px;overflow:hidden;position:absolute;top:auto;width:1px}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\responsive_layout[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1390
Entropy (8bit):	4.847767101721521
Encrypted:	false
SSDEEP:	24:W6w3U454NRZdwQQNETELihUalC6fppC8lcnELcjaJ1snE4ebb+:nwCzBT9C2hY7Wbb+
MD5:	44AE32039C7C18F1C9059A3922F61603
SHA1:	C7DF4165781EDFABC5038D13AE20B48B5A63E831
SHA-256:	8A268F79AB7F5DC0C9C1073CE9876BD52A72F34209A623232BA7776AB2403FD8
SHA-512:	F44A07272750E7DB254AAD9FFE2370669C2F209858EEFD24413CB68940D97B2447D3874D76CB2A7000D0373A4B2A7A1D1E9F8A3849788FC182E355515A55139F
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/css/responsive_layout.css
Preview:	.banner{height:100%;display:block;clear:both;position:relative;top:0;left:0;width:100%}.skip-links{display:inline;float:right;margin:0;padding:0 10em 0 0}.skip-links ul{display:block}nav{display:block}nav ul,nav li{display:inline}.banner img.advert{display:inline}a.logo{display:inline-table;float:left;position:static}section.story img.feature{width:25em;height:auto}.content{clear:both;display:block;margin:0 auto;width:100%;padding:0;position:relative}.content-wrapper{clear:both;display:table;margin:0 auto;max-width:940px;position:relative;width:940px}.video-header .content-wrapper{max-width:940px;width:940px}.video-header.vid-page .content-wrapper{max-width:960px;width:960px}.banner .content-wrapper{max-width:970px;width:970px}.content-primary{max-width:620px;display:inline;float:left;margin-right:20px;overflow:visible}.content-secondary{max-width:300px;display:inline;height:1%;min-height:1px;float:right}.content-wrapper .col-wrapper{display:block;clear:both;width:100%}.sidebar{margin-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\rid[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	108
Entropy (8bit):	4.661274308676224
Encrypted:	false
SSDEEP:	3:YxhArynyjgPAADMC3MuHACNNpAcANQDxP/VXyTSf940Y:Ync1jMMtuHAWAcANQtPdXyTS1vY
MD5:	3494F9BD39B241AABB54FD9371076414
SHA1:	92253204EFBEF115D8A639E0C21ECB670D6C17A3
SHA-256:	CF7C91E7C6C735EFB745C0E3C5BF6A403797EFDD7BFD7E50486A880A46109C68
SHA-512:	FC1C2A53E3017C3E32B24A65058AA533F1EC66B987ECDD5239D68088EDBEC8CC70E5D2BCDB2636EB64534EDDD6AE447DC449C7073A4242CA114FFF9FA7DBEA50
Malicious:	false
Reputation:	low
IE Cache URL:	https://match.adsrvr.org/track/rid?ttd_pid=casale&fmt=json&p=183816
Preview:	{"TDID":"598e2931-1afd-48a0-a193-eeff58e08299","TDID_LOOKUP":"TRUE","TDID_CREATED_AT":"2021-02-19T07:02:57"}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\sh.f48a1a04fe8dbf021b4cda1d[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	72412
Entropy (8bit):	5.387358706587146
Encrypted:	false
SSDEEP:	1536:8V69lS5FN9hXuSja0+S+4p94gHaF1NCo+mzITLE5zv:88lStbuy+4pag6jNCaIUl
MD5:	AACCA0023866ABEF872428C704F65AE9
SHA1:	8C653A4221EC9A027A6AFC42BC2D376D613D5BB4
SHA-256:	55D783462E6671FA985A6B0829DB15474F4E57F0555C93E15CC2DB6A1D1E6CAB
SHA-512:	F92BE33D2DB5B072358905F4E07320F69EAECCF54CE9F31579506ADD7C4D9FCA02340DADCFE6AA3D7D32BBBDFC8331C523C535DB9E06F5410044F1649151858C
Malicious:	false
Reputation:	low
IE Cache URL:	https://s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
Preview:	<!DOCTYPE html><html><head><meta http-equiv=Content-type content="text/html; charset=utf-8"><meta name=robots content=noindex,nofollow><title>AddThis Utility Frame</title></head><body><script>/!.AddThis - v8.28.6 - 20200604;.Copyright (c) 1998, 2020, Oracle and/or its affiliates../../!....invariant : 2.1.0.BSD.Copyright (c).All rights reserved...Redistribution and use in source and binary forms, with or without.modification, are permitted provided that the following conditions are met:.. Redistributions of source code must retain the above copyright notice, this. list of conditions and the following disclaimer...* Redistributions in binary form must reproduce the above copyright notice,. this list of conditions and the following disclaimer in the documentation. and/or other materials provided with the distribution...* Neither the name of invariant nor the names of its. contributors may be used to endorse or promote products derived from. this software without specific prior wr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\share_button[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	83988
Entropy (8bit):	5.58985484863809
Encrypted:	false
SSDEEP:	1536:m47P6AG0l7lNzfVrV47y69v027lh0JBo9:m4r40pzpV4WM060E9
MD5:	A7830EC04988B3CA20566DDEC708F609
SHA1:	F23A198D8B510E0330C8C7B8FA02BEB4903EF2C7
SHA-256:	63846D1C74D3F0233378C72F4086B307716B890D6AE599EDE614DC72C8E86BC6
SHA-512:	B44572EFF9037233F6262F4E887A0357931B318125CB1C7761D0FE342BD7CD8C76ADE4D68AE79E5B860DE31190C4DDCCE6F3A6D73022ED360E9155D1442DFF01
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en" id="facebook" class="no_svg no_js">.<head><meta charset="utf-8" /><meta name="referrer" content="default" id="meta_referrer" /><script nonce="EwUlmK6k">__DEV__=0;</script><title>Facebook</title><style nonce="EwUlmK6k">._32qa button{opacity:.4}._59ov{height:100%;height:910px;position:relative;top:-10px;width:100%}._5ti_{background-size:cover;height:100%;width:100%}._5tj2{height:900px}._2mm3 ._5a8u .uiBoxGray{background:#fff;margin:0;padding:12px}._2494{height:100vh}._2495{margin-top:-10px;top:10px}._9n-e{display:block;padding:10px 0}._9n-f{color:#000;display:inline-block;font-size:14px;font-weight:600;padding-left:8px;width:120px}body.plugin{background:transparent;font-family:Helvetica, Arial, sans-serif;line-height:1.28;overflow:hidden;-ms-text-size-adjust:none}.plugin,.plugin button,.plugin input,.plugin label,.plugin select,.plugin td,.plugin textarea{font-size:11px}html{-ms-touch-action:manipulation;touch-action:manipulation}body{background:#fff;color

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\share_button[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	83985
Entropy (8bit):	5.583627797514067
Encrypted:	false
SSDEEP:	1536:u47c65x0O7ldb8LDKuzE47z6ts0D7l4UIG8nJ:u4oA0KbmE4/X0aUQJ
MD5:	AFEE8CAAEAC50B8901BF0EE9A7BE6C12
SHA1:	DAFB2C9C8CD83F328CBCC444CF7B53B8437D49AE
SHA-256:	7D4B67A9637576DED3852D250270C6D58449D24C966CF21EA5BA2049374BD902
SHA-512:	129C4386C3E1EB0E17D2DF5AEF4A56DDCC4C0EB2824ECEF59618CC35E6F0824E1B8A14E21CE0AD5BCAFA48E711C00A87FDDB8EDF2B129C89E29CC9DD19914210
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en" id="facebook" class="no_svg no_js">.<head><meta charset="utf-8" /><meta name="referrer" content="default" id="meta_referrer" /><script nonce="4HDm3eBZ">__DEV__=0;</script><title>Facebook</title><style nonce="4HDm3eBZ">._32qa button{opacity:.4}._59ov{height:100%;height:910px;position:relative;top:-10px;width:100%}._5ti_{background-size:cover;height:100%;width:100%}._5tj2{height:900px}._2mm3 ._5a8u .uiBoxGray{background:#fff;margin:0;padding:12px}._2494{height:100vh}._2495{margin-top:-10px;top:10px}._9n-e{display:block;padding:10px 0}._9n-f{color:#000;display:inline-block;font-size:14px;font-weight:600;padding-left:8px;width:120px}body.plugin{background:transparent;font-family:Helvetica, Arial, sans-serif;line-height:1.28;overflow:hidden;-ms-text-size-adjust:none}.plugin,.plugin button,.plugin input,.plugin label,.plugin select,.plugin td,.plugin textarea{font-size:11px}html{-ms-touch-action:manipulation;touch-action:manipulation}body{background:#fff;color

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\site.min.3fede6ce9d291960865a21982f0e4c90[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	41700
Entropy (8bit):	5.181416220165005
Encrypted:	false
SSDEEP:	768:6pp1vJdxh/iX7zd7C4EAj7nNx5VPRl5N1JZrCz8zqbcmbAZY7gtOuJqsve:6pp1vJdxmzdD9Nx5VPRl5N1JZ3qbcmb1
MD5:	3FEDE6CE9D291960865A21982F0E4C90
SHA1:	3B3DC6C03935F264DCE1A2492D4F4A3DE0CC9DC0
SHA-256:	22D20D47D52CAD0AEEE50FC26A5C71E1F64F597020C3B7A2CA4747BE8013A0FE
SHA-512:	EE4B798159B2FB5E572E5FD50C3356199DC66C1461AAE5D23680AA2815E20293918B8925E7D6C1CA1EBEC0DC08AAE9F2A9F737962505508A201E44E24B11F63F
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/bmdaem-domains/news/clientlibs/clientlib-brands/ctvnews/site.min.3fede6ce9d291960865a21982f0e4c90.js
Preview:	!function(e){var t={};function n(r){if(t[r])return t[r].exports;var o=t[r]={i:r,l:!1,exports:{}};return e[r].call(o.exports,o,o.exports,n),o.l=!0,o.exports}n.m=e,n.c=t,n.d=function(e,t,r){n.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:r})},n.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},n.t=function(e,t){if(1&t&&(e=n(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)n.d(r,o,function(t){return e[t]}.bind(null,o));return r},n.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return n.d(t,"a",t),t},n.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},n.p="",n(n.s=288)}({288:function(e,t,n){"use strict";n.r(t);n(289),n(290)},289:function(e,t,n){},290:funct

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\site.min.701f699c0bdfbb270a8f6aa9c503c375[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6013
Entropy (8bit):	5.229643732875822
Encrypted:	false
SSDEEP:	96:UacmASi3q2VqZQohXRooekB372JJBgEBoKB3BpB3nF6FL0QQefXfKlhMYVhYJY3E:UpmpCq2VTotRooekB372JJBgEBoKB3BQ
MD5:	701F699C0BDFBB270A8F6AA9C503C375
SHA1:	9E6E94445AF7896F607A80E497F5DF14CF50D5AA
SHA-256:	D383B2F6A3EE51366AA6B2E13F0EF5F022CA0AC381C13D859E98A540A050939F
SHA-512:	54E372B9729097010711BCCCE7B4D3A58EC415BDB5562A6E49441AA774DECAE547377282394083DBCA18A55253C67CBCCBE08BA5913D549178E0D033B4C2B25E
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/core/wcm/components/image/v2/image/clientlibs/site.min.701f699c0bdfbb270a8f6aa9c503c375.js
Preview:	window.Element&&!Element.prototype.closest&&(Element.prototype.closest=function(a){a=(this.document\|\|this.ownerDocument).querySelectorAll(a);var e=this,g;do for(g=a.length;0<=--g&&a.item(g)!==e;);while(0>g&&(e=e.parentElement));return e});.window.Element&&!Element.prototype.matches&&(Element.prototype.matches=Element.prototype.matchesSelector\|\|Element.prototype.mozMatchesSelector\|\|Element.prototype.msMatchesSelector\|\|Element.prototype.oMatchesSelector\|\|Element.prototype.webkitMatchesSelector\|\|function(a){a=(this.document\|\|this.ownerDocument).querySelectorAll(a);for(var e=a.length;0<=--e&&a.item(e)!==this;);return-1<e});.Object.assign\|\|(Object.assign=function(a,e){if(null===a)throw new TypeError("Cannot convert undefined or null to object");for(var g=Object(a),m=1;m<arguments.length;m++){var n=arguments[m];if(null!==n)for(var p in n)Object.prototype.hasOwnProperty.call(n,p)&&(g[p]=n[p])}return g});.(function(a){a.forEach(function(a){a.hasOwnProperty("remove")\|\|Object.defineProperty(a,"r

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\site.min.8f574834545947cfba89c3e191ddd2e9[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5687
Entropy (8bit):	5.244926882479073
Encrypted:	false
SSDEEP:	96:OdvPwdH0eDRQ1FpZUGmfeqZMj0WHszjxKRIs55eh34MA+7pwDt/nqDYHD5PSVLZe:MvPe0eDRQDpZUGmG30WHszlKRIs55ehq
MD5:	8F574834545947CFBA89C3E191DDD2E9
SHA1:	BD2C91FA777EF51A7292FC0B88F55CCAE9F80FAD
SHA-256:	4DEBE3760EEE84CAAFE27A460044C05BD6DFD17456B7AFD5D4BD25F388338EA6
SHA-512:	0117B3C69F49178072A9F1113B7DAEF234432105FE721919EAC0844F13D1A26E8C718DA869BE07177A0907B521EFC74DDE8FB6AC0855666B7B903C5F89C49A10
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/core/wcm/components/carousel/v1/carousel/clientlibs/site.min.8f574834545947cfba89c3e191ddd2e9.js
Preview:	(function(){function m(a){function f(c){c.element.removeAttribute("data-cmp-is");e(c.options);h(c.element);b._active=0;b._paused=!1;b._elements.item&&(y(),B(),n(),p());window.Granite&&window.Granite.author&&window.Granite.author.MessageChannel&&(new window.Granite.author.MessageChannel("cqauthor",window)).subscribeRequestMessage("cmp.panelcontainer",function(c){c.data&&"cmp-carousel"===c.data.type&&c.data.id===b._elements.self.dataset.cmpPanelcontainerId&&"navigate"===c.data.operation&&l(c.data.index)})}.function h(c){b._elements={};b._elements.self=c;c=b._elements.self.querySelectorAll("[data-cmp-hook-carousel]");for(var w=0;w<c.length;w++){var d=c[w],a="carousel";a=a.charAt(0).toUpperCase()+a.slice(1);a=d.dataset["cmpHook"+a];b._elements[a]?(Array.isArray(b._elements[a])\|\|(b._elements[a]=[b._elements[a]]),b._elements[a].push(d)):b._elements[a]=d}}function e(c){b._properties={};for(var a in q)if(q.hasOwnProperty(a)){var d=q[a],e=null;c&&null!=c[a]&&(e=c[a],d&&"function"===typeof d.tra

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\site.min.a273a9f6f4e795fa4cbcfbbd1663e90c[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3636
Entropy (8bit):	5.8808911576858
Encrypted:	false
SSDEEP:	96:f9XFTNAjlRnMNmJK3qoFiNAjlRnMN/Q861NO:f9RNAJRntn/NAJRnOv
MD5:	A273A9F6F4E795FA4CBCFBBD1663E90C
SHA1:	91DBE93631782797F2A526E9E629BE33996E614D
SHA-256:	38679D461319F8EA7D2C2BDE5AF82128C172BADA8065A9CC3C56B5F22D2D435C
SHA-512:	3068083C77D9CF1F751BA4A5DBB35EA3FA19C4D9D45CB93EB2E4D75CFE318A957E96C03F3C9F1DF751033F21684A03640C2C613EB02806CE03FFAB358C509BEE
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/core/wcm/components/search/v1/search/clientlibs/site.min.a273a9f6f4e795fa4cbcfbbd1663e90c.css
Preview:	.cmp-search{position:relative}..cmp-search__field{position:relative;height:2rem}..cmp-search__input{padding-left:2rem;padding-right:2rem;height:100%;width:100%}..cmp-search__icon{display:block;position:absolute;left:.5rem;top:.5rem;background-image:url("data:image/svg+xml;base64,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

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\site.min.d54c23ba76bd8648119795790ae83779[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	308
Entropy (8bit):	4.70981696594715
Encrypted:	false
SSDEEP:	6:wuCcUdfN1nwuTR6XEOW8HX3Lfau6ZlKvpuECSgwuEj2an:J8nnNR6xp3765VJa
MD5:	D54C23BA76BD8648119795790AE83779
SHA1:	D8D52ACAEB44EF8D5ED93D3EB65465AEFC8E8EA7
SHA-256:	50F43ABADD35CC811C5C927FA149DD93E18707562D9961D82208B3261E2C1A34
SHA-512:	1844CD63F89AA92C33D9D7E691B1F8DFB55F3195E86FB359719E6E81E82A98C5BBE3889D33C37499768F51DF5A48BF0633254F64E3257572566D444CCFC26FF9
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/core/wcm/components/tabs/v1/tabs/clientlibs/site.min.d54c23ba76bd8648119795790ae83779.css
Preview:	.cmp-tabs__tablist{display:flex;flex-wrap:wrap;padding-left:0;list-style:none}..cmp-tabs__tab{box-sizing:border-box;border-bottom:1px solid transparent;padding:.5rem 1rem;cursor:pointer}..cmp-tabs__tab--active{border-color:inherit}..cmp-tabs__tabpanel{display:none}..cmp-tabs__tabpanel--active{display:block}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\slick.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	41953
Entropy (8bit):	5.1745761144675955
Encrypted:	false
SSDEEP:	768:G1t6WvsBZPKBt3FPmS3+EYykK1GPzpiN9sJTPdATgjZ7Nc4hC5orG1TsJ:X0tVUkkK1GPz6QrG1AJ
MD5:	B53BDFC29E18F4D493D775A8023FBDC8
SHA1:	E9FCBCC4FA70CBA093B81D982A1B78509414CEF7
SHA-256:	E02AF7DF9A190D88380E2DCEC2050ECAA493AE2D23526DBEEC67F6907DF3A752
SHA-512:	027E1ADC510CC91E416CEF4245042A82C06C7318CCEEE34D99C71448448D56D5A7E77116C7907DA0EED15673EF3C6E847187183E9D06BF78BF410E0A53307958
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/slick/slick.min.js
Preview:	/. _ _ _ _. ___\| (_) ___\| \| __ (_)___./ __\| \| \|/ __\| \|/ / \| / __\|.\__ \ \| \| (__\| < _ \| \__ \.\|___/_\|_\|\___\|_\|\_(_)/ \|___/. \|__/.. Version: 1.6.0. Author: Ken Wheeler. Website: http://kenwheeler.github.io. Docs: http://kenwheeler.github.io/slick. Repo: http://github.com/kenwheeler/slick. Issues: http://github.com/kenwheeler/slick/issues.. /.!function(a){"use strict";"function"==typeof define&&define.amd?define(["jquery"],a):"undefined"!=typeof exports?module.exports=a(require("jquery")):a(jQuery)}(function(a){"use strict";var b=window.Slick\|\|{};b=function(){function c(c,d){var f,e=this;e.defaults={accessibility:!0,adaptiveHeight:!1,appendArrows:a(c),appendDots:a(c),arrows:!0,asNavFor:null,prevArrow:'<button type="button" data-role="none" class="slick-prev" aria-label="Previous" tabindex="0" role="button">Previous</button>',nextArrow:'<button type="button" data-role="none" class="slick-next" aria-label="Next" tabindex="0" role="button">Next<

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\slick[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1294
Entropy (8bit):	4.7404917371351
Encrypted:	false
SSDEEP:	12:4uJRlR8pZOZHEytfCb1mM/pIZpsgznvtFVE62AddpwskBtgB2Ns6TLp5eMcxr3CF:4u/SZOZHEPJ/pCpJznVkATpkHNrreVk
MD5:	499214B899717D73B956416856971B21
SHA1:	DDD29AFA0C3A68FF8E26B4AF0083BD1A9F708666
SHA-256:	0742938350DABEAF29329C002BC1691513A3B0F764EE581CC2B125E0ADE452F4
SHA-512:	98312FD4AD64161B3B1AF432937A3AD371C7EFDEF4F521E431E7081D3F8C14C8896462927BD072DFCD099A52C61F755E301322D5A5A6946BD4E4706CE5C7EDFE
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/css/plugins/slick.css
Preview:	.slick-slider{position:relative;display:block;box-sizing:border-box;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-webkit-touch-callout:none;-khtml-user-select:none;-ms-touch-action:pan-y;touch-action:pan-y;-webkit-tap-highlight-color:transparent}.slick-list{position:relative;display:block;overflow:hidden;margin:0;padding:0}.slick-list:focus{outline:0}.slick-list.dragging{cursor:pointer;cursor:hand}.slick-slider .slick-track,.slick-slider .slick-list{-webkit-transform:translate3d(0,0,0);-moz-transform:translate3d(0,0,0);-ms-transform:translate3d(0,0,0);-o-transform:translate3d(0,0,0);transform:translate3d(0,0,0)}.slick-track{position:relative;top:0;left:0;display:block}.slick-track:before,.slick-track:after{display:table;content:''}.slick-track:after{clear:both}.slick-loading .slick-track{visibility:hidden}.slick-slide{display:none;float:left;height:100%;min-height:1px}[dir='rtl'] .slick-slide{float:right}.slick-slide img{display:block}.slick-slid

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\test-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	575
Entropy (8bit):	4.913804847769307
Encrypted:	false
SSDEEP:	12:+IIRd0IFFQMkcM8/3FS5X+wCXdZ0ZkE9kAJbzHzEO3lkABhZkABWK8:z8TQxi3yoXDa19hb0YlphZpN8
MD5:	499A5A04E9B8D550F8049397E1682F68
SHA1:	A86171C9ABBC860670B4B4A832520E5FD7E33416
SHA-256:	A8D5D5F8D77ED23C5C6D553803B05C57FA6DB290CC24DFA528A0E0C56EF26A84
SHA-512:	82F89BA2B868409052963B506C477C39AA947F7C8C6771D5557C2506811E1267E42EA5F1ECEF37CC98F8E0126CEFC115E860E3E87DFB4D691D810A2D738E74DF
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/test-7.694456
Preview:	.video-header .dc.grid .vid {margin-left: 17.5em; right: auto}.....video-header .videoPromoList.threeGrid .dc div.teaser:first-child {margin-left: 25px;}.....bottom-links div, .coming-up-group .bottom-links div {.. background-color: #e0f2f6;.. width: 100%;.. text-align: center;.. padding: 5px 0;.. font-weight: bold;..}.......new-column .columnsplitter.threeColumns .column {overflow: visible}...new-column .columnsplitter li.dc .teaser {width: 191px!important}../.new-column .columnsplitter div.vid, .new-column .columnsplitter div.gal {right: 20px}/...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\toronto_layout[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	713
Entropy (8bit):	5.138330602174584
Encrypted:	false
SSDEEP:	12:O91S2HMH++67jKZh++FvI9d9cdXPVs0DzR4DJcdZw3ZQ94xVZ9c:Orzse+6PKe+FvIWpPp+VcdZkSyhO
MD5:	F7CEE28989DEAE70EC9D5B6BFE8B3191
SHA1:	FE22E5F7A50E05359F7DD19CC733B413FB047F18
SHA-256:	39C3C81BB56F3CD1445842D76C776A30ADF7EA927A06AC9EE0CCB4CB5D19FDEF
SHA-512:	2F30B0D6896D08C1080A6918D43F2D72735408F09346A349E1B5C7EB97970194506A79C41005E84C27677B6719CAD5BBC0347A1AED9C58B8E66F2CE03BC7DF51
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/toronto/css/toronto_layout.css
Preview:	@import url("../../common/css/rebrand-affiliate.css");.banner .content-wrapper{background:url("../img/TORONTO-header.png") 0 0 scroll transparent no-repeat;height:123px}a.logo_ctvnews{background:url("../img/TORONTO-logo.png") 0 0 scroll transparent no-repeat;width:123px;height:81px;margin:13px 0 4px 27px}.cp24-bar{border:1px solid #ccc;border-radius:2px;color:#666;background:#fff url(../img/gray-gradient.gif) repeat-x;font-size:12px;text-align:center}.cp24-bar div{margin:0 auto;padding-top:5px;width:620px;padding-bottom:2px}.cp24-bar p{display:inline}.cp24-bar img,.cp24-bar p{vertical-align:top}.cp24-bar div.home{width:auto}.cp24-bar div.home p{margin-left:5px}.form-submit{float:left;padding-bottom:10px}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\tsn-widget-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.8033814944415
Encrypted:	false
SSDEEP:	3:Nx/pyy/pyTNiSGsNRfFUZJLSovYRyMMLAXLLn/pWfKLqmFEFPLMsaVKYSov8n:1ZR4thRt6bARo8/pYKLqm+JL2bkn
MD5:	1D0144E285E17778FA31AA227968202E
SHA1:	4340B00BA189B8F5E213139E201EDC91502BF3C7
SHA-256:	924531E7FEF035BADD4808357DB24125052C332EC6E718CB46D8979189AB0158
SHA-512:	04443E1661E310BF2635D90299196C270F56D3D08E89F976C190E59D79C77CAEEED9C666B4428D4691A12DA11B7AB9F5DFBB1D57DFB7C2DD83B454B7DC0054CE
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/tsn-widget-7.701032
Preview:	.BNNVideoFeedLeft, .BNNVideoFeedRight {.. min-height: 150px!important;..}.....BNNVideoFeedContainer a, div.BNNVideoHorizontal h3 a {.. color: #000!important;..}.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\twitterNew[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	513
Entropy (8bit):	7.300964601683769
Encrypted:	false
SSDEEP:	12:6v/79GbUnZAIUqNnZux2ILcqIY8CaWXAKByJF8CJwiC9I7q/Iz:ppIUqNZngW7WXAKmFhJ+4UIz
MD5:	32364CC4566BDFA7FF602E894F5D9F4A
SHA1:	3DD1DA7611543C344B79EF28A8DBC82498831BF8
SHA-256:	1548CEAD62C22837EC266B37F21FE244DAFE3E68DDBB3B01ADBEC0EFAFCE9F26
SHA-512:	FF83F7EED07A7EE7545FF17BFD41380E00699BA669EBA57D5653B9F429716E4BB464F4EBBB19C86C4AF4A64F8BFF679579D2FA253ED41B2D1E36A37212664A1F
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/twitterNew.png
Preview:	.PNG........IHDR... ... ............tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b.Yq.......`..`..y..u.dEx..'....x................1.A.......?.j4...2....k.......`p.p.p.yH.....)Ja...t ...V.g?\|...q.-.*..@;.8.a:..t8.U..s..a.N...a.....P.:J...j.....o......Z.`..U....C..to.!...._~....X..g_0M.n..<7.8uqv.pC.!?..00.g....=K.A._} .9....3....7?\|#......$)v.......h.:..i.,...........rJ..+.O.%..k_..Uj..M.:.X..E....hz....2N..AF..F..O.3..[<A.......O............#.v..+@.XH!...o....?.I.`....`.X..`._..xZ.......IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\v2[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	299
Entropy (8bit):	5.05731106664479
Encrypted:	false
SSDEEP:	3:X4sz3xQAWP63WMCUG6/74FyGHfuQWrzcXHHA62KgNVhm2XShJiISagWFSbEcbXKF:p3xVWK9CUX/MtmQlN8eAQQEaW
MD5:	79185EDB47D1585705AB4463075F9B33
SHA1:	701CA5177869876A4B57C3489D68C477103AAF02
SHA-256:	6D596B8F382A1377CB7201AC4FAAF40B48943B38C77946E067338B66AF883376
SHA-512:	800B47B16EBD4BCB63C1D37ADFF12009DFDD9683FD437469733D6BF0BA96748B97F146EF90743468BC9FC099B413959F5FFE1D65F6F249666452957523D1D73B
Malicious:	false
Reputation:	low
IE Cache URL:	https://mb.moatads.com/yi/v2?ol=0&qn=(%2BIb%7Cj8o%3FJjDkk%7Bj12%3Ev%3EhhX%2FIX%5EpB1I%3Cq.bWol5%7D9%250m9%3FAd%5E8YDMt7%5EYa%5Dee%24%26X%258bNJqI011%5Dln13%2C(%3DN%7BqD%3D_11%5D2%24%3Cvmu!9%3FHa8h%3EdL7F%24%26FXJ9lrct2W.P%60n1%25y%5ETm_h(GJ25%3Dq%24%3BEtB8.%3AIO7v%3Ch%2Cqk%3BRk3Z.apc%3D%5EXa%5DLzXuI2mFjrRPP%3CV%3Cye%7Bzb%26mxjr%40%3F%3BggqhB3U4(%5BrU%24J)%2C4i8od%23pw%40%40bRS%3FIDzbPTR21KC&th=2077627710&tf=nMzjG----CHewJ-1rCAqD-P72zg-Id8O-&vi=444444&rc=0%2C2%2C2%2C1%2C1001431019%2C1%2C2%2C0%2Cprobably%2Cprobably&rb=1-qZ6yRFd4%2F1SF%2Fo1qYb7aadb%2B%2FIKBUGUSV3C%2FvEJM65hND7UVt69nIRrqyNQFcZFf7egP&sc=2&os=&qp=00001&is=&iv=8&qt=0&gz=0&hh=0&hn=0&tw=null&qc=-8&qd=-8&qf=1280&qe=906&qh=1296&qg=1000&qm=420&qa=1280&qb=1024&qi=1280&qj=984&to=000&po=1-0220002012002220&vy=ot%24b%5Bh%40%22oDPRHj%5BG%2B1ck9L%22%251xbqddcBX%5EOC%2CNKxnD%2CYooX%25%24(%3DNqU%60WNCNmL5%25GF.pB&qr=0&url=https%3A%2F%2Ftoronto.ctvnews.ca%2Fmore%2Fbios%2Fsean-davidson-1.4670847%3FcontactForm%3Dtrue&pcode=bellmediaprebidheader755367530455&callback=MoatNadoAllJsonpRequest_10490839
Preview:	MoatNadoAllJsonpRequest_10490839({"nu": 516052, "oh": 605832, "nm": 995323, "dc": 153406, "n": 162583, "s": false, "pcode": "bellmediaprebidheader755367530455", "c": ["gs_covid19", "moat_unsafe", "gs_news_and_weather", "gv_death_injury"], "ct": 0, "g": 0.0020208358764648438, "yi": {"_pbd": false}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\video-bin-column-css-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	troff or preprocessor input, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	462
Entropy (8bit):	4.84860448307251
Encrypted:	false
SSDEEP:	12:21Ae7asVTnXOYTbn0KQYqvDjzHYJ6uQtiNvyvDjzHYJ6uQtWn:qpasFXjEYqvDjfBU0vDjfB8
MD5:	92C643ED7E90D436D5D5CC234FBD1D9F
SHA1:	9A6738EB5CB88909567C07D931F7402F15BA913F
SHA-256:	ABD735FE1F6EADDA8F61FD9C58D8FE815F4B15876BF5815B08278D3CB0F7E9E2
SHA-512:	8FE0BD4C291A0691D76F65126B8A0961124278B54EF2FB8064C48571FE5378FBEFE58E1B008793F91A67803EC68CAA175BFDA752CFE73989FFF0A85D2E054F1A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/video-bin-column-css-7.489853
Preview:	.videoPlayListContainer{border-top: 2px solid #0b6d9d; padding-top: 10px;}...videoPortalCurrentClip {vertical-align: top;}...dc .localEd {margin-right: 0.5em;}.....sidebar .dontMiss .list .linklist li.dc .teaser-image-top .bn-headline h2.teaserTitle a {.. font-size: 16px;..}....@media screen and (-webkit-min-device-pixel-ratio: 0) {...sidebar .dontMiss .list .linklist li.dc .teaser-image-top .bn-headline h2.teaserTitle a {.. font-size: 16px;..}}...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\videoClipPlayIcon2x[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CC 2019 (Windows), datetime=2019:07:25 11:12:42], baseline, precision 8, 30x30, frames 3
Category:	downloaded
Size (bytes):	11506
Entropy (8bit):	6.015597954573626
Encrypted:	false
SSDEEP:	192:RjRrQy4FfC2NjVJkn6WHmlOYNMtKwMftW:pt7CTYnDkOYNg7MFW
MD5:	A6CF63C6BB988226C4D605C04A83DE1B
SHA1:	EF7F3A8D5D9870B99C240D77D5FEE88AFEE82275
SHA-256:	0366667430AB28C56F5FE079AA711C4E31ECA1F29AC910DC3EF02CE0335B81D3
SHA-512:	CE0E673525B21247BB1E706BAE3DF9B6DCBDD739D23D4A195D643EE1230342AC32157D6794B48FC7959005D58073E4F0A142B9A7DC58E98C6B76213F8B1F0F1C
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/elections/videoClipPlayIcon2x.jpg
Preview:	......Exif..MM..............................b...........j.(...........1....."...r.2...........i...............-....'..-....'.Adobe Photoshop CC 2019 (Windows).2019:07:25 11:12:42......................................................................"............(.....................2...........P.......H.......H..........Adobe_CM......Adobe.d......................................................................................................................................................"................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?...k.n^C..~.T..d7...~...#.i/..Rk...'.8x}..+...{....]w..............Photoshop 3.0.8BIM.%......................8BIM.:....................printOutput.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\videoUtil[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3372
Entropy (8bit):	5.173170472495178
Encrypted:	false
SSDEEP:	48:p2hvZMG8+unLLAPGArAXqAoAwMQ0lQD8weWZE2T+bBgBFbB5T36l9RSHqs13G4fV:+vunB44kZcSTAXSHJ1/xMO1toS
MD5:	273ABB4347DD5AD943EF6703A559FE64
SHA1:	624F19FBC6E190AF9CF1E070458147E83EFCC415
SHA-256:	29CB23B725B853CB2918FF3F4C8F874EEFF1D62DDA5BA22D38142433B1926775
SHA-512:	0A279145A2BF98EDE184D6F57760D13C1676B98E571EAAA8272F019C560C88CFB1DEF3F1FC774F8AA1DB9D8EA896D67627813354AA585E4E0CA822DE4435701A
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/videoUtil.js
Preview:	var CTVNews=CTVNews\|\|{};var CTVNewsGenericPlayer=CTVNewsGenericPlayer\|\|{};CTVNews.createClip=function(id,title,desc,imgPath,bugImg,shareableUrl){var clip=new Object();clip.id=id;if(typeof resourceName!="undefined"){clip.resourceId=resourceName;}clip.title=title;clip.description=desc;clip.image=imgPath;clip.bugImage=bugImg;clip.shareableUrl=shareableUrl;return clip;};CTVNews.getPaginatedClips=function(path,pageNum,maxItemsPerPage,containingDiv,autoPlay,isSendPlaylistToPlayer){if(path!=null){var targetPath=path+"?ot=example.AjaxPageLayout.ot";if(pageNum!=null){targetPath=targetPath+"&pageNum="+pageNum;}if(maxItemsPerPage!=null){targetPath=targetPath+"&maxItemsPerPage="+maxItemsPerPage;}if(autoPlay!=null){targetPath=targetPath+"&autoPlay="+autoPlay;}if(isSendPlaylistToPlayer!=null){targetPath=targetPath+"&isSendPlaylistToPlayer="+isSendPlaylistToPlayer;}targetPath=targetPath+"&isAjax=true";jQuery.ajax({url:targetPath,success:function(data){$("#"+containingDiv).html("");$("#"+containingDiv

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\weather-link-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.576480980547626
Encrypted:	false
SSDEEP:	3:NxzAAZVkIEcUsLzErAZV+hvXWlIrukdslIHDfFHKmyFFFw62+KvC:AAZG6UqorAZc5XW3ke2ZHKlFFweKvC
MD5:	727BC10E31F9E5D5512C5280C585B86B
SHA1:	9462A22A52C7D6A1EA365DC36211DD20E9271010
SHA-256:	C3EFEB1B67A619C0AFC0B0F29209CC48E191BCCFF4CADFB4A97A0A9BC9A22D3F
SHA-512:	0FA4271244CF655728D799B8D644B649EB805A5651645B727FA7279F2667FD5A696E3CA7A60AA13FC842AF654FDA36A4B6B55C4B03B0C3C88C8440EDD976E191
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/weather-link-7.729539
Preview:	.weatherlink {margin-top: -12px}.....weatherlink a {.. font-size: .7em;.. font-weight: bold;.. padding-right: .5em;..}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\webiconfont-v8[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 54436, version 1.0
Category:	downloaded
Size (bytes):	54436
Entropy (8bit):	6.246127516384597
Encrypted:	false
SSDEEP:	1536:cLoDgqdl3j++xOKw1FHuDWnaQCSXWDUwlMVJLfu:pjlS+xBw1FH0WnaQDXWDUwl6zu
MD5:	82A8F698FBF2CAAF1639CF914CC54A26
SHA1:	423AAA7BB84E00C0E96843A1C4D5C6FBE71FD63A
SHA-256:	FEBC229A4470A170E06C6672818F1D6B76CE62AD87340E17E5304C3D1D7AC848
SHA-512:	0D7856931829EB605691A9EC0C95F593A038F6C18691078AF28742C2A5F5B970313463C26BF1E1646D28FA60DA8AC303B11D96835A81FBC5AD72B9E4672E651A
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/webiconfont-v8.woff?s=2_620
Preview:	wOFF..............X........................OS/2.......`...`....cmap...h...\...\...,gasp................glyf.............Ghead......6...6...hhea......$...$...khmtx.............W.]loca............8w..maxp...... ... ...Zname...........}..7post...... ... ...............................3...................................@.........@...@............... .................................@............. ............ ......................................................79..................79..................79................U.m....%"'..'&'..5467107>.7632............1......#."............1......327>.765>.54&'1&'..'&#.8.12....#"&518.14638.9.5"....326510414&#8.9...A?@{<<9....%%.]^pB?@{<;9.....%&.]]q.gVU{"#....677r::;gVU{"#....678q::;.0EE00ED1EaaEDaaD...F55F......-,k,,..G55G.......-,j,,.N))b.......A11B..))c).......B12C...E00EE01D2bDEaaD.Db..........!.....w.....#"..1.#54&#1#"..1.#.4&#1#5.58.1".........3132..1.8.1..38.13>.58.9.5463132..1.8.1..38.13>.58.9..46313265154&'1...#8.9.....@.%.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\4PB7FJMT\webiconfont-v8[2].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 54436, version 1.0
Category:	downloaded
Size (bytes):	54436
Entropy (8bit):	6.246127516384597
Encrypted:	false
SSDEEP:	1536:cLoDgqdl3j++xOKw1FHuDWnaQCSXWDUwlMVJLfu:pjlS+xBw1FH0WnaQDXWDUwl6zu
MD5:	82A8F698FBF2CAAF1639CF914CC54A26
SHA1:	423AAA7BB84E00C0E96843A1C4D5C6FBE71FD63A
SHA-256:	FEBC229A4470A170E06C6672818F1D6B76CE62AD87340E17E5304C3D1D7AC848
SHA-512:	0D7856931829EB605691A9EC0C95F593A038F6C18691078AF28742C2A5F5B970313463C26BF1E1646D28FA60DA8AC303B11D96835A81FBC5AD72B9E4672E651A
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/webiconfont-v8.woff?s=2_7104
Preview:	wOFF..............X........................OS/2.......`...`....cmap...h...\...\...,gasp................glyf.............Ghead......6...6...hhea......$...$...khmtx.............W.]loca............8w..maxp...... ... ...Zname...........}..7post...... ... ...............................3...................................@.........@...@............... .................................@............. ............ ......................................................79..................79..................79................U.m....%"'..'&'..5467107>.7632............1......#."............1......327>.765>.54&'1&'..'&#.8.12....#"&518.14638.9.5"....326510414&#8.9...A?@{<<9....%%.]^pB?@{<;9.....%&.]]q.gVU{"#....677r::;gVU{"#....678q::;.0EE00ED1EaaEDaaD...F55F......-,k,,..G55G.......-,j,,.N))b.......A11B..))c).......B12C...E00EE01D2bDEaaD.Db..........!.....w.....#"..1.#54&#1#"..1.#.4&#1#5.58.1".........3132..1.8.1..38.13>.58.9.5463132..1.8.1..38.13>.58.9..46313265154&'1...#8.9.....@.%.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\379708[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\7[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with CRLF line terminators
Category:	dropped
Size (bytes):	3084
Entropy (8bit):	4.967310772627348
Encrypted:	false
SSDEEP:	96:jG/qbrTOpWRF7riesGLb1uSxLmxYx9axLtwxumMPFs2sHDbWDxx8xxxH9xLtPxuZ:jG/qbrTKWRxr5PLJ5xLmxYx9axLtwxu9
MD5:	565E4AF23BE224C64D5AA194BB6107BB
SHA1:	2DFEF1B84458B25DEEC50DD0886FC370F354108B
SHA-256:	114C4935EFEA50358F4471B2F994160949CD99425C609A3D8F78CC9523B782DF
SHA-512:	596F6540404F532E34C4D96A1F633B8B1CC2B6E75BCEF70BEBD76514EE98F769088F3D97C8C0B376C74058CBDD34571EEBCC0371253896FE691D5C5E436BA975
Malicious:	false
Reputation:	low
Preview:	function beginPlatformsTeaser() {.. platTease = document.querySelector('#platform-tease');.. platTeaseHead = document.querySelector('#platform-tease > .platform-tease-head');.. platTeaseHead.innerText = `Platform Guide`;.. platTeaseImgDiv = document.querySelector('#platform-tease > .platform-tease-image-div');.. platTeaseDesc = document.querySelector('#platform-tease .platform-tease-description');.. platTeaseDesc.innerText = `In the battle for the electorate.s hearts and minds, it can be difficult for voters to keep all the platforms straight. We.ve compiled the promises made by the six major parties in one place.`;.. platTeaseLink = document.querySelectorAll('#platform-tease .platform-tease-link');.. for (e of platTeaseLink) {.. e.href = 'https://election.ctvnews.ca/platforms'.. };.. platTeaseLinkText = document.querySelector('#platform-tease .platform-tease-link-text');.. platTeaseLinkText.innerText = `Click for more`;.. platTeaseLinkDiv

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\8613[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	481
Entropy (8bit):	5.326269622167282
Encrypted:	false
SSDEEP:	12:BMQtJOo9vt2xsK+zT5njluMG0RGXA5njluMG0RGaEQb:WC/tJPT5hrR4A5hrR3
MD5:	CEAF86943B63ADB58ABBF297FDE73C8B
SHA1:	2D15CE63D394948DB2CF990DC704A9C50F80F9E4
SHA-256:	33028B306202787AF41768DACB7FBC2B20A84F3A1F026CC0893D177AF270FCCD
SHA-512:	F2C3D39F2978BAD6D410E7BF554BA34260AA65D25D8C136ED831534493DFDFF2D718F91EFB5BD25F83BAF3D286E0C130608DEFC5AA13101149CA4EDC6C40D509
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">.<html>.<head>.<meta http-equiv="pragma" content="no-cache">.</head>.<body style="border: 0; margin: 0; padding: 0;">.<img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293468&gdpr=&gdpr_consent="/><img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293438"/></body>.</html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\970-ad-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	206
Entropy (8bit):	4.572212344311526
Encrypted:	false
SSDEEP:	6:AOyC/k8EhaijFr/vcqsOEuUijF88OhbLhSk8IxC:AO48vQx/kqdYQu8OFh98Iw
MD5:	1C493CBD09E3FFBD0903B0574420421F
SHA1:	D118BEEECC89583116A398C3E0E462CE556748F9
SHA-256:	BE0A2BC54C7D2DE82AB11ACA303645DE3CD486FC4E2BB3506949EC6A93620BDA
SHA-512:	1F1D58A778C50A5C84C7B02DE8644DDECD2F2414715923643F2C38FD942EADFA6829823D7321EEFC966F68D0D7E79726FC4906F9D554E507175D35521645D1C9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/970-ad-7.682214
Preview:	.topAd {.. background:none!important;.. width: 970px;.. margin: 0px auto;..}.....topAd .advert {.. width: 970px;.. background: none!important;..}....body {.. background: #F8F8F8; ..}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\CTVSans_Medium[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 52032, version 1.0
Category:	downloaded
Size (bytes):	52032
Entropy (8bit):	7.987313596619033
Encrypted:	false
SSDEEP:	768:eqCBwQ974Uh9IgQEPO+CzpVS6edGcgphkrHsWMjlsq58shzvOdAxH2h7a6tX6W:gBwM74UwucpsrGcgTEjWhzOdwwa6tX6W
MD5:	17AEB647B169F93CECD6DF7C8D51B370
SHA1:	7B71D7A72C49E836ECAF3963DA3DE0C183EAC9A4
SHA-256:	A47335C8C67F93ECB0C7A1EC53D515B2CA94EFEAE659CF9B9950C4A0FCD1EE93
SHA-512:	EA300FFC2007AE4F74D185FEDB4AF55419DAE35462C76F60C6939E9316A3EC8D0E91225E5DEF2893DB6BED07D184ADE49442DB0504F145468CB4C80071140434
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/bmdaem-domains/news/clientlibs/clientlib-brands/ctvnews/site/resources/fonts/CTVSans_Medium.woff
Preview:	wOFF.......@......G.........................DSIG................GDEF.......^...v.!..GPOS..........;.-...GSUB.......B...F..n.OS/2.......O...`}.J.cmap.......y....%..cvt .............]..fpgm...........s.Y.7gasp................glyf.......p...\|.).head...,...6...6....hhea...d...!...$....hmtx...........\.k;.loca.......0...0..kzmaxp...... ... ....name.......2.../.h..post............#.%5prep.......K...`3..........x.%....P.E.}...5...D_...4.T......A@...#...qAKg.]pa..l....v....."..i...\u...../....+.....x..[}.T..?wfgf.....\>.Oa.e.aeY..a.T.Z5........(.X....lZ.JR...U.FQ.i.m.6.6k.....#-)..Ra.@.....{.}o.{3.;,,..y..w.9...{...Dd...@.u]7.JM.~aW7M.....\|^...........m....W.^...Y..H.......MF.E...y..6.%q....../..6xy.....S._.. ......G.....+.-\|_......#...?.[j.j..j..^M..?.d.'..H6....N..GWD.F..%z.V.....n.m...MTK.P.~..G8zq<..ez.....G.v8......Y..l...........]g...t.R.GI:..E+.,F.%NZ,....R.a.........>p..q..sr.L.a.......<P....t..Z)!.iI....g@J...P...^.................8o....P.B..5,....r.y

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\Flama-Medium[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 51550, version 2.0
Category:	downloaded
Size (bytes):	51550
Entropy (8bit):	7.992081597190865
Encrypted:	true
SSDEEP:	1536:MyAb5WvvP/OxD1pssP6MseiTSYBF0lFQdE:Mtb5y/kD3DiMseiTSyaFoE
MD5:	F2AA91ECABAA353CB996389BA6A68EBF
SHA1:	6B110DAA478B044BBADA104A0D0ED3509ACF8190
SHA-256:	8D929170DBE9238BD8611E5DED93041A6484BD2A27845489E065BDF2D6E12B84
SHA-512:	023E76D75759BCFEC23CC09AC2D4C6AD4FB8314D7646EA2530A31F13D2E47952D282DFE49EF56908A77A83B0EE89CC157FE68F73EFCD7193F804DE77628F85D4
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/Flama-Medium.woff?s=2_620
Preview:	wOFF.......^......................t........GPOS.............W..GSUB..............OS/2.......Q...`<KN.cmap...........j...Bcvt ...\|.......8....fpgm...........u...gasp................glyf...`...:...j..i.head...l...6...6..\|+hhea.......!...$....hmtx...<.......d.?@.loca................maxp....... ... ...Mname.............S.Lpost.......n....CA.prep.............D$............._.<..........vG?.....o.........R............x.c`d``..w...M....w6>...2`...{;..........Y...........(.5.n.....u....x.c`f.d.``e``...........2.3..E.``........0.[..........%.Q]..a2H....$..............x.._h.G.......6A......S/gr.....l..IN.j.........[j_.}.("J.OV........P.lA.j...P......on..^6..........n..........U.c....fc....(....[,S.....J.&.7MmwJ.^.z....EF..I.D.m..zr1..@.X"@.>...=...l..b....K.P......z.{..g..E...z.:..!2.u..9....7U..h...p.q..Wz#`.FLWa.X...-pu).E.P.h*.r.D...c.p....u..K[.y.t.m...3.k7[q~o........OQ...\ub....SOQ.DP.9..7(1. .k...i.....s..A?.IZN..s..#.5HP5.c.f.4..T[.9."..b.Z..j..@.....9,...S.H.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\article-fix-for-list-elements-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	165
Entropy (8bit):	4.782892378616561
Encrypted:	false
SSDEEP:	3:Nf9BISXlx6IwFGdFLhFqVMfHSLI8+AALt6AbRNsKJd2XArXerfsGAmMosYv:dlXlaWxhYV6HSE8mRHrmwrOLsGAmMox
MD5:	11A903290535EBECE1928829479082D2
SHA1:	A3501FD2150B9ED6C2E2F64BE8F5B66BA4EFF081
SHA-256:	EC8F19391E9088B2EAA0CA5455AFFC9BCBFECA0D156AC51261DDE1F1F39D90F1
SHA-512:	FBE92FA6E30493C394B81B3036084D166A8D3CA57287F28EA07DDE7C4787C8BB2A3B6ED950AF68BFC815388155620B51CBE689778F8CC416B62871D04E0FC96F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/article-fix-for-list-elements-7.745934
Preview:	@media only screen and (min-width: 1200px){.. .electionArticlePrimary .graybox .linklist .dc .element.teaser.threecolumngridteaser{width: 33.33%!important;}..}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\banner-temp-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	10991
Entropy (8bit):	5.155847441877316
Encrypted:	false
SSDEEP:	192:q4iCj0BKbG5wKcMeCJcHoFKD5/r0nrUz4yhrEHFrjIAryrgLGobDTjOkPfGeV8MY:/7rgUz4yFEHZjZEmOCvGp
MD5:	EC10D55FA742024A992EDC0EA0AE9E12
SHA1:	8081928ACAF0669F0DA572F630E29322090BD203
SHA-256:	C414662A41E9E6911F09F8A500B26D082CE0E26E20C91CF91D3361B20812CF43
SHA-512:	A1F030D41BFD3B233025E643D9F6EB1DB654131A497C3629D9BF6FE7AE79B946BE3381C1C42EB2CCB5876E9086A6BFA90413CD67D1844BB2F9BAD5EF2E39C274
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/banner-temp-7.298239
Preview:	/* Temporary Ad Placement Fix /.....content, .banner .boxAd.secondClass {background-color:#FFF}.....content-footer div.thirty-by-one, .thirty-by-one div {border: 0}..../.topAd {background:url(http://static.ctvnews.ca/bellmedia/common/img/ad-bar-bkg.gif) repeat-x scroll 0 0 #2d2d2d; width: 970px; margin: 0px auto}/.....on-electoral-news .columnsplitter li.dc .teaserTitle {width: 195px}.....topAd .advert {/width: 728px;/ background:url(http://static.ctvnews.ca/bellmedia/common/img/ad-bar-bkg.gif) repeat-x scroll 0 0 #2d2d2d;}.....breakingNews .comment-video, .content-secondary .videoPromoList .dc.grid .comment-video, .content-secondary .tabviewelement .element.list.none .linklist.vertical .comment-video, .poll .comment-video{display: none!important}.....list span.comments {text-indent: -30000px}../ Not in file */...toronto2014 svg {.. background-color: #fff; }.....comingUpBlock p a {.. display: block;..}.....coming-up ul {padding: 0 5px 0 22px}.....commentList .row {padding:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\beacon[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	429
Entropy (8bit):	5.0842430631408515
Encrypted:	false
SSDEEP:	12:b8zimiIEXunRN/GxMM45MM4Jv+Ev+oAAALCtpLv2RPF:omenRNOmMyMMOv9v5AAAL4pyD
MD5:	0F98B523EB13E33303C202772D15620B
SHA1:	0D907AFF0ED2D987954CD34EDBF330237BA58230
SHA-256:	4F19D310A21D413CF2A62A69F3AF2B714DC2917DA1B1E3D826B4D322DEAC89AC
SHA-512:	06F484C8CFDEF6D2EAFC9AD5F4939D6B7D2BACF15C9D517FC327B5C6578E3014302D6EC508FF6864E020DC27295BEF5E3CF4EAD9BB40FAD15388518142541CB5
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/comscore/beacon.js
Preview:	writecomscoreBeacon=function(){var dist_id="3005664";document.write("<img alt='comscorebeacon' id='img1' height='1' width='1' src='//beacon.scorecardresearch.com/scripts/beacon.dll?C1=2&C2="+dist_id+"&C3="+dist_id+"&C4="+escape(window.location.href)+"&C5=&C6=&C7="+escape(window.location.href)+"&C8="+escape(document.title)+"&C9="+escape(document.referrer)+"&rn="+Math.floor(Math.random()*99999999)+"'>");};writecomscoreBeacon();

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\bidRequest[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.443732754068414
Encrypted:	false
SSDEEP:	3:YMWVW1emRcQ6PgHpLHonEuHY:YMSWh6Pw+EuHY
MD5:	0ABB39DD8E1285C89E0B5C134CECB309
SHA1:	81814232FE809560481A423DE08CD1C36C965B57
SHA-256:	1FAE6C80B761CAD117D95E49507577478CA0C4CACE6DA0B01EC28C34764582C9
SHA-512:	D45868FCC7D0C178D08D3DB137CA5327EA9F3F8468BA79C4122EB18F6D7D71CC998A24782F95A121954E7DF197A04274E8F3D2E670B32154C91B3FDB7F703F73
Malicious:	false
Reputation:	low
Preview:	{"id":"e62037ce24c14bc495eefa5d3e75b0b0","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\bidRequest[2].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.367041020162552
Encrypted:	false
SSDEEP:	3:YMlDQXTd7I0hXTXQLHX4nEuHY:YMuDl3QzoEuHY
MD5:	224ED31A19BC90CA5A4F4D1AD77FD3B0
SHA1:	938E3CB203416D75BDCA6177AF06979EA56020F3
SHA-256:	13D9ADF54B6CD047737422B0C31F263891D33C031488CF890AC8E5FD617CC66C
SHA-512:	3C35A6E5934779927FAD4CAA365025482D1769A4E02C907DB3660AA5CBA66B667C93076DCB4CD12A37029013C77C5ABAD310F71A820946B26128CFDED5B95693
Malicious:	false
Reputation:	low
Preview:	{"id":"48f52b68aa4c40da87cacc7b3c262bba","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\bidRequest[3].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.454297625553148
Encrypted:	false
SSDEEP:	3:YMAZHIdEt5j0nEuHY:YMFSqEuHY
MD5:	173C050ECC079C99F3E1DCEBBDB9DD34
SHA1:	1AAFE5E317A7E7890273DD4D6F2F291617800737
SHA-256:	183F00F9B6BB6881EDD01B76D43AA37837B1D895242FF0396ADD0FD3B95418A5
SHA-512:	D69AC8375B0D5E74E90CE7AE5A8E11A90B0237DA35B3CF4DAC39D9E2D679791BE639479D3476A9986349C4F7E554542D59D44D924093CEF7BA52D0B320779259
Malicious:	false
Reputation:	low
Preview:	{"id":"95f61ca0638e423ca8a4dcbbb1e91812","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\bidRequest[4].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.3674134005868135
Encrypted:	false
SSDEEP:	3:YMJXcWHw7VcPH0nEuHY:YMCWHYcMEuHY
MD5:	5AA3A3B530C16F0B60A36FDBE2D73D52
SHA1:	36324AB005F601D6C3F8529E372260EB38358F10
SHA-256:	0BE62382C6C1164BEE62DE371CA33F9241484ED9AB18A8D89F1D0CFA254CAA51
SHA-512:	A75B8595C25DAAE127E745B6210A61B2F40D05C3C93CDF0141286142D61B700C4746A8CDB19DE58C757A0D4FE2E1FDE40E55E253304C1915CBD93DEA9D71A0C6
Malicious:	false
Reputation:	low
Preview:	{"id":"802b9d65e1b24a18b51230172b072fbd","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\bidRequest[5].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.409447318276917
Encrypted:	false
SSDEEP:	3:YMJAJESucEAOsEWEJrInEuHY:YMqEtOYUEuHY
MD5:	068B7C834D37BE75E334F907A0807E44
SHA1:	91668166D745BE54ED87686E5C2EDE67820C12C9
SHA-256:	3A52BC4F41C41F7D7607E9371005EAC807DBDF234E6AEC45B19C785FA0C694AE
SHA-512:	7B5D1813C12F8C82A59DA74B0F1C8D1799DD36DB55D333BEE60817939C462705778DDDD0FBA826C2593F9C6DABEC680118C264663DD35C9F3DDCED296DCA6812
Malicious:	false
Reputation:	low
IE Cache URL:	https://c2shb.ssp.yahoo.com/bidRequest?cmd=bid&dcn=8a9694c7017474db0327db644d6e001d&pos=ctvnews.ca_desktop_atf_970x250_370&secure=1
Preview:	{"id":"768ce835a73a49d9aea81830ca377045","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\bidRequest[6].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.468083963815622
Encrypted:	false
SSDEEP:	3:YMgBWFIGHXbvJ74nEuHY:YMiWqQrh0EuHY
MD5:	5729827C106144586559346F72C57301
SHA1:	A801A6E13D4D2860000D7F15B329EAA3F8AF065E
SHA-256:	76E8A5E3582E9DC5FE5D04BC35AA3BB5F8EC02754DD9005D2AA5BDF00B5EC72C
SHA-512:	1FB2F4B36EFE86FD5194AB5CA7BBC08D9690EA5DD42B0E4BCCA434274D3CA3BB9E1BABCDE69009D2FC71111EE8153DBBF3612213CB3148787E92A132C660CC7E
Malicious:	false
Reputation:	low
Preview:	{"id":"c6800c48f1b24320bf65cb6921aee188","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\brightcove-responsive-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	239
Entropy (8bit):	4.218898043601369
Encrypted:	false
SSDEEP:	3:NxLxEbXhdF/dJsG5FVtA62J+XQsCCNUgC90odNdjWyeW0F8veWi/t5FU/M:ZE3F/n5VtA4XQs75G0ofosG8veWiBT
MD5:	F4AF8B40B57545BADD1A2F14743EF7D2
SHA1:	2D7AE3E0A4C681F8305830E49638D3F030119281
SHA-256:	CD75ED3C502885044D7834FA839A584C0305FF5B2CDDCBE234DA2E9D70427603
SHA-512:	48525D6461593AA441A7EB38F2E9E458B1656030142E17C20F652BF3BA319DA6E66419ABEF98E5F91DEADE0BCB9736C353ACCDB605B49F2C7079AAE1D2BFD549
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/brightcove-responsive-7.666233
Preview:	.outer-container {.. position: relative;.. height: 0;.. padding-bottom: 56.25%;.. }...BrightcoveExperience {.. position: absolute;.. top: 0;.. left: 0;.. width: 100%;.. height: 100%;.. }...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\ca46aa22-e6b4-464e-9077-7215dc98bc0a[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	224
Entropy (8bit):	4.672282959714178
Encrypted:	false
SSDEEP:	6:8NEj0Lo4XCq42H/Ly9YuJDR4x4RvrKuxhHj7ezri2:H0E4XjfLyT9R4xExlPezL
MD5:	D855EAF9A414FDA0AA1F654D82A9B54D
SHA1:	F89E9E4E5D57907D73FD65892445BBD82AB95C04
SHA-256:	C6437BD6883DE0479A1EFAC1B22BF6B5B970FA7DEE1314D4E0C1E63A0BEF0472
SHA-512:	44D4289C8DD0090542C1CA46D2F05E32AD6CD9B3DB9CBA82B6B5E3D0D13DE25EDDAC243504C39756F2307087AFB43A65A6BDF0D25C2F073DAF2CB97021E66941
Malicious:	false
Reputation:	low
Preview:	Krux.ns.bellmedia.kxjsonp_consent_get_0({"status":404,"body":{"settings":{"dc":1,"al":1,"tg":1,"cd":1,"sh":0,"re":0},"pr":"global","code":"not_found","source":"unk","errors":{"not_found":"consent not found for OAo8OofK"}}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\common[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8243
Entropy (8bit):	5.255514315035491
Encrypted:	false
SSDEEP:	192:/QlVKRuF5HGxZvAB4ZGNUGHBg98Y2Mdl/XtQI9vEjXT7Tl1TtXBrUN9d:45HGjAqsNLg98Y2Mdl78v7Bpy
MD5:	BD6B5669DA92F285867BBCA87277594D
SHA1:	835577EB56047C392F6E8E3A4C69AC47FEF7C803
SHA-256:	152FA4721770CF1DC87AEA48E62A1AD5DAE570995E09574057C0C1F440A2691E
SHA-512:	7D87C27931D4CE7E8452F6850791905B771263DF44736F4A4F356B9B4FDD080CCF112E72EA914FF25C6005E1F12CC2F229B815F98DFFF60544B1A3E190A8E637
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/common.js?v2
Preview:	$(document).ready(function(){jQuery(".unmutePlayer, .crushPromo").on("click",function(){unmuteVideoPlayer();});$(".increaseTextSize").click(function(){var article=$(".article");if(article.hasClass("large")){article.addClass("larger");article.removeClass("large");}else{if(!article.hasClass("larger")){article.addClass("large");}}});$(".decreaseTextSize").click(function(){var article=$(".article");if(article.hasClass("larger")){article.addClass("large");article.removeClass("larger");}else{article.removeClass("large");}});$(document).ready(function(){$.fn.delayCustom=function(c,searchView){this.each(function(){setTimeout(searchView,c);});return this;};function initLabelBehaviour(){if($("form.frm").length>0){$("form.frm .row label").click(function(){if($(this).siblings("input:text").length>0){$(this).siblings("input:text:first").focus();}});}initFunctions.push("initLabelBehaviour");}var searchView=false;$(".links-search .search a:not(.close), .links-search .search").click(function(searchSub

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\container[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5810
Entropy (8bit):	5.546604696057645
Encrypted:	false
SSDEEP:	96:euWaCmmku4wh5Wjg4bfIX5jch828cInOhfYzVAexeZCp+xPvF1zj:NjS4i50TfIXeh8vef4VAe8a+FNJj
MD5:	94918A2321B72368FDFE5B171AA653CD
SHA1:	98B7880B6C2A5FED14B55458E175424D34FDCD69
SHA-256:	E86479D6E54449D1085C2149E190A615C6BEAD407B20BACBCF5852B5D65F1FEE
SHA-512:	9C9616CCBC9765F4E825F6B57FBA35E57B97B5EF5F51E88A5FE6D44BF22EDBEE1A52975F3311FE25D2CA65837B34DCB51CC2E00F02410C54A3AEEE6A2C17E255
Malicious:	false
Reputation:	low
IE Cache URL:	https://6c5e656eacf1e454f2b74328abac76ba.safeframe.googlesyndication.com/safeframe/1-0-37/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){var n=this\|\|self;var w={};var y=function(a){y[" "](a);return a};y[" "]=function(){};var B=null,G=function(a){var b=a.length,c=3b/4;c%3?c=Math.floor(c):-1!="=.".indexOf(a[b-1])&&(c=-1!="=.".indexOf(a[b-2])?c-2:c-1);var d=new Uint8Array(c),f=0;C(a,function(g){d[f++]=g});return d.subarray(0,f)},C=function(a,b){function c(q){for(;d<a.length;){var e=a.charAt(d++),k=B[e];if(null!=k)return k;if(!/^[\s\xa0]$/.test(e))throw Error("Unknown base64 encoding at char: "+e);}return q}H();for(var d=0;;){var f=c(-1),g=c(0),h=c(64),p=c(64);if(64===p&&-1===f)break;b(f<<2\|g>>4);64!=h&&(b(g<<4&240\|h>>2),64!=p&&b(h<<6&192\|p))}},H=function(){if(!B){B={};for(var a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789".split(""),b=["+/=","+/","-_=","-_.","-_"],c=0;5>c;c++)for(var d=a.concat(b[c].split("")),f=0;f<d.length;f++){var g=d[f];void 0===B[g]&&(B[g]=f)}}};var I=function

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\container[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5810
Entropy (8bit):	5.546604696057645
Encrypted:	false
SSDEEP:	96:euWaCmmku4wh5Wjg4bfIX5jch828cInOhfYzVAexeZCp+xPvF1zj:NjS4i50TfIXeh8vef4VAe8a+FNJj
MD5:	94918A2321B72368FDFE5B171AA653CD
SHA1:	98B7880B6C2A5FED14B55458E175424D34FDCD69
SHA-256:	E86479D6E54449D1085C2149E190A615C6BEAD407B20BACBCF5852B5D65F1FEE
SHA-512:	9C9616CCBC9765F4E825F6B57FBA35E57B97B5EF5F51E88A5FE6D44BF22EDBEE1A52975F3311FE25D2CA65837B34DCB51CC2E00F02410C54A3AEEE6A2C17E255
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/safeframe/1-0-37/html/container.html?v=1-0-38
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){var n=this\|\|self;var w={};var y=function(a){y[" "](a);return a};y[" "]=function(){};var B=null,G=function(a){var b=a.length,c=3b/4;c%3?c=Math.floor(c):-1!="=.".indexOf(a[b-1])&&(c=-1!="=.".indexOf(a[b-2])?c-2:c-1);var d=new Uint8Array(c),f=0;C(a,function(g){d[f++]=g});return d.subarray(0,f)},C=function(a,b){function c(q){for(;d<a.length;){var e=a.charAt(d++),k=B[e];if(null!=k)return k;if(!/^[\s\xa0]$/.test(e))throw Error("Unknown base64 encoding at char: "+e);}return q}H();for(var d=0;;){var f=c(-1),g=c(0),h=c(64),p=c(64);if(64===p&&-1===f)break;b(f<<2\|g>>4);64!=h&&(b(g<<4&240\|h>>2),64!=p&&b(h<<6&192\|p))}},H=function(){if(!B){B={};for(var a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789".split(""),b=["+/=","+/","-_=","-_.","-_"],c=0;5>c;c++)for(var d=a.concat(b[c].split("")),f=0;f<d.length;f++){var g=d[f];void 0===B[g]&&(B[g]=f)}}};var I=function

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\container[3].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5810
Entropy (8bit):	5.546604696057645
Encrypted:	false
SSDEEP:	96:euWaCmmku4wh5Wjg4bfIX5jch828cInOhfYzVAexeZCp+xPvF1zj:NjS4i50TfIXeh8vef4VAe8a+FNJj
MD5:	94918A2321B72368FDFE5B171AA653CD
SHA1:	98B7880B6C2A5FED14B55458E175424D34FDCD69
SHA-256:	E86479D6E54449D1085C2149E190A615C6BEAD407B20BACBCF5852B5D65F1FEE
SHA-512:	9C9616CCBC9765F4E825F6B57FBA35E57B97B5EF5F51E88A5FE6D44BF22EDBEE1A52975F3311FE25D2CA65837B34DCB51CC2E00F02410C54A3AEEE6A2C17E255
Malicious:	false
Reputation:	low
IE Cache URL:	https://f1af80b315cdbb1665e79eb54aecc554.safeframe.googlesyndication.com/safeframe/1-0-37/html/container.html?v=1-0-38
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){var n=this\|\|self;var w={};var y=function(a){y[" "](a);return a};y[" "]=function(){};var B=null,G=function(a){var b=a.length,c=3b/4;c%3?c=Math.floor(c):-1!="=.".indexOf(a[b-1])&&(c=-1!="=.".indexOf(a[b-2])?c-2:c-1);var d=new Uint8Array(c),f=0;C(a,function(g){d[f++]=g});return d.subarray(0,f)},C=function(a,b){function c(q){for(;d<a.length;){var e=a.charAt(d++),k=B[e];if(null!=k)return k;if(!/^[\s\xa0]$/.test(e))throw Error("Unknown base64 encoding at char: "+e);}return q}H();for(var d=0;;){var f=c(-1),g=c(0),h=c(64),p=c(64);if(64===p&&-1===f)break;b(f<<2\|g>>4);64!=h&&(b(g<<4&240\|h>>2),64!=p&&b(h<<6&192\|p))}},H=function(){if(!B){B={};for(var a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789".split(""),b=["+/=","+/","-_=","-_.","-_"],c=0;5>c;c++)for(var d=a.concat(b[c].split("")),f=0;f<d.length;f++){var g=d[f];void 0===B[g]&&(B[g]=f)}}};var I=function

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\coronavirus[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	179542
Entropy (8bit):	4.733809359260672
Encrypted:	false
SSDEEP:	1536:lbDKrv2e/MHwpMIW8X98iQNvWvAjgbNHHH66reN/QErj7PORy4VuJSMC8aUqvgSh:L+6GQ4VuJSSqvlosKlD9W
MD5:	5F1081FE09EDED10CB315E8521AF46AB
SHA1:	7E2F8B5C94EF644ABBDCB4343E411D8C54B894E7
SHA-256:	9D59945C5948B0DD69A88CE0DB4DA23C11E3C7906A7D863851A18955232012F6
SHA-512:	8C569F54BC54A303C32AB04D295B187386A04F4018C0198A84508086678E8F4DB4DFE3A6430E40F936CEB27C06BCFF0BC60EF33AC8B4ED172544039B5819CA23
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/health/coronavirus/
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js lt-ie10 lt-ie9 lt-ie8 lt-ie7" ng-app="myApp" lang="en" > <![endif]-->. [if IE 7]> <html class="no-js lt-ie10 lt-ie9 lt-ie8" ng-app="myApp" lang="en" > <![endif]-->. [if IE 8]> <html class="no-js lt-ie10 lt-ie9" ng-app="myApp" lang="en" > <![endif]-->. [if IE 9]> <html class="no-js lt-ie10" ng-app="myApp" lang="en" > <![endif]-->. [if gt IE 8]> > <html class="no-js" ng-app="myApp" lang="en" > <![endif]-->.<head>.<meta http-equiv="X-UA-Compatible" content="text/html, charset=UTF-8, IE=edge, chrome=1">..<script type="text/javascript">.var videoPageUrl = "https://www.ctvnews.ca/video";.</script>.<meta name="viewport" content="initial-scale=1.0, maximum-scale=1.0, width=device-width, user-scalable = no">. <style>. @font-face {font-family: 'Flama-Medium';src: url('https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/Flama-Medium.eot?s=2_7104');src: url('https://static.ctvnew

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\counter.d27508c102582d608697[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	24530
Entropy (8bit):	5.547960922506289
Encrypted:	false
SSDEEP:	384:fIibHMGKGblSIEDFQ+skEIpYy+tXGrMgicTT9ve5fYuM:fwHYlSICF1sk1ah1cleZYuM
MD5:	17C5EEDD5508A865B219D7205E776CC2
SHA1:	5AC018D94532949DD6518DEEE44F3C4EAD539A51
SHA-256:	E4F924EAC92AA3CC4EA64F2891447E8BD3AF49E1A5C0BCD04B7356E2F7F1C04C
SHA-512:	F4E31429F7345C408A32F44223C84A00F5145FEF64A37B0D336AF3DF949E0B0CB88807BF7604282E9D7DC7FBB66F7925ACDAB73574C36BC40BA51CF05A386654
Malicious:	false
Reputation:	low
IE Cache URL:	https://s7.addthis.com/static/counter.d27508c102582d608697.js
Preview:	atwpjp([218,217],{666:function(t,e,a){"use strict";var n=a(443),i=a(498),r=(a(667),a(11).function),o=function(t,e){var a=t.params;clearTimeout(t.timeout),t.callback({elem:a.elem,service:a.service,countUrl:a.countUrl,count:Number(e)})};t.exports={facebook:{ajs:function(t){var e=t.params,a=t.cbname,i=function(t){var e;if("[object String]"===Object.prototype.toString.call(a)&&(e=a.split(".").pop()),e&&window&&window._ate&&window._ate.cbs){var n;try{n=JSON.parse(t.response)}catch(t){n={error:"No share data received for Facebook"}}"[object Function]"===Object.prototype.toString.call(window._ate.cbs[e])&&window._ate.cbs[e](n)}};e&&e.countUrl&&"https"===e.countUrl.substring(0,5)?n({method:"POST",url:this.baseUrl+encodeURIComponent(e.countUrl),contentType:"text/plain",onSuccess:i,onFailure:i,withCredentials:!0}):setTimeout(function(){i({response:'{"sFbt":0}'})})},cb:function(t){var e=t.params,a=t.data;_ate.ed.fire("addthis-internal.fbsharecount",{},a),a&&a.error?t.callbackFunc({elem:e.elem,ser

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\covid-dashboard-css-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	4.898639273836119
Encrypted:	false
SSDEEP:	12:BtRETRXJvEgXT288B1fXsRvEvzUZjYX9qbnK:BvypD2PPs2yjMqrK
MD5:	C435A1299A486BBAA8399209D1606695
SHA1:	FD8C1D34A56466D585C799FF637BF3F6975903AA
SHA-256:	6B1E74C7A4BBDA278AB6408B884E312EEA4EC60687E4FB24283E70A4F1E1ED1E
SHA-512:	D4E2C77FDFF08FDCC38B7C697F3F5AA526E7D5AF3BB0634F5CB5FD28F6F7A30E3C8C27B2B19B39432B8B14C7B3E6E08931FBB3D1ACE4C85413091EB9C82F4C70
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/covid-dashboard-css-7.743285
Preview:	..#covid-dashboard {.. width: 100%;.. max-width: 750px;.. margin: 0 auto;.. text-align: center;..}....#covid-dashboard .province:hover {.. opacity: 1;..}....#covid-dashboard .map-svg {..margin: 0 auto;..}....#covid-dashboard .map-text {.. /font-weight: 700;/.. fill: #535353;..}....#covid-dashboard .map-circle {.. fill: #ffffff77..}....#covid-dashboard .data-source {.. font-size: 12px;..}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\ctv-styles-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	0.7219280948873623
Encrypted:	false
SSDEEP:	3:NVn:/
MD5:	1FFA6AFAE980D20B989794057FDF02CE
SHA1:	B4687F265EB717DFA144B691454B3812EE3BC68F
SHA-256:	63AD8E85349FE11819885976EF96CBE3F6F65C288B290713ACADBDF9A9280388
SHA-512:	CA0FFB5FACD39DA98D74D729EB1EDC1AAFF8E985C76B41C3EE8FEC32D09F3DA21D8D7968E54FCA54AC52219D426B49E56A7951E506306D0AD7874EC6B6312E49
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/ctv-styles-7.132
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\ctvnews[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5135
Entropy (8bit):	4.883089518220708
Encrypted:	false
SSDEEP:	96:+usmMV6tYQhiv+YevYsYsiQ/4+PrRMRCrn0wTeUMtVtyltP8tArOaxt1R5iXE+vB:+uW6WQoXeAZsiQ/XRMRCr0wTHMtVtylQ
MD5:	3143517D2F0F7E289BA4B1CD5147E3FE
SHA1:	B627052990073CA171BC1889D09A62921071ECB9
SHA-256:	F900CB1A72295872E6D7FEF3616EB3847BDF7070ABFD088060E637432817A291
SHA-512:	FD106C7C73A932E8069DAD7856D42C3FEE03AE691757BBE656A113F49F7AB73EEDCAD537C41632E86E458EAA4FC1CF9269570898E875F2F837598A3F7D7AB887
Malicious:	false
Reputation:	low
IE Cache URL:	https://tru.am/scripts/custom/ctvnews.js
Preview:	(function(w, d) {. 'use strict';. var s1 = d.getElementsByTagName('script')[0],. s = d.createElement('script'),. pageFn,. attr,. onReady;. s.src = '//tru.am/scripts/ta-pagesocial-sdk.js';.. var l = document.location,. u = l.protocol + '//' + l.host + l.pathname,. h = l.hostname.toLowerCase(),. cid;.. attr = function(domQ, name) {. var l = document.querySelector(domQ);. if (l) {. // Use getAttribute() to avoid encoded strings.. return l.getAttribute(name);. }. return undefined;. };.. function parse_query_string(query) {. var vars = query.split('&');. var query_string = {};. for (var i = 0; i < vars.length; i++) {. var pair = vars[i].split('=');. // If first entry with this name. if (typeof query_string[pair[0]] === 'undefined') {. query_string[pair[0]] = decodeURIComponent(pair[1]);. // If second entry with this name. } else if (typeof query_string[pair[0]] === 'string') {. var arr = [que

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\down[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1496
Entropy (8bit):	7.249606135668305
Encrypted:	false
SSDEEP:	24:GeZ6oLiqkbDuU4fqzTrvMeBBlreZ6oLiqkbDuU4fqzTrvMeBBlE:pDeqkbiU6MTrFFMDeqkbiU6MTrFFE
MD5:	D86D65C9C03C6696B6FAE4916E60D34C
SHA1:	40C0C486CCEA1A0E5E09D66BCE1A89FF257119BF
SHA-256:	6BA4914CFDA51106B82FA239C69920E64C53422AE8EE30B469045395110564A6
SHA-512:	0A76905CCE651D50C0E81B62F2B7E3F56831D6F63847F16AF89835A70E956796D59780C77E066FECB701FCAC6B3A493CAAFBDE1F00022D76F8B635B3E0E3B80F
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/down.png
Preview:	.PNG........IHDR...............ex....PLTE....W..W..W..W..W..W..W..W..W..W..W..W..W.U..............W..W.!Y.#Z.$\.'].<r.=s.P..Q..Q..U..o..p..r..x..z..~.............................................b.............................................................................................................................................................................................................$..s...7tRNS.a.o(,.s....e......q*...................................F.Z....IDATx^%.S..@.C..jm.mTk...m.?\|;.y..S....F.t...,.......D.>..LpX=f.M...H4........=...=..xy.[h..7....7.....<.q.kH....#+....I..z.....'.ksC...X<.+..J>....%3BmqaV...h..Z._.:<.Y_jG...vN^.<>.Nu.u@.....M....?...1D.m~)s8..&....IEND.B`..PNG........IHDR...............ex....PLTE....W..W..W..W..W..W..W..W..W..W..W..W..W.U..............W..W.!Y.#Z.$\.'].<r.=s.P..Q..Q..U..o..p..r..x..z..~.............................................b.....................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\errorPageStrings[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	4720
Entropy (8bit):	5.164796203267696
Encrypted:	false
SSDEEP:	96:z9UUiqRxqH211CUIRgRLnRynjZbRXkRPRk6C87Apsat/5/+mhPcF+5g+mOQb7A9o:JsUOG1yNlX6ZzWpHOWLia16Cb7bk
MD5:	D65EC06F21C379C87040B83CC1ABAC6B
SHA1:	208D0A0BB775661758394BE7E4AFB18357E46C8B
SHA-256:	A1270E90CEA31B46432EC44731BF4400D22B38EB2855326BF934FE8F1B169A4F
SHA-512:	8A166D26B49A5D95AEA49BC649E5EA58786A2191F4D2ADAC6F5FBB7523940CE4482D6A2502AA870A931224F215CB2010A8C9B99A2C1820150E4D365CAB28299E
Malicious:	false
Reputation:	low
Preview:	.//Split out for localization...var L_GOBACK_TEXT = "Go back to the previous page.";..var L_REFRESH_TEXT = "Refresh the page.";..var L_MOREINFO_TEXT = "More information";..var L_OFFLINE_USERS_TEXT = "For offline users";..var L_RELOAD_TEXT = "Retype the address.";..var L_HIDE_HOTKEYS_TEXT = "Hide tab shortcuts";..var L_SHOW_HOTKEYS_TEXT = "Show more tab shortcuts";..var L_CONNECTION_OFF_TEXT = "You are not connected to the Internet. Check your Internet connection.";..var L_CONNECTION_ON_TEXT = "It appears you are connected to the Internet, but you might want to try to reconnect to the Internet.";....//used by invalidcert.js and hstscerterror.js..var L_CertUnknownCA_TEXT = "Your PC doesn\u2019t trust this website\u2019s security certificate.";..var L_CertExpired_TEXT = "The website\u2019s security certificate is not yet valid or has expired.";..var L_CertCNMismatch_TEXT = "The hostname in the website\u2019s security certificate differs from the website you are trying to visit.";..var L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 8 bits/pixel, 32x32, 8 bits/pixel
Category:	downloaded
Size (bytes):	7406
Entropy (8bit):	3.9395907866270337
Encrypted:	false
SSDEEP:	48:mWWQfpsnkMlq9pHeVrYPkNsnocl8eO1vByQSmi5txijUCr3My5Eo+31EdI:mW6nkMOeZjNqvSZ6/txi7My6id
MD5:	15458C91D44E17D55D3E702E343FF6C7
SHA1:	B1153F54678A09CC97F682E9D61E976D22F9270D
SHA-256:	D40AF6DB8B8FB80FCDEE6AC96AB3B78D5D40FAE6C704695A6BF5CAEEFD731DAC
SHA-512:	034A05D2F66C75FB42523F30C8AEFA58ACE1A71CB789A3CD3BA42282F3437195DC7630D0C26CDF434DD356F7A15DF3FADD134174C1534BA9C40FEE58E580DC80
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/favicon.ico
Preview:	......00..........6... ......................h.......(...0...`.................................h...K.........._2.wQ ..f...}Y..i......uO..n.o.}Y+.......I.B.C.gp....9..................&..........mE....w....\|.}.?K..jA...........,..........e.f..........................!...............X...p................IP.....................lB...........z.......xR.....py...\..#.$.......].........ag..S]..U.V..d9...j..q........u...........qJ.....'3..........{V(..............f=..............................-...\f........~.......y.....e:...........L.................sK......l..1<........e.......m...................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\footer-logo_cp24[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 53x30, frames 3
Category:	downloaded
Size (bytes):	2191
Entropy (8bit):	7.629672301372779
Encrypted:	false
SSDEEP:	48:AdqlrfYUNjCMZJdMgyNHyVsoLhUJx9o/O4Q4dbs6pjkIhHvn:Vrdfeql0fAz+6Ksvn
MD5:	70ACCB99A8B4ACD7CC6B250AD0972E75
SHA1:	663615EC4EC74A5036E6A7C057FE7950F9990DFD
SHA-256:	F3301F4D3437A543EE7A5DABCF08446799B7C2CCA8AAB08A7EAA8A5A0BF22DE1
SHA-512:	6E49208C924531E3A13538E5F11C6E7381E0384A2328C80C9AD55ABDFD0807A73D48F3C93189406CC7B76E3A683E603FAA52D5FC236710AC1A841167F45D185B
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/logos/footer-logo_cp24.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.........................................................................5........................................1................................1...AQ.."#$2B...............................+.....................!.1..AQaq.2...."................?.....<l...k.o...t.=q..v..~Mq..g.1.....h.Z=U.Yt.S....<...C...m..&N.K...J2.X.@a...T..d.LdQ.9..(........2u9......._%>I.J...;..e.RF..,.....+.nI$.\.qqrs..Y.Aq4fa7bH_..d.7.....5s..`.UW..p...%....p.:).........&.......DN.h%..d.x..7i#n...j...n.8.~Sa.^hCU.o.0..4.5,..!ixV(..z../n.W.j.......aO]6....2L...njJ..s.B..F.......r....2X.x.Gw......{..h. .c.o.......c...r.!E.....$^pxT.b......Oa`.A.G..x.a5T...c..p..8.U5.O.{......a#ez..Y.u..,%.e.j2.uK,.&...=......+.w.d.\|...Rc...sZ....2.o...AVJo5...p.aLm.ET=08D8..g+.n.......^...0.d.#z..fI...V.u.-!..K.dt.2.....y.......U...l[&-[.z/US...S-.n.%...!..<M..L_!......A"..%.7Vqm..8.T*..+.~#.I........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\footer-logos-bg[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 2x74, frames 3
Category:	downloaded
Size (bytes):	350
Entropy (8bit):	3.556761912817687
Encrypted:	false
SSDEEP:	3:nStkflfC8tJV8XvEHdmMlviWhlwkmnFm0wK3qrkE/l9msRQm8ncmmxWdcYn:dfNVAXvE9mM8WhlwNmkrE/l9ms2vcm+S
MD5:	D938BA068A71B3B2901040E8AF15BD0B
SHA1:	B0F57D8F4E168F178C724381436072BFA2CF8831
SHA-256:	72BCF61BC32C4094E08A81D234CFA77FA3F223FA6425ADA9D8EF60F7DC193586
SHA-512:	4A8833D845F3BA66856555D03336BAD383EC3E2610D5322DCB317FEDF851C6B02C4B0A4D72B5A5892E5253945F1D0CE119F05CC5E33A65170E67117747F3DDB4
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/footer-logos-bg.jpg
Preview:	......JFIF.....`.`.....C....................................................................C.......................................................................J...........................................%....................Q...R..."1.............................................................?..^...<a..;@h.Bh....F......nv..Vo..~..,.e......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\gallerylogo-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	240
Entropy (8bit):	4.9618127289669935
Encrypted:	false
SSDEEP:	6:oDiPk8mnLj8VqSL6jjA6OqQKOaPFATAjFrv8GQAItYMSda:48mfWLe91OaP2k9vonYMua
MD5:	F97B425931C3E3162E5FC20F2DE3E52B
SHA1:	E3C07DFB6BB01A1C8919BE76287388138AD0F115
SHA-256:	80E6BB024E3D4AB229B1D7AA6C45D723DD4DCDCBB4BBDC18EB161C6F7D2B4407
SHA-512:	955DC419E7110FD69926DF57A767E608D9C2D62769D2945484E1C3D0F8EA4F8018A9FC2D101DA8D386501D0240907E206B2C363A2EB3EB6EF987A435649CAB97
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/gallerylogo-7.727783
Preview:	div.galleryLogo {.. background: url("https://www.ctvnews.ca/polopoly_fs/7.727784!/httpImage/image.png") no-repeat 0 0;.. display: inline;.. float: left;.. height: 65px;.. margin: 0 1.5em .5em 2.5em;.. width: 134px;..}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\get[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	367
Entropy (8bit):	4.860698485123483
Encrypted:	false
SSDEEP:	6:8NqAcPMBu6hppQeUjuepUhWSQP2uK7XuFIufXHgZigP1/67BXVlWTMx0HjD9/en:BnibvpQks2uqXLuoZiQABFlu9Wn
MD5:	7EDC53F89F41D6720FF6B6F2A6C53DCC
SHA1:	75E6719D24D6EB3033C7FB64F60618E4DB0C79C8
SHA-256:	A6191B6AC10675BD40A595975D153816821E06498061A7F778E29B6B815C767C
SHA-512:	4BF26F1136FAB46E24C1967FB233AEFFC4EB88558B59AE526FB421C16C9585F2074F6C0BFB2F05417BCFFFD977547F8A6EE76E69C037E90EBB14E9D822D24BFF
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.krxd.net/userdata/get?pub=ca46aa22-e6b4-464e-9077-7215dc98bc0a&technographics=1&callback=Krux.ns.bellmedia.kxjsonp_userdata
Preview:	Krux.ns.bellmedia.kxjsonp_userdata({"status":"200","body":{"code":"no_segments","kuid":"OAo8OofK","kuid_long":"v4kkdrasc","geo":{"latitude":"47.37","longitude":"8.52","domain":null,"region":"zh","zip":"8000","country":"ch","dma":null},"technographics":{"browser":"Internet Explorer 11","manufacturer":"Microsoft Corporation","device":"Computer","os":"Windows 10"}}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\httpErrorPagesScripts[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	24210
Entropy (8bit):	5.451485481468043
Encrypted:	false
SSDEEP:	384:xPini/i+1Btvjy815ZVUwiki3ayimi5eqBG1fm304Pini/i+1Btvjy815ZVUwik5:8i6+1B1y815PUNZ3ab3fBK9i6+1B1y8d
MD5:	7B6C8BD51E49F7F56E2B21311D0EA59B
SHA1:	EDB0F7D21BCEC6C48DEDC14E9ED41383740BAE37
SHA-256:	620BD33A4E0358498D9429FE2DBA00F85A86D6059FA796B482E2A9F6B0794F2D
SHA-512:	DD1D524872EE165D230BE5B3872DEE108B806AB684AACFA955F07B7A87C1ACA63FA3B59210442E1E3C9A2D33409583E0AC3B1A6A0D4EB91BBEEF62D311FD1BC4
Malicious:	false
Reputation:	low
Preview:	...function isExternalUrlSafeForNavigation(urlStr)..{..var regEx = new RegExp("^(http(s?)\|ftp\|file)://", "i");..return regEx.exec(urlStr);..}..function clickRefresh()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..window.location.replace(location.substring(poundIndex+1));..}..}..function navCancelInit()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..var bElement = document.createElement("A");..bElement.innerText = L_REFRESH_TEXT;..bElement.href = 'javascript:clickRefresh()';..navCancelContainer.appendChild(bElement);..}..else..{..var textNode = document.createTextNode(L_RELOAD_TEXT);..navCancelContainer.appendChild(textNode);..}..}..function getDisplayValue(elem

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image0R123915.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	151752
Entropy (8bit):	7.955172338718708
Encrypted:	false
SSDEEP:	3072:WzORBO4O4tS11m4QfDgHYgwlRnVj6i/wK1VdRNl8RU:WitS11m4QrjrBrvRNiU
MD5:	14C1A9104CD4B1957C57E27CF3697AC4
SHA1:	4582105BB03226158721ADF236FA0AF672FB7497
SHA-256:	D095B64BF06DFA8EBB628FB42BE72558D20BED910B8FF7AA968CFA94708A2C90
SHA-512:	AC96798AB46116464DAB289DF520D99ACF9E01A8CA61EDA6F29AD883322BF7F15D3D2288D04E1C6976466D8940E500FED7438FB63570EF645AB2A320DBFABB59
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5324749.1614294794!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..>....c...p.A.....1UE`....=..kA-QbH...+.s.U..vh.......W..w?.R.z..Y.pce.......H......v..W........o....Z.!.....j.R.(...!.P.e.9.U. ....dbYGO....V.r.m....D...q....m.j=A$`..7m.V.6......x....<q...^F.%.I.Q.4.pKs._0N.2....y...J.r.a..>...\...:#...=MVUf..B..)..P;EH.<`....g...V,.J......<..}.3...... .$. .*...5..K.Q>..?.Z.......1...g..+....-.g........g....~.\|P....V.\|

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image17YFPAKL.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	9942
Entropy (8bit):	7.9174877996670485
Encrypted:	false
SSDEEP:	192:RITMud3B5+Arkbnb+w1hY6amCscP59q18mIWfwrNP+NnBGeoO6acp+48r9:RAMS5YbnbJ17aXsy59qabDrsNBlolaA0
MD5:	1326C93B0C42BFAB650D95D91DB8978B
SHA1:	72E37458ADD38AD755FDCD03729250CC4429EC94
SHA-256:	558284DC0AF327DB78D20FF53167E5A901A9C8CCEA82996CC9ADAF9C9B0C7052
SHA-512:	4BA840F42F8252941CD09D5C04FCF5983DFBDE3D522C00AD4EA2272616997FCFB4A516A3C94850F5343D736B887044B520B50290A6D7AC0BE884B78226C08A87
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4785356.1580149371!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..{.....*..'~..?i...3...mND..t..P7..e........+../.z?.O.o-....j.u.m..-7....)Rpz.._....[Q.g.\|...Wk..F.l>..$T.y.h..78.r....+..m..)m..;z.._3..1YnF..p.....(.u..^....}.p.....f..C...!EZ\..y.4.\|..Q..>....Ax.....Q....a..._i.,..-..!.b..2>...6./.G.x..{..M.C.....3.s_....O...6.....Zi.a........74..?8.~.\|A.....?.........k.0:.)..F~..0._.}u..9?U......S.z.>....\|...v.U...i...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image1GWYINO9.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	8983
Entropy (8bit):	7.90835415991236
Encrypted:	false
SSDEEP:	192:U6zCk/0nHPVeP4GUP4XjLa2IzJJ7iK9a62vEh76qQvgdqo2iDD046:UMZ0vVeP4NAXjLaV3xCqr2n9
MD5:	34D364DBCAB2B69FCAE262F0C0B7C9DE
SHA1:	6B4BDC788EA2960DA8188B898CE4B604A8460F1E
SHA-256:	A8F55F2CB2CEB5408F97A68F0143F5503811DF9B492DC21C2A6E9764AE9A10E2
SHA-512:	92856DEAFE51FC2266E2D6D652F94416C863D67F138B4984289E34AA1EC1A6FFFFEF90B2B74B2FC052BC5A4389C6B0424A3CBE32C40A383A235E511D4360ECD4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353648.1616132368!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..-.W(...M}.......g.\|.....0An~\W.xZ.W...MAu.l....t.u N..P..p2N.x.....5R......o.C.....j~...R....p@....z..........D..'..G..+..X.\|..6.)....*...z... 8...k....\|..S..;.....Y.).~.bc./.%...M.n.^..Q..."o.u.v`\|..[........c...x....y4....t.).F.W[...?..$.3..\........u.J+..-!....L@D.0........w..> .g..}..I...F..h./..q.u.Q..R1........J3.eY....d.....\|e6..Iui.D......W.\|%.@

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image1SJG6PIA.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	193398
Entropy (8bit):	7.971984448904023
Encrypted:	false
SSDEEP:	3072:xyXCg/ENVbhH9PpS/2eeA/U3lrdF11BPOA5GvIW8wTa4AetnjxGZ9ctTuQY+SNBr:xI6hH2///81rB1BPOQG+0nXGrcNuOIB
MD5:	1D08D8DCADC51FCB41770C2E5E0CD9AA
SHA1:	4E00DF85675726F923F6BE437B80585111BEC812
SHA-256:	5E06FAAD1E128E3461FF39652086FA198C319061293C36FB664C11824C1DDDC3
SHA-512:	77BA546925887646D3CC8762260B8524502F7837B8D57E17C84283EFC2874932E977ED103DF991E92C96DBCB0F2B79092326126D180DDE2D2754B2BD908F33FB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5109201.1600364321!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....xS.jiQ...b....1.L.6.s.......l&.X.1.C.E5...N.`.......$t..`.V.l.]..zu+S.....F:......Z'.. .IC.1...8.'.*.<z...D......3nx.{..2@.w..1M..u'.J.GL....W...<.U.c..E..q.s.x..2...lsW....o.Dq.9.#..I2.).y.....I.lU....g.}.....1.n....Wn8..Tz...VY.OJf.=..qT..$..c>.O....u.Ye ....1.<u..v.ck.6.v.dd.....6.#..U..^z.{..c.Rz.)...s.T.l..t4.6.<.....H=......#8..E&.Q...0.....z.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image1ZJDYNMJ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	8522
Entropy (8bit):	7.924492056596998
Encrypted:	false
SSDEEP:	192:UxKAd1Sx4+m8DP5uad31oWVH1No9fdxBF666aI3kw1Bzj:UxKNiPadxVVKdN66NI3Rjn
MD5:	B081209524CF5A26E4B34812E44957F8
SHA1:	F3F1D5D49C8BFE38C61610CCF05DC7DAD0034DA1
SHA-256:	9F308A466DCD9EF225AF9E61CF90AF5EC0DA8D59DA0CFE25331F0D4AEABCC096
SHA-512:	E7526721DCCA2BFC69B9CC0090ACE1E7E804BBAE2618D0949528E9BAB36E5E6EC1407F8609A2975E6EB4AF4DF03171D9C5F41E378F62EC0CF8FD233BC269A38E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352735.1616091100!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.........kam..2.\...{W......O...x..~.B.........+.'R.k..c. .C.^....Y.W-.2.........~....4...va.W..r.......).@.....O~.W...-.....r.<y..{K.........t.n.....>.d...`.~.....c.......+{s.X..w.i.(....H.f.....\|775..18,].C.gm.d....K9.x..PLP...~...[.H..e..K........b.x.5Y.K....l..$.NG^3.....wz.x[H.'dB./..5.G.K..Z...8.T...}...7Z..B}......?..5....n?l/....I.>i.Wz.... ..QY...}....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image2XR7FGIB.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	8998
Entropy (8bit):	7.917547080294536
Encrypted:	false
SSDEEP:	192:UBPwLGMqWQDrpfIKu+lL124ii7ah7N81Qg2MYU6JtDsQU56jl3MtkBRfb:UBoLGOQ5fIqi4Xg56n2WSWQM8UkRj
MD5:	A25AD773E6965F97C61053AA70F414BE
SHA1:	182A0E8A591DEE884D8A2A39AA808D9232557F3C
SHA-256:	783B2F1B3E87F256D67FE1A6BF90B0B9DA69BADA6D70FF28424B8ADCBD288501
SHA-512:	367726744AAB1BE679B4D11A1C63615733CC96C28B28857145E40CBF3C68C2B44DBF56D4E21FD1D03982BB9426A211085B14AE5013B5C4A0C0B32AD83BBF6EF3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353644.1616129294!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...I....x..h..s...ha.6.a...M[Q.m.x...Y.)..!d..=r........_...G...:....H......d(..%..U..H...p.p...].\|O...f)m.n.:F......I.F.x..C....ym<[.9^.C...zXM........................$.....u..K.?.?.'....~.v..xW..lt.m.Z.xs@.F.(A...l./a... ..<E...+...'...\|A.o.&.t.*..7....4..0.....\....\|..,.....?.......F.....Z!....+)....S..F.....i.k..i.1..J..2 C.(#.9...c...B.].y7u... ...+..=..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image330PRGIJ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	13071
Entropy (8bit):	7.937615970337846
Encrypted:	false
SSDEEP:	384:3aUNMdtPR4L7kZx1hnGJcmTh95ij5k9Yx:3xNOtPOL7kr1NGJcyL/i
MD5:	2F296BE1BC658F9FF8CFCAFBE0A05248
SHA1:	5ABB4F9BC8167DB307BC71AE03ED91F4090DD2AE
SHA-256:	F8F29C5F6715CE1CD5662EF44C27BF2BCD1FE93F1DD716CFA0C1F773D9A4CCC2
SHA-512:	7BF9B836CD7BF95BF9D69011FA3BB50DCCAFA4A77F79F1E343FA8F80308F276EEE8307392E87A5850AEAC7387FBE78AC620EBA5BFE300D1AB74D06661870918F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5346847.1615747708!/httpImage/image.jpeg_gen/derivatives/box_190/image.jpeg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..2u.>..-6....G7.'.......[zM.y.).C.pW....r..E+nE..'.P....h..ep...)r..8...?.j.RV4..s^!.Z.K.F.@DhS...]........I..$......L.;.6..U'.R..I....>.s.I..D.d.......[.x.@:..:......W.a..z.kwBx..r#....a......d...g.U.e.'..i~..E.O...H..By."p&.........G._.%..=..m..L.....:...u..5..5..Ku%.D%Ee..].s...G..ae^.W....V8j.XZ.......?.=S@..Rm^.X..s^....e.....3i...W.H%.,..`F:U.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image33Q2Z96C.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	5988
Entropy (8bit):	7.899666679337597
Encrypted:	false
SSDEEP:	96:d6EhBCtDHJrOCBT810FkiHoamJnWju43qp7tSEC4IYP2HslLy:U8MtDHJrzu6ju43qyb4IF+Ly
MD5:	9046E9D78AACAEDCCAA4F6279DC3058D
SHA1:	12F1FA2F0B58F6E64557844A69DFA40B7A6D7CF8
SHA-256:	18E64BE8E4D9DA8801D90DB454989599CBD5951FA718744ADF3AC56AF2834E6F
SHA-512:	47285C59B6AF7C705CBF5CF1A6E0138AABE882916F1FE3C827ADC737117451D005B0345097D8AB1C734FA2ACC9910C6010259C3351C3D6E4512D40E92B73684F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4683865.1573671203!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..Jm....q]%...1.~A<.q..V..A}u..i..s.....{......Vr.&A:g.Q..']s.u....g..{.F..2:aJ...:.gj.'.SU.4.$n...P+.<-..-cJ.M...C....`?.cVQm....../S..t.......r+.....<...ae...H<...k...FO._......1....5_..7..e.......]$[}.dRZ&.S?$a_#.:...V.}..%..x_@...Com.8..$.^v.H....OZ....t%Fj.\d..~.....i%$..O...v..Y.E}.Iwa..C.I.v(.".........+./....X.....i.r..@...........3._...d.}..>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image41BOFX7C.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	142350
Entropy (8bit):	7.946108070693681
Encrypted:	false
SSDEEP:	3072:hlbO6Ynyd8PsApNMaBx9peYeJ6nvfLOBrxNdzV:ywisAvHgf47OZ3j
MD5:	80D737B9B55474C24B0A3F940F29AA1B
SHA1:	19076B20BB5C4192099B2FE2FB22DE7C4E914668
SHA-256:	707439F0D6C1347A29799B92A4602C28970327548971294C8BF434215CEF95F9
SHA-512:	6880E31508769B425D65F7DCF32673231A917E43BFEE12791DF2168A270AAD2A0FF9DC947D3007A11048884D85F41D462C8EDC83390D0BB97CA3A8F1D787A613
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5266626.1610636082!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...T.@'..tv6.....Y.~.%...;T..q]....d#g..;k...."z._.eu.7....O..;=...8'..(..w.;...i......=.+S...J.r..1XBju9...6..iM.b..(.3U.i]....@.=.i.d..H.C^...u>:.".j.:....?.X.R.$q.W......W.P..`Ruy..!.tf.}.=F;U..$....X.)I'.G....w..GqX:...=u....nR.(....+Cj..<..VWM.#.!!......s.\N....4.Up4c....Z..G.(.8.F.v.....W...e]..W......x..G..%c..6..KKS..~W....:..C.....6.....*..E.C....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image4CCQ6DF2.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	7845
Entropy (8bit):	7.929189083794811
Encrypted:	false
SSDEEP:	96:dXEwIY4w1+b8Nb0ki+U6TwGJWJBHoXTgwk1H9i6X21h4cEnHZtRuymIDE:RZfs5+U6EGJ2BHwK19i64hG8TIA
MD5:	FC07371B5821353160DABCAA55706E64
SHA1:	45BB64F948B59B95FE07111684CF0BBE08620AF2
SHA-256:	B7AB6F8D3693FF3D32D3C560AD26B82C7BCFC4E7EF508D313EB07DF92314E391
SHA-512:	9531E618AD4586D25541800FA85B775D073CD8C591FBF2E6E78459BBE31353669F1661C09726F4B4F07B4EBCDF5FBC21EC83D6625430A238A7CE3208803422B5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5204688.1606345984!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..Wm.......o.?..z3,...) ...........ZvQ...u.u._..E...v..\+..G....$.....Y.3..G<....u...n.an.}.xz6.-"..........G...\|<......}.D.....Q..\|a......k.J.[.K....Z...S.9.:.E.:~......^..Y_...oZ.Ta)...m..O),"Ln......?........A...en.X..n..F2.y..f.~9\|C..!_..~.C..@M....S.W#.FI>........{......w.D.. e......<g.g.</.ZX.B.^.Og...Dy.K..>e.cj..Ut..v.h.z.iSkf.......w.ru....Y...[..s..m..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image6BW70210.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	7742
Entropy (8bit):	7.912627071161062
Encrypted:	false
SSDEEP:	192:U4wJzwfIGN2gO+CrRwbTWbOoe8ENnGU6GDj1gjA+P0:U4wJwfVogOtdYKbWRxIH0
MD5:	5AFA09E13C9D0EA115F19FE363311F14
SHA1:	B8BB1C09F62F69686A87C5325EA58352E299C833
SHA-256:	1CF2D5F13E392B6E62A6752B203DBB4CEE98FAF546DB80C7CD02570C0B8635BF
SHA-512:	42A84F450600C7DD3D95D8506EF293A398599C3D7270FA0B6637593369025069304F3960AC15A4DE3DD4C63D53E66F38035BB1839DFD2F60A93B4C95477DC5F0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5126804.1601490051!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..?....._y.k...t..6.~.......)$ ......?..../...G...t.e.....5.........&h.3..H.r../.....y.bxo..cu.w...n..8.........\|....B.).7.....g.....8...H..p.\*..........O.2l.....eF..zJ]c}>............G..yb0.AK....{.tVwn..-......FOU^k..7..]F.c..o..\|.I.Y......[.[.mK.w..\|;...K.~'....yfi....B.X....C.,..O.O.)/e....+....S..<....kBn./u$.Z.OC...g/........l%.]s..!.6..l...Q

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image6ERYND7K.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	72008
Entropy (8bit):	7.958263056856985
Encrypted:	false
SSDEEP:	1536:LN+JPlZ/voAXhUQ8qb/VTQU+tCuF3EDmLBcAOwpUhyTZn:clpvoA98qb1n+t9EDmGENV
MD5:	DEBF7800FCCF7A97625C1D64F93171FC
SHA1:	671FB3E95A56458930691A185A59DBAC46E1D496
SHA-256:	9934847288DEE3C7744FAF4CEBAD3DFE22E1B29AD8BEFE439474EA02A797DA63
SHA-512:	900CF64F77A05963A83903E032667BE0382BE733E819B22E813008C08E1D865D242E8BB9CADF2A7680585937AFC569A9519691F675C8A7092E126B9374F8BDA4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5332014.1614792178!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......?.#.>..Ih.E.S...(...(...(...(...(...\._.....P3....z.c.Z..]......+75..F.N.{sJ8a...T..Y.chR.z.( ...ddT...H#=8...<..\|H2..8.....t=.D.;.L.1.)....s.....8..gR.:.P^......UT...j....J.........V.r.28..Z.b.>.sW.......W......qN.L.J...!..or+R..\..w.Kol.>^>j.....F9...#...&..o.=..J...Uf..:.H.].p.H..r.jo.......yk..F.i.\|...;....uB..?..z)....r{.r-o..\.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image8NW10F2I.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	9078
Entropy (8bit):	7.914942331668174
Encrypted:	false
SSDEEP:	192:Rz4XRAonR3E02dShaQWx2OJCESsR/yqxAklRP69+iDn9Jmt/PUYzz:ReRAWajdShaQK2O4Ez6qycRwDbmtJzz
MD5:	20F64251ACF4FB40C000EE82D833678C
SHA1:	6D2EA81E31146557B3E7C72B0D6212E6B2F36CAD
SHA-256:	7747F7A9D96376F1AA4BE7B84524741E6F83B3A0B3D433C070F4B61CF595BFF9
SHA-512:	6717628C543D7CD116A751E7DF39E0AB94151035FEA826A1C28C6D04FE04E8F05066552D433504FA495DD09B037BB302309E6B9B1375A39A2161FE741C0F4827
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5188187.1611601474!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..G.h..V.;y.....mCX..(t..}.R..&.<~.h.>#.M...4....=q_...<.u..CF...d.{......W...ML.K.........K,.,~?.Q)I.d..#...O.q.\|\[..x.k..\..d%./...m.....l.)l-, H.....9&......r\|;..0..4#f9.?...Z?..."......J..&.o`..A........Uj4.+^OR...?x..\E...^4i9(.h.......P..+..6z........z.E.....<d.u.c.;M!.%....2I&...~..\|[}c.?.O.y.../?0&.c.;........Vw.......[.a..B..HR.~..$..... ...p.#..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image94GBN6XV.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	9509
Entropy (8bit):	7.897044451801015
Encrypted:	false
SSDEEP:	192:UYu5zf8i2IOtZl2vgjYXThJWl3ifqWvMhDnMu:UYE0i2IOtAaw98hifnCDMu
MD5:	DA62B4708BBD81EB104231F59EA58556
SHA1:	1523C859B4E6071445CA32B4EB6B3DF8C0D72648
SHA-256:	3EB9CD210AF208B026ACCD5402F7F87717A818BB6D6598F5D5D11454EE9BFDB6
SHA-512:	385BD62A4F700825C450F46269DD5C90E870D22D9ABE0125473E1BB19F4091F4E03E39F5460E1D4BB3676386D39586B095440C3C76ACE8EF489B938C91901D08
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.1659243.1390919082!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..7.r.A.o....5[.....q5....Z...]."+J...PcEg...k#rps^.......h.n..._.<K.?..,5...M......6.MH......'.X<..:.Z..w......~>.q..o...u{.O..F.<q.xW.WwQ..}3.m.e........BC.DM..~~...b..>.f..~...?.O...].wZ..........]....BG_.\|.a.#.<....K5..KH.-4.ml.'{y5e....8f8H5;....z+j.../g.V..9....../.....I.4.zn.9.._.........--Rt.w.x..p....+.{...O.....)./...kQ..y....k.&.o...z.1 +o.....A^I._

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image9QQDW12C.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x169, frames 3
Category:	downloaded
Size (bytes):	24383
Entropy (8bit):	7.928793291082566
Encrypted:	false
SSDEEP:	384:FKX1FhkUw6+UvTxHuIw2uIMF3aCCnAsWSqVEFdiPx/T+wdr5eEhq3P99yEejB:FKFF6gh2nIMFUnRbIEOx/Tv5eEE3H2
MD5:	01134CDB283803ABDBE97C1827B3B46D
SHA1:	766BD2FAB2234C52EA5B691454D51FC9B9914696
SHA-256:	60985FAD72519C1C97C354256CA0A23837363D13859F2E52B34E5F0B29F14964
SHA-512:	B4E7A9B72851DFFE314F92720243E4F6C11A9E84E6C912FDA5A855731DBB6EEC2ABEE61DEBE85DA2A5748CB6F7158CF39CF1CDC9BEE8AFFDF720F5EC3E07CB9B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5258189.1610062886!/httpImage/image.jpg_gen/derivatives/landscape_300/image.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..!.Q.. t.U..=?.c5.........j1{#....>...>.kJV#$.............&..POJ..E..MV.b..r:...5}..O.{..j8......8.q.s..3.f........kj?.#...V6...O\u..P .9..)..s.\yQA._#....z.).d.....s..:..Yz..o..>..-..&k..5x.......Fg%...R./..z..../....5..Q....g_.I..H=.~.......K..:..]6.....\.f'....C.....u.8.....%...\|......7-m.]..Z@..b...!..^g..1.p]z..Y/...4.L.\|@...Su*I..v...?k....g...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image9VFKRKQN.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	5475
Entropy (8bit):	7.892789929550725
Encrypted:	false
SSDEEP:	96:d6E5dOw2k1eM7Cq9YbGruFtIJR+Ljq8fPFCWwmUm2q3denzauOje:U0dD7VSHts4CAFBU6dEOje
MD5:	06FBBF6BA0E1E94FA5CF98059FF918FB
SHA1:	861C4A8156415234D672A3C4E9D475BDE389044E
SHA-256:	848AA254FF5F36B70FB77DD96B6E992CA477A3AE99FD019915CCDE9F0B00A959
SHA-512:	0E5E7B34E93BFFCEB1A964A31313EF027B9344CC0DF3211E1386EBA54F049E033D960B228E2F74A46E523E2159E23C60CC5B32230351B14A1CFF19D7308FF00E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5347630.1615822229!/httpImage/image.jpeg_gen/derivatives/landscape_135/image.jpeg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..'...5{bN>a_si..Z..._..Bo'R..8.:W..F..1..`q..6.k..gx.....tgi.+....y...->].....s[.(...y..$.F.q.>.[c.W.............N./.mj..w..c....$.4O.......-oZ..H....s.Ci.X.L.....0..Y@.....+.A.\J._..t;.+._.x..-.\|..-j_.^.......Y...&{.u.-..y!..#3N.w.n&...l...U..k2...}.g)..h..F......s......:?]..T...^j.^.c...R....1.....}......\|..P...Y.}O......7.y./..:.._...Qa..'W[.6..G.. ...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageBOGX2RTE.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	6639
Entropy (8bit):	7.901048315935568
Encrypted:	false
SSDEEP:	192:Up384c+EeSmk8FMXYwOc4PofqYJ1jve8H8nluw+lk:Up38TtmkKMXYwz4PoCYJ1jve3kC
MD5:	0C36590D840C9CE70C0C1B966BE838E7
SHA1:	5543E6427AD11E6DDB58FC973F745AD2814E8303
SHA-256:	D9E048E61AC3B78FB72923C616FC47C9ED829D6E35061EF0209974A4DD8380B7
SHA-512:	63932AA2999B6C05248ACFF19E38318628FE70176E04B1747D2FA1B0D0258B3DA0242BFA1BB5AE23CBE1C4EB9B873388C9AD2922B3C84B402D6016D14578221A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353154.1616113122!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....iO.[..^7.<[.\|G...}..O.{..bs...u\..UN2@=+......y./ .....'....":...@ ......b.Mos4e.B1.\|.=.._4\|Z....\|W....b..Q.-'Hnl...Yv..`.m.r.....5.`3.S.%E..Y..S......s...8.p=).P........~...6. .W.U....... ..!....b..=..w..G..............k....Eq.m..`y...pGq^..u:....d...5:.._...:..0.~.....r.l..*.[...$.kIP:..E.5..%....Y..R....]....A#...<...@.y^G).k.o.h.s.ih}.R.........Aa.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageC06RZV1Y.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	9379
Entropy (8bit):	7.93132508284458
Encrypted:	false
SSDEEP:	192:R/vneLrMl3CpIvNvC70upa+ZMiYs1Do7VXdQ/kswc5v9ulUdTcWrjNxd3M2:R//enMlIcNvCr0uYikYdyUpcKxC2
MD5:	848474AFD964298945CE49489587955E
SHA1:	060B98EB8867D955113935C7EF60B4042678EA0D
SHA-256:	3BA4E065EC8F8FFB33B0B8AC9B6A36B8429842F22F18A7916639857A3E2C8F4E
SHA-512:	3E83809EC203CD9C7D66EB3021335380FB1602EE6BB96C2D16077D407E2B51A01D66BB6450B98D9BAF693413B01554990F2850811429671C21C13A094E8D4DC0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5115905.1600818041!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....R...xk}J;...^.6.".aLJ..l...m........X~.>..>0^i.....1t..N.h...m..@.e......@.2.....W6.;.W..9...R].I.].Y ....}.;q#............~).z....x.X..^.?.l..m....9&.%#..... .=..<.#J.E&.k......b..._.;...s..!...b.+?.x..5..PU_...e..a.;B.I;...??\|5.=[Y..u..*(../u..mDDD2...tdtP.....j.H....Y-..t+]'K....K...G....;H..$.H....@..>....p......~.5...Z.....Np...6:..:.k.pX.i

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageCA7JM1E0.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	9904
Entropy (8bit):	7.921322287133837
Encrypted:	false
SSDEEP:	192:R0qLxC9AEU7QJXCA8bLSSei9ie/mFcFQCMRad5wnqfxA6XwjD1cXJNuwWV:RhCJU7QAA8bLLeQ/mIQCpiuiVjDOZcwM
MD5:	4CDC32DBB874645B71DB9E287F9D2D24
SHA1:	ADED468E11AFD84D0124B88F7A7568BEA8CD3446
SHA-256:	24ABE178C3AEEB135275E6B4A3E19AB6137EEF31789C14EB14FF69B8D77B5A66
SHA-512:	E777A764C80DD1D7A9651498086CBD571E456810C87F6795FBAC35E289F5FE4EE074C84D48FC6C288AC77892D97FCABA1F01175BDCE87A4740A12E5093068C22
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5204192.1606328185!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..Z.S...'.5......l...I..P..1_ YK#.Z.J...D)$R)...HH#..... _.O._..:x.W..G.// ......I;.\|$`..s.1.Y.....(.k...i_.~?.U...,.....?...]..j.n#U....XH.....+....S..p....v..T...?.<^.0.AK...#z......+{.j.....h.......c.F+...g..~........>.xgS.b.E.;.=..S9..._.QF.,.&K.... .....C.C.>7.w...."....5.&..j..$v.D...;.......9&\.d....Ln]..yE...&..p./...&J.jFQ.{%.....R........oE

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageCZWSL0WM.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x449, frames 3
Category:	downloaded
Size (bytes):	110702
Entropy (8bit):	7.953594819553842
Encrypted:	false
SSDEEP:	3072:kQbdcntT1M/yBujDqxsBD4jDuw3hj+i24sh8U570:sntx9Lxsm2Yjy4xU5A
MD5:	9BE6978797BB90A0E43E24DA2BA3D9BC
SHA1:	C9AE285BC412B070DB79926C17F606C43176FAAF
SHA-256:	5E9161B177FC5A9BE3BC9C0607E7D57DA1156557F1069996D03E8454E7A9DB7D
SHA-512:	8E41104B02C39588E395C85E031A8B39A856E8AFEDC9676B6FA68986A6CE22EA1FD3A5390C540554AD457046AEB6BC6956FFC290EF8D3FB0748DEE4A3E434E54
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5316144.1613758971!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....z../..^....p......U.....e.[LT.2..9f...k.`...6...\t..G.b.IU...UB.h.60....3H....q...9@;._..IL...8.]......7&.t..v.6.......D.1.y....<.........J..yy..=.i(....n..o.aR...y...\|#.#...*s...S_... ............d.l.y.;.}~B..x~k\|S..~.z........+4.#..[....(......G.s..~zx.6O 9...z..b.3..sa...,O....=..u..Tg.V.....c.I.?.........<~u.<..-L.;..'#..b...........2..u.g.w$..4X....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageDL773YI3.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x449, frames 3
Category:	downloaded
Size (bytes):	112954
Entropy (8bit):	7.971785982038101
Encrypted:	false
SSDEEP:	3072:IP6ConLaWWhzkaGPZ+bCPSK6wLIOEn+Qeho8r:39Lb5aGR+b/3wLIOfqG
MD5:	3B0E26A9FEE65BD467A4ED7D0141038F
SHA1:	3C985CA03CE7384E8B2B7C6CAAFCFE2BCD432B42
SHA-256:	9892BB32350982A51505DCE9A19BE9B6A67AF0126B50A06035131B5CF7FADCA6
SHA-512:	30B0452702BDAE9502264CE02DED932304FF92EC7B2C830E6BC33B45163B6EF0BC82BFF7F4ECC3A4F466FED866A07FCE9079D1973C1B584D0E21147DBA2943FB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5309715.1613416930!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..1l.v....8..]}.'.....r.........[..T..<._0.sj}...#..p..\|....8<.....7.e.....Am0.p..Vq.......i..ci.^kV.f.....\....$.........+Jtb..Z\..A6.u'.v...S...r..$.....N..\z.^.....'..\.;.1]..N{..M....y....F.;.....?.Y.cP;.....E'..,..m...g........I.v.r....2..c;y.....#*....<..K#N3L..6..c.\|1...L)....E}..m.w..rk....Dc.t...<)...Z5!...._.e........s..v...J..y.( ..+.-.K

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageEZ7WM3CQ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	154429
Entropy (8bit):	7.96463746014515
Encrypted:	false
SSDEEP:	3072:f8KQs1WzYMHLzPvWtlGXIKsWtLjFoFAIRUIjF2QOZ0jlx8Z3:f89lUOzPvWtlGYKV1F0AIRUIjHd0Z3
MD5:	78FC435B96234DC4BC33DA3965E0B1C2
SHA1:	B5B0799234178F5538251FCB4D4A73F142B24103
SHA-256:	11DC1068D38A8B4F3809D225624BCBB0C839A411C1049F4C5C5176F781989389
SHA-512:	1685337778DB5AEDA09238B26343896FEA333584897AE5BCB0989803DE1403E793A70AD576A3C9F2CD6B0B683358DFB36964020D4C19DA0B67AF06A53998C174
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353334.1616110208!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..GDJ.[v.q.1O.F2.......5dR....Q........e%.$;..+...Y.../.c..^.l.dq.(S..?...)..a.S......yD.H!H'...1T'Q..w8....r:...Yi...r:.I.~#..HF..v.?..Z.r....3.s..W...n.q.'...J..]V.Wc.5..r.+.E........_p..Z...x..6z......F.lb..Q=..m%A..2+`.S.W...;w..%~...W......\|U..*...B.9[.........B........g.j..,E....O...............cC........9..85....\|.C".( .\|..~$....zz...DYT.<......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageGLJQRTQ9.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	7490
Entropy (8bit):	7.888853940994994
Encrypted:	false
SSDEEP:	192:UBRYua+cF82nbSG1+0DFpKlXOTVaA7/Wqyxjcv:UslayH+OnKlXOTzWqyxQv
MD5:	ABA0527613CEE47C9E406744C1B4F3AD
SHA1:	9DF538FEE439C5C6D7B1E023972611C53A9FAE10
SHA-256:	97297E509B371A6F5F29C48464A72A514787673E692262C1F43BE8E63AE4CC91
SHA-512:	3DF131BCDDD48F549CD569DF78D1F6302B802AE495A46D390D7F4C928B162DF0BE9C396D0C5AF4605EA9E94BCEAE6C6720B486B91CC15333AB358AA005594459
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5252311.1609740908!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..!...q\|d...5...~..E../.x^.;...Rk.(@]N.d..............?....\|.o...j0...v....JK...a.._r...lM....`"+9.oUN..B....A.X..G.c.M......:.r...T...}L0..%un........3....5xN2G._...1P........E.g.u_.?.t.>.wM=......M).T..z...\|C.[..M....A......R.......\.z....%..........g.~..+....{e.....G..[.O...A.)}......%./....~(.'..[..q...........g........!.\|g.iwLa.HX..k.....a..'._....go.^-..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageHHJCJNF7.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	19305
Entropy (8bit):	7.946574855825168
Encrypted:	false
SSDEEP:	384:3eJKEyJc7JtEE+53eOqs4UyMX+nqIIDmLoK0GGG/Ob3MYJC0AUHrCCB:3b/GJtEb53eOqzS+nqRmV0GGMYIlw+a
MD5:	35C6F2973BCAA46F6A5C641BDE085D72
SHA1:	3C94A84A58981B8C156024037648969CCF775672
SHA-256:	545AEDEA85896772D96C3EC1CEDB5D987C792D50D5393148C315BE245D3EECFF
SHA-512:	74FE561E0981A647BECCEDE0D47C18BBEA8DCC317468D11A0339EFB6C27F36208C10479A573CB3A44CBBBDC8E5E66E753CBDFDA6E4E76E08E977A23762A30C18
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5339887.1615310655!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......>.pV.....]..)t.i.0v..............d.%]B...=.f_..8.b..1..Dp7..b1..5.....7.M3...M........-....$...H...g.Z..t..xr.H......C..7I..).h.h.#T*..........7.>2x..J....oj......_OS.w../..q..G.R....w...............u.......wK.-...._].4.6...h.I..<".....H....?>\|.......... ...5..\|-.....~#...5{.?>Ru.G.o\|.$.....#&DE.....i..\|B.[.x...R..\G..\|Uq...4..a......_.h%).l.e\...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageHX5SETCL.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	9219
Entropy (8bit):	7.909965872219188
Encrypted:	false
SSDEEP:	192:Rda43UepqDHU7bvxDFAnoVtOJZ2Ke/mVJjYCIhF8f:RA43QDHUvvxDy3Zfe+JZa8f
MD5:	D1D86CFB36FD6FFEC4E5D2C48573059C
SHA1:	81CB4A630F0238D601FA59E373FDAD43C68A466B
SHA-256:	38152AE295A04126821DF22D91086A347F289DE6A87840803E1B34FE1E4AFF7E
SHA-512:	72C603E022D07A51F39ED4C21EDC1B537555704981BCB860829177B6D60595E40664EA5FE14B1AAD6EC603C9F36081889FEF3C8E123306B8EC226ED0388EE7F2
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352755.1616091705!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..C?n...q.@.........9...t.5MG(....(l.w................cSo\.r..x.. E.uU../..sg.......5.......J?)... .:..R?c.....-..........+.?Z..Mc.v.@.8=.....3v,.3..............W.....Q...S_?.U8..[i....+.Jro..o..a...:W.~.. ...v..C.....Cq.a0..Z.k.,....p....h.^K....m.?<../.a.E<.=......0....n.....K.~...........\|.....\.o....4..E...t..nbn...[..f......!B.I#.7.T.7.?.=u?.\|X.....?...nl..,\|

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageHZ37G5BE.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x169, frames 3
Category:	downloaded
Size (bytes):	28047
Entropy (8bit):	7.955190581603693
Encrypted:	false
SSDEEP:	768:FXQoNbl8dNbo9gbPyZ/e8Va1Fd2F17mP6mO5ZBKzBp:FXzNboQkPsHk1IABsZBWBp
MD5:	AC1D7851BFB958A62EBA52547AC4BF2C
SHA1:	CAA21896095E8B6925FA8E80BF60F48727F492E9
SHA-256:	CB281EC463FB833F0774CCC74095B3759575459CCBA184CBE2DB2DC351D827EC
SHA-512:	AA32A739E7ABAA5985FF6D0493DE9F3C097FAB8D3E8F69F1F67BCEDA34D27BB3D8AB96C47F855A5104CE0395B666C87EA52E2D5BE756D98A94808C89CF9CB394
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353652.1616133940!/httpImage/image.jpg_gen/derivatives/landscape_300/image.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...#...5hIa..........k...A..^....~.]......`...58.....9l.8...=B....b..F.R.3....c...zXJ.:...S.n.]......-..ud..n~...y.45..\|..>....^9.......v..7.<Q.........go.M~.\|)..C..j..ky.{...'.........?......5y.7J...._'T.w=.DW.._.......^\|D2...o.t.5...xw.w.D1.;b......3M>.5.?...5.,.L..%}...S...Z.d..w(.L.+.~......!.1.N..y...~X.8n..+.'~....+4...8..5...g~....i.........d....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageIY54MGNX.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	8052
Entropy (8bit):	7.916519591821331
Encrypted:	false
SSDEEP:	192:UMQ5bWJ7kVRMeCN9f7HRJK8ym4z7aE8PsVNAIHjG:UP5bcFzvHRJK8ynzB8ON5G
MD5:	FCEB53E05EDBD9B8E7B17FA49256085A
SHA1:	A459A5BC19707B76FCB78FBD59EC55FF2AF7C289
SHA-256:	9A0F728E7C0C25D3AE2C0D593972383064783D3AB4C75B8DE53888AAC976727D
SHA-512:	2E7E35A19C3F0B56BB4A08C9E386C9C5F516405318EEEA8041F482AA61BE7372C8F49CDB521B594A97A97FC06FE017BF24D1FFD6BF241ED879CC788EBA58E6FE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353137.1616105133!/httpImage/image.jpeg_gen/derivatives/landscape_135/image.jpeg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...L............\x..?.t..E.....>.,.(.c...V.v.9T..T....._.Z....-?..........V.....f..`[H/f..[.B..Q...q.....-t...O.7SXi.zt7....(.(...x.I....G<.y...`/...]..<s.Ex..>...3.]..?.l.=../g..fy.Q+4. i&...8.&.....qW.fQ..sI./.:r.d.....D.......0..9..=\.}[.r>......Y'...;.9.t.T.to..K......-..]LcSr...[.u9....v.xS.......G.....x[...4.E4s.....E".8.$.*H8.._.~.............{6....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageJB8O0JRS.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	175890
Entropy (8bit):	7.954306634106313
Encrypted:	false
SSDEEP:	3072:vXbKFRs1PD5qiGZ47+LbPvhgURvt2TUpzFusOhN/MozGBDyP6xtbR+poD:vLmsZDV7+L7vGFTU5VOhN/MpBD/9GoD
MD5:	B889A416684BE5B11672C2C97A7BC26E
SHA1:	231855156F3F7BC3859B462501D8FA2CEA2AFA56
SHA-256:	A24BB813BA0842C3F4D1C558564C5C2A00866B2A7C9E501C4F9BEAD6367B87DD
SHA-512:	C1D0AACEF45A895C1853D631337294F5099F0C57E365AB938F5276730185F63DB1D9CECF45E0540F5FDDF35EC387F4CE3818C4BFB29ACCEBF625994984BC8F3B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4362527.1554229726!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....s....z..._.Y.KE..+.Q..U.a..2. .......&."........<..o......A...V&.......0.&R9.ck....b.H.M..[K...Q....xoj.^.......j.ZG.t.C......6.5...![....)d....)# ..$..~9B...Ok..k..5....x.4.u...U..=.../...x....N.O..7.P..b...$r.......m~.>.......I..M...-.i.....z.^.V..D.....7..Ds.._...'......._...g.....oc.-f...IB......\|.H.0.3....\|h.'...,.5u........ZM....I....NFz....#.<U.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageJRJ7TJQ2.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	11522
Entropy (8bit):	7.908099898062811
Encrypted:	false
SSDEEP:	192:RQscaFiQTcqkLGo3YIwaGLcOwkszLvOJiPgE9WErur4KmbU57r54WX7szlKGr5H1:RQXPgq3bwaGQOwXzLvOJSp9WZ4KmbcrG
MD5:	B50C9803E99ED2C4239CA05C52E07655
SHA1:	1F97853BC20C89EDC54499E9D4676C1F386A58F3
SHA-256:	35FC9FE3BCFE62FACCFA0B316E7B5A98C02AA3E9EDC21AD6DC4490FBD61F35D6
SHA-512:	E467B8F6BD04C4809A3854B08808E13250F6F4B279C947EAE9EF511B4BBA40419D9BE0A4BC65BAD9F9CBD8F5E21151FBF57DBBD99D6C167317CEA906F383B10F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.3329744.1489776394!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....'`.H..i...!........Wy..x.....x/..z.f....ZE...BI..'dk.8...[..........}k...x..~....:fx..R.c.Gc....D.....$..+.......*....D_......(\,..Q.[...I.r.W.V._.M..]..^...Ync.a."..{.U.n.R.V..n.+.).o.P...\|S.=/P....G..HF...WV..M..?u;.\|.1.T....=..O.uK..S.B......O......7.<#..>#&..x..M.G.....h..Q.........@...\|:.<w./.^...yuO...,.Fq5.....d.}.xzTR..-......V{,...T.%/h.~....^MY

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageKHZ9SQMI.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	11739
Entropy (8bit):	7.944165473632726
Encrypted:	false
SSDEEP:	192:3j9ePekOUilMq2i6sPZ/BGcdo++1Y4L1OAkezpkT6e/hBs51tdKtdFLO+1:3j4PUuq20h/BhdC11Oxop864hOhedF1
MD5:	766A248375D771A95A4A71CF8EE4C6C9
SHA1:	BB4A9DE5658194A67602E2EC9E4C0E39C197C362
SHA-256:	19E12AD56015743B0014B7C6BF53A016880F7AAD284282925761277E2CDEF347
SHA-512:	E9914C99A1EE5F8BFAF5535867F5AF40509CF3901E2BD50AB738D093D458F1D64564E84F8A76D45FF6BE26BDD9B9E5D9DF169DEA25C6FD6C0D25B0B8C0F7B628
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4919456.1588280475!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..T\|?.....x...2D.$.E ..5.....+.9.WG.m.A&...Z.... ..}....&..o.X]..9....}e...Z.]F.A.(O..8'<q_..39..%{;..c.S.M......6.ov...<...t.r.(.fl...k.....t.....<.s.....D..........(Us.k6........f;~.....Abh.h'..q...Q.#.\|-.w...ZT.G3].A..8.....K.%{..=.,.w..\|~5.>..,.3Jo...(.y....d....m.1..[.8.zf...T.J]...j..>(..4..>.5.P#.K.....Wc.:.cZ.O....{.H..'..5...Jh...D.0.>^.9._G....\|.a

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageMMJSB1IW.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	5416
Entropy (8bit):	7.894200490198773
Encrypted:	false
SSDEEP:	96:d6EPIrmCRRb+6yftfLreU/d+kPsTCrIVIdFVqpssGvLt6jCec2SeaHx:UpdRRi/fLh/d+LTCrhdFcinTt6OktaHx
MD5:	5CD0D64DB616B9C0228734B6275038C3
SHA1:	B37358829BA86E6FCC02F80E42B797C1C499DA7A
SHA-256:	F985B78AA8B1BE40BF1803B05A7150C87386DCC0D0BA3B69860A0691CD687A62
SHA-512:	F5B58E3394583A3B3519CBE8C9261F4469A9436AE5A6A4F538EEFA917B1ED9FD2775015B08B17D6100AEEBC208544BB7C1E1CC08ABF11EB179702CA0A62BE599
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353295.1616108921!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..m\|....h.0y.k......d.p^Fk..[...e....v.....v.t...oO...>T.....X..~..x..&....7.7j.-.Q\|............j/..........>...{e..I%GZ.q.e......LO....._.\.........P.r.8..'....o.M...(...Y.D....x.9...~...#K.%...V.l7.u..B..\.<w..._V.H.;}.VI.......q.q..q....._[..F..k.......\.ui.....LW.Sh...FA.o.......E%...;Y..z..%...E$..Q.u. .;..,........h.*.sK.j..2p..'..t......:v.&.a..i.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageN927XVD2.png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 620 x 100, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	98054
Entropy (8bit):	7.98548064321227
Encrypted:	false
SSDEEP:	1536:y3WX8+rPpsBeb3Oe37M9OF3Xve5axarZsMDNJrYHCAKUzLnl5ueO5fR8:yi8+VsApLd8axaNsMEiEPl5u938
MD5:	2AA370BA5854EC83905C03D02840EA69
SHA1:	A2C4CBA9480F77D078AA6949A15DCD44D333F969
SHA-256:	7B6B201BC1FCC5728BF34F6CF098F6C90927D6FABFACEB089EB536463F035FC1
SHA-512:	7C8C21BBA6A75EB66B86804BA97A9C1DF4D13D7893DE0D2A121CE01B6D0ADFD0CF84BB88AA12E676A5B4650979D3EAAD32966E433636E333961E8DB0BDD2181E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4894117.1586801889!/httpImage/image.png_gen/derivatives/landscape_800/image.png
Preview:	.PNG........IHDR...l...d.....;Yla....IDATx..gl.....r..-.H.al9G9`c@`....A..8.s..... ......1..4.O...wwk.s.HWs...q.=3?f~..._...].j.U.M.}u..XzU..U_.o..o..bK../j3..j..W........\|S6r.......m.@......' h.>..\|3. #e3\|...(.M..e..+...n._.....\|.l..._A..r.}.N<V1n....\.........ky.[...`......N}...\|.mn..3.;Nl.....Bl.j.}..`[".o.J'_...R..g>..5..d..o!.7..'.8..q.\...X........S..6U../^oN.....[~.....q.,.J....2.V...>>...\.I..z....A.mx.i(.\r...%.%..).._>n....Zm.\.......^s..Z.h..6.S.....N._..T).......6...6....-.A.S.m.}..e..6.O.#..g...&...0...t\|6.x...sR._O.cf.ug......-S\g..7.."9]\.=g".2......{..OzN.M....-C.#..g.J..7]....m9...*.=W...W....E.w.8..}$Y.....~Bf..g...G$....r[Z..z&.t...............{_...km-\|I.s;.sd.".]9...z.......v.W.....v..$..."...9gt....s......r........lQD.......}..c.~.t.f...F..K....d.(.{J..=U..y.\|.O.}R..v..S{z.s;..6:'..... ..C.n......$.o..;.Ln...i..6..$.......q......\|.h.....g......W..\..B..=......?...{!x}/..<.!..@...V\|.../Cxi..n....Ak/.oi/.=...i<6J!~

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageNKSWSC8Z.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	15325
Entropy (8bit):	7.934589194985264
Encrypted:	false
SSDEEP:	384:3CpVvpKxztFSfOt4s5YxU6Gey7kvbKw1w6S/T+MgTc:3/mfOt4DGe885MGTc
MD5:	5B7F8D2403CDF7DB3EB6B643B3829F9A
SHA1:	8B8AC171A3E7B615E39107925664DC9F894EE30F
SHA-256:	AD977DB0D15089E0B6E94BCFB511CCC3848EC3C97C01A85F2073DD5FE08E0FE0
SHA-512:	646F3283AA5BFE663AFAA2CC256EB261B9AB63F9DC2B3A536752A86E19483717BF142EE210C525E7D6112AEED5C700768A8751980BD2DEA2BE546368E318BF8C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5331323.1614740232!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..L5.&]+Z8.]"Q...O_...Z..{....l#..G..7..:.9.B.."......5..........J.$o....}:.....e..'.G...XL2...\|..~......q...f.&Bm4=.j3...P+H....N?..?.b..].Bx...rG2_x..~!..H>f.+.'.......'...jz.....\|..uMNY...l..$..;....W...6....o..Pf...g....~..s...._z..#......U...>.*.\|iV.#....G...e..5{.Z.+K...o0....N23..l>.h.X..4..W...`......p..#......w:..dVzu..P~p.w.s_.Z4#A.........A..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageOT9ZL23S.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	9090
Entropy (8bit):	7.906990951026124
Encrypted:	false
SSDEEP:	192:RvPT7GsKr3uab8yH4rsjzz2sZrL1/RFSwiFm64nE0qDUY:RvPT6sKr3VBAsHz2sZX1CLH0Y
MD5:	5885FEE482EF4A4C399395427361889B
SHA1:	471D1A8C063EF3DAEE09AE689ADD31112238C8D9
SHA-256:	58504AE6A25A88D01515B9EF3D4A50699BD15A9FB3F605087B37B20CBCB5F22C
SHA-512:	B9218A82322759BD5A24D2F69CAFDCBC50EB7B6F2B281D12E8AF2EEA7643713F76A87956F491FB32A17F29198976B18E7D47E7DEB84D59051C6C76648FB4E3AF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5186162.1605199955!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..<<M..q..^..&x..!...%G....F..?.`.....E...Nk...m....\|.:.z...[.,..1...0..\|.. ..>.....V).-n.u.0......c@.\|y..Z.GM..J..M..`m....i.........x.......;4.:.c..\|..x..+.h.e...^2....t.>..W._.?`.....\|\|...^lZU..Fu....._....8.....0{.....E.........n..;...7....P...z/#.........m....R]BX...s....).9=+......H.....?...4K+.CF..9..8.lb6....Z.\|....._...L.-.\|>...JK...F....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imagePBLSL2AT.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 960x540, frames 3
Category:	downloaded
Size (bytes):	202242
Entropy (8bit):	7.961138380684285
Encrypted:	false
SSDEEP:	6144:F1ccBHSiPqo7Kp8rwNgaL6YRE9G5CAJUDGzBP:F1cctSiP/K0faGME9G5CAJPt
MD5:	275994B0055027873F1A242EEC2EEC73
SHA1:	AC005858E27AF3F5E45D0E574C153FA7D382D28A
SHA-256:	6A130C2C1382A8C5A278B91A778B03A10D72424847B27CBEEC3A0389A574A2E8
SHA-512:	52679A04B03B0E9CC06384A72D68F6202D7C546DAD6F2330197C017B66EB15EF12330FEE62CF37E68A8F8B0ED7ADE8393E6DD0FB141B536C15134F71C90128E8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5326912.1614399657!/httpImage/image.jpg_gen/derivatives/landscape_960/image.jpg
Preview:	......JFIF.............C....................................................................C............................................................................"............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...c,.FUx......#.:..+zd}......X.s...+.)...>.H2O...I.;..s7....F.....].y .... v5..88..es9k......4vi..b.$......;..%.8./..9.x...........\|.O....9 pO...fxrXF.w...iS.O...l..y...6..W.'=....+<M.......9.m.N:.u.?.SQ.,...X/..0.....v....2$eP........#..?..j..>Y.mf#w@;g=...D.nc.).>g...31....q.>l.....9..R.. \..Kry8=3.g...t..S.....r%^.9.....8...2$..........^-g.gd'.Q

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageQ0XHFOYR.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	9073
Entropy (8bit):	7.914061420805424
Encrypted:	false
SSDEEP:	192:Rn3tQhjayUO3GoZUE9MO7j3f8Iqsy4NXmF1WLw1RXYY0sLxJd+tQpyvN0:RID3ZfF7j3VGa2FqsL7dRcG
MD5:	18212FA25026E05E32560918CA11FB32
SHA1:	2195805DAA353A6FCF5DE568CC9474A83E240584
SHA-256:	83E5815BDB739C4B912770536266DD72DE6E952C1D6D5BA549486CC5725BFC2F
SHA-512:	B912C13ABEB34E43DFB31DD57F28DFE6E3AD65CB6B528F582B047F725E952E3FC25A64B04719871822C160D7CD73CDFDCAD8215B8FA0F088DA39F149D58713D6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5214845.1606960802!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...t...!..Y/.^.F..n......ye.........C.l..r=../......M.5+M^+..7..[..=.G.z......".W....h`.c........._.,..b.F-.~_..\|.u.Q..*.....g.~...z.....~..y UH..."...?J.v;..iz..._.j.u.....a.X ......\|o.........W.j.f..wd.......'.I._.~5.B........n.\ \......d..q..}vU....Y...6G.a...{AC/..4.j..5.G....../E..v.(:.....P...Nq....a.O...z....!..d...&..n88.2..?.....A.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageQ50DS98X.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	9553
Entropy (8bit):	7.892353495254413
Encrypted:	false
SSDEEP:	192:UJCHHGgIkxQZIDqd0QiFc6LvdLxwgqUjoM66ZhE0XZHgBmxsIOK4HRgX83vvwB5:UsHHBxQZIWpimsd1q0Q0OmxsIOTHf3vI
MD5:	EF585D26FD134E85DB55994DBCB0C684
SHA1:	2A74A65A6172E8E4BEBA1A8F8987ECA32A35C6DF
SHA-256:	994519FD343A1695E6E57913118C6C2FD6DA856590341D57782FD4657052E2C1
SHA-512:	35FAE36E606D7FA9552C2F70AB164AE1CAB62642E9BCFFCC4B3D3A359A665C789D0B83A17E32ED680BDC03AE5D4444722EDEE7481CEDBA3CBD6443F877FEEA34
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5054732.1596766151!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...~.. .i..8..v........G..........!..-.=q.....\|.......19E\|=G....#.....Rz.?x#..-&..+..c..N.G...\..=....a)<..._....[.....m_.?..g.......\|.o........G...Ry..O..1-tbdU.......xs.0.....4....V.y.3..~..q>c4...\.......e.t...\|..I.....c..h..\|#}..:v...<V.(...8...I.....?....3...y...=.N....~.x..zf....m}ev...f....l....y..<.U....G..........i.j..a.>...<7....~1...$.i..V.j.v.b.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageQFKT280K.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	105862
Entropy (8bit):	7.953481457262492
Encrypted:	false
SSDEEP:	3072:P9rnVQVv+TF1aTbuUJq3HLFjxSS6GOU9UeCECdVeTXIpRg:PRnVOvPaUJSHLFjxJ6dldVp+
MD5:	91E7EE157EC3841A67213C8EAC32B10E
SHA1:	66BE9731D5BF8ECE38094BC6AF18F8CAE0D712F5
SHA-256:	5D31B887AA8D5C190484434535264D5299EEA824C17DBE7453A1678971CE45BA
SHA-512:	E97BC5CDA61C6D7540AE5A7FD806A321B9CA63F5E984A619EC329336C1097437DDF7CDE31C344F864952E974BAD6D36BF8FAFE3B93FAABAF2F50D3E399A530D6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5103715.1609268089!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....o..F<...:.~.K.^...G.{......=py.J.....LlA8..9....<=V2...n..Ks.y\|%w1rVBI.....u.........._Z.+%Vo....;V=........N3..\|W...{.i......\|G.xVf..`s..Z.M_..%.\|......zt...Cmn..^..d..5..'...F`....=+.2..7....5.(.\|+...4.D..pQ.....b.\..r..`~...=..__x.V..m.7...o.}9.W.\.:Xc..d^\;.H.....a.....G.b#.;.)f.V.....F.ciz.u(a...H.,G...W[q}mu......{...66.x....-.v..W..\|..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageRH41D0UN.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x169, frames 3
Category:	downloaded
Size (bytes):	36977
Entropy (8bit):	7.951657859005136
Encrypted:	false
SSDEEP:	768:Fs38MHVyr5dId+IXBHjpQV5/DPsx6zFm+anrs/RgfIvaV:FsP45dbIhpu7wgarQR6SaV
MD5:	E26FC511388A865A4D0BA102F9D1537D
SHA1:	B8764DC2021217FAD6C3380DC20A5FD7565B499A
SHA-256:	EBD151DF97EFA4574255E4CB42CF2CB8F068C21E4FFC582C59B181A3A8033AF1
SHA-512:	17104EE5FBFBF316BA5023669C441AC20FEA1B6C25EB03BF5A7F259905F90B959980A0C978242BD3419CA670FB54E8D65FDA65BAF8071A586F861D583B117FC0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353644.1616129294!/httpImage/image.jpg_gen/derivatives/landscape_300/image.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..<?.n.....x...q.."@<G..#\|.t..c....9...=.............~.......6..3...-.p...pk.._.3..].>/.B...P.._..i.,..#..nO+ ......f~Z.......7K..5/....<....+S.u..j...a..o4.R_v..1.....y.T.D..3..?..Id....)..U..}............b......5..d.?..j...7n...H'.....p..i...?.....5..{_..l...WC...Z...Px.....#1...#?.....5=b'.....h.....sZ.P:3,7v.....K.w\|k..f.~#.'...a.t...<...n....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageSC13GLBZ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	15760
Entropy (8bit):	7.937576987913554
Encrypted:	false
SSDEEP:	384:3zHaWOdkm115+6XiPVNKCA51Bz/s/Klzcgke91LneCgz:3jaWOdV113XiOCArcgP1jRS
MD5:	1086C7D9D94832AB17B18EB56C57AF57
SHA1:	D0868567AACB904A32FB4C90632EEDD149450994
SHA-256:	FD1DD2E0D9696C1DCCBE7402253C7188F80056785F6B1CA784AFDC5D59992F37
SHA-512:	532FB7AB55CDB5A5273553F2C19644DA32590709B53DC175EA07FF321A9EF1D75498CEFDA36C6CBFCF8FCE6F625D7681781C50FA10C22A85046961E8574B53B0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5335979.1614983472!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....e..........3..6......5../..14.......p"M..g.`W.7.<m-.......1..T.x......\t.1.&.......V.GP.immej...g...F..bG.*...@..AZZ...&jv.[.x...o1.kU.4.D. ......._...u%)G.S].......,...)U......%.._..-.Ac..2..).w.!..V$...2....X..s...xW...t.m:./.h....#+m;K...%.$j2...$..l.._mI...\|.}....Y.y."...F..r...3........>.j^).n5...M...j.Q.......UX.P..l`w5.[..C.(.8.i.~Q...);..W=..K..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageSV8QCR99.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	7092
Entropy (8bit):	7.927188429310682
Encrypted:	false
SSDEEP:	192:USm3A9HQHGGKjIYv0+bx2LUjtse4JR6ZiE2VXfNWNn2E1:UT3OwHrKjxv0+bxngROiRhE/
MD5:	A8600C6258319232AAF88E89E6D18ED2
SHA1:	168D2D2BFA3DA3E6E7A8D577DA0BCFC4C0D26CAE
SHA-256:	F891E62D4F4625C16DB51EE6AE87295AB4156D6AFC13A292BCD9A20FAF3F6780
SHA-512:	EF5414467223164BDA0C90BF2B5D025AEBD3334E285BEF9B07133F1C4B8959EAF9C323C9325BF422DAD65719602869450E161BAA43431BC409C71D70671335AF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353148.1616105607!/httpImage/image.jpeg_gen/derivatives/landscape_135/image.jpeg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...<73..EA..&.<g.Y.r...G.x_........M.h..u[.d.r.....n!...y..\..Z/....e...E?.\|l.[X..y.[.8P.3(...W...?.P.......~..<9..u...>.t.6}F...#..........aa..\|....BV..fo.............K..<{.4.Z.I..~..sum.:.$.\....N>...v....V..R.V.....%I"..d.T9VV...B.5..\|9...;]j_.'.:.yamesqa..71]6.$.SkF..L.......%...;....s....ZC..h-.l.......\|.d.;...f.r..4...f.,T....~{.........i...-o^..]Z....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageSYH6BX8A.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	105806
Entropy (8bit):	7.96763203675989
Encrypted:	false
SSDEEP:	3072:TTft9ot2iMqhC8W6o/73TO6k0UMpMaUKP9OAkYfVag+:3oUiMqhCQ8Tm0rf1OlWVaR
MD5:	3D6639CD4E1F499674A147ECAC407631
SHA1:	E1A2FBBBD5E68417C6FF286713CBDDEAB3860324
SHA-256:	241440C7946F8269A85D86C699459061ED2EA46BAAD325ED515F5DC06C3BD467
SHA-512:	C1BDD2C9D24946BC14929E6D2480180222B61F4FE0D64644C7E120097BDBDD89C42777189337D3FF5FFA823BE0A81BBA72B061A9F14DFBB968AE0CE5E567B720
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353295.1616108921!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..Z..F3ZP.ju...W=I.Z."..8..5....A..6._...$.O..t.........5.m.%...y=..+..........Z.9^..T[..mBT...z.-."..P...W..,.HV%.............iF;.RW.$6....26c.#....B0I.....{....b..6.j...z...f...c......0.Q...x.a.$..u@.....8..5.8TEl.C.a.1.@...>.5..+u;.;.j...#....GD'....7@..L...8\`t.e...s..T..'.).....~0..rv....W.o..B.........&n7r..q.EI.M93..L.q..}*...A>..u'e.U....V.y.$..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageULT019PO.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	10087
Entropy (8bit):	7.898304619820307
Encrypted:	false
SSDEEP:	192:R6Tpy8rLVnsmE97yoG2LBjKz2OGqKmukKsVGFPx1fp2oXybk1V/:R6TY8nyX97XRLRaGDm/K+A7dB
MD5:	DA45E90DB9DEAC461CF49535F4EC63DA
SHA1:	41354DCD9A38F6B734628B7D1B756E1A21F34335
SHA-256:	1EC14ACFB064778BDE75E898FE6FE6761EAF1849D2208CAD1AE5E08D8E08ED51
SHA-512:	71BAE434A35E4F97433C0843FA237B9529249C65B5D30872394A7E1AD9F0E247A3969145E99E2F72B86A5476EAF306464057383D86472F41290D5E0F3D1D9BD0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5203984.1606322081!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....~..~!.G..?...o....[.<A..d.h.6.w.DO.....d..7.$..mZ.C.~.g...[g\|>..#RS.......U..\|?./...>'.........R.<.y....-...K...M..t.,E&.n\G.C..?...y.k._..........wk ..U..7S..._........................>.k`h.......S..:..k...{6.}d.....M.\|...!!...X......1G..s..c.........+......x6../...c.....+..h.x..V.?..n?..56....y*..^...m'.o.j^....\|X........O......N..I..........m\|;...z.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageUWTGNG1I.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	11427
Entropy (8bit):	7.927208828809372
Encrypted:	false
SSDEEP:	192:RDzoX5g7gCQ1Nc7+uc+9nyuGLEvlMMeQMidCE19t0X69nIndaN6+:RDGCg9oVvnJGLEvvzYQuKG41
MD5:	4F51A6B15F13C0A86495F4B32481614D
SHA1:	8BE608302178771B9498CE8C516D592D87765EDF
SHA-256:	4359110C848DF7B1846F1F0060B8063BA221A9E68CD082702AF8C9880FECC332
SHA-512:	37EA3E4D4C329DD675FE877C507BDAE77C847D12281F48938EB7156CB011E55A9851229CB78EDEBA6C76AE8EB9E90BA77A34C59B693B5D4BEFE3B641C9CF5590
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352826.1616094186!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....t.-.E..nR.&2.d........?.......j.x...+..m4Iw..w.^]Z_,.+ukv..v.4..>H-{.p.........mg....PI..j}:.T....^;.....:.F9<.....l.0 ...\|-..>%x......k.$.7...o.\|/../....K;\J..J...(.R.F.\,~_..8.;.hr`rz..U.y........{Ng....l.........i..a...i.i.u..k..[...?_>.~.^......O..xW.Z/..m.h....A....V.".R.*.].3$.....,.+.-....B...\|I.MlX..m...u.k.DR...B.;. ."...?...%...F..s{._S.?..#

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageUX3IZBPN.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	16994
Entropy (8bit):	7.93217987247749
Encrypted:	false
SSDEEP:	384:3qyZ6L5s3kp4IIBv55vO2XKWj9fsrnF2d1fA3D6ykab1zXR7jUKOjpnblmf5:3qysL5gkpQBv5BOLWj1srnFimtLzXRH9
MD5:	72C865C8BF3367AF823D4E7A52D71D0C
SHA1:	4E162E4FEB9880ECB06F22CD7E9B048839E87541
SHA-256:	5B23822436FA2A375FE7B45A4C9A60DBF26E626561A0D81BF83E90B098F051F5
SHA-512:	F28C4AA11007EC8A91B671728F9FFEEE31B8F5A89D49AFCA2C3E879A875E3BC73F28E43779F73C3C628B05DF9C2AD669BC48C6263C99BE21D50BE8597FAB6B62
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5347121.1615770698!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......>:.#A....,.....5.6.Y.ZK..&...m.3.%.]...H.Y.C....L..xZ..?.<.._^..x.......7.k...b.).m...$4.....?.m.x.[....6..3.....Q.F...qM....B.}....H..{..4..W.;.~........3...]....L..]...0.k?5..i.......<..J...xo:.P....yk..r...2.%f...?l>..^..H...._.~&..,6Z.....H...g#A../.E.+3rdb7.5..<_.jz..<c..7Z...:M..U...*@.....`..Q....?.~.:/.\|g....=<X.c..).>....J`K.x..N..$.6.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageV2IM7UPI.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	10485
Entropy (8bit):	7.905910746719677
Encrypted:	false
SSDEEP:	192:U6tVQ3dJz+yvYUAdumzefpjezeD657MuvirJ8/+:U6t+7ztvEzexjeiW5AvV8/+
MD5:	225A74744E4A7B9023DB244088E570C5
SHA1:	B17955FDBFE6649D6AB4E46B3B25ADC18721E751
SHA-256:	797729418DC01EE28B801BD9325C05D31F5B85554712DCA5969F9B25036C0DE1
SHA-512:	C5DF6DCD702FDC904F29B811E684F01093C07C7A6D12D9B5229B4496E669170D0C336DC484BF2BE4A3148182DBF08B6C621C46A8C79046ED4B40DEB37BE05431
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5350197.1615945327!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..CuO.;..F.W..\|h...{guccur.JI..e..e$..$W%...\|J....u....#..E..4..f..o...K..Y.A...I$...?...?...._..~=.....>.x[...`..x3T..cw.MS..v.M6.J.E.qE...#.4...>G......~.?.~.M....._....#.....L....\|.../.M6... ].........m......T.S..RUd..Ou.*..N:..p.l.......n.[.E.K..20...t.......=...]!\|....=........X^.u.w.#...(.............>....(x+.7..(..i.%..Zv..1...xc..'m:F..b....H<._v~..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageVNK535DV.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	9091
Entropy (8bit):	7.907973492414562
Encrypted:	false
SSDEEP:	192:UAMdctGJx+XC7P5Y6ME7+/Km/e4UXIEMWqlxEucm56W1hLkloi:UAMdctI+XGhDLm/BUYERqlewklP
MD5:	D1CCFEC2C0CB5EAC7F28279E0722A73F
SHA1:	E6BF3B5438F0EFB3F06F535567612ACD915DBF5A
SHA-256:	BF9A91F330CF18739A60DEA264D75F08F151256C2E9FEB0C97F7613A3EA1E568
SHA-512:	1DDF4E10726C2FF7133B336E1618B7E243DF7AE0C6738DE4DE12526782A25B26644523F346BA511C7C15AC406EE46C4B26155DB7459795541C26C396AE5FB2BC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4859921.1584637596!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...msQ.?.4."..m..sq2..!^[...k......~.2...7.>..:......6....+j3....T...._.?...........4x...o....x...k<..[I.y.!..w....~......./..Z...K~M.Z..y/e.$.1O..q.....jb(.0.V........q'..M.?..`+b.i....U./9;....o..>...(.2..... ...-.S.....\|.p9<....?....1....T.%..L.........}..i....''n...G.z...W....8..y......;4....0$.........H.j...~.?....ii..B._.t....ar'..c..)..c.p+.2..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageVVIBDX2P.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	8282
Entropy (8bit):	7.911389436886206
Encrypted:	false
SSDEEP:	192:UrCpA1c7K4ev6ebgYG6lC5BMjxZlXzyjlXb9s:UrCpec7K4evSYG6lgqljyjlJs
MD5:	4845C067290B73C5CDF499A627392A73
SHA1:	39C3330FD96204FAEB46CACEA7C0543A3C1D7370
SHA-256:	EDBEA7C3D0E32758629A4C83C86028CDD7A8F811832F34875B76B2A97F10EEB8
SHA-512:	183557DE3134369725E41C11C417584EF61204D90897B47D298F9C5B3F338CA7F0CF7E91DDD32322BF9E53ECF1D1ADC1D8EBD917A89528E3DBB631121012DA7C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5337103.1615092605!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..S\|..k'.j...\...f_j..@_..%....r...%.......2..;c........3]0....v.........0[.c........4g.#6..<.O@:.`k....~0x......6S.......O..V.\|...Ur6....y.q.......q.\|).G....'...B.t[...GS.#.._..zE.......a..qt..c....f...I.369.7...0.;..A....M.6....C.xc.B.*W........>0..@..h...).......P..8i..p.G...I.......o..x...4......xcA..P.c+..c.!rIQ..M.]...."E.>...[....o..r..e....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageWJMTH4UD.png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 300 x 54, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	31921
Entropy (8bit):	7.985213495643258
Encrypted:	false
SSDEEP:	768:eGJonCH/XCpHdZduRAWFgOW9cM8w0EQxnljcF4N09ssOcTVoeu:tunA/XU9ZduiWFgRcM8w0EGlG809s5cw
MD5:	63FF7591991B712C12346F88C6785D80
SHA1:	9AA2B52A3E6B45D96043F0CFCA0C645FA0A62D5C
SHA-256:	2F4BC3CA6E5B7FF27C52F480359CC40E91D858590AB4DA135183097C46B95386
SHA-512:	76EEC67EF8254B99D935350957CEEEBFCDEA3AB0ABCEA3D99AEFD44870A1A124FAEB9712DADADA9C82922CAB01CBDCD0E9DC0172205E9A6FAE23E72C7CAA52AC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4894138.1586802357!/httpImage/image.png_gen/derivatives/3x1_300/image.png
Preview:	.PNG........IHDR...,...6.....}G.<..\|xIDATx...x.W...#.K2...-f..9f.d1[...-233.23. ...;.I:.i.i...$==.3.=3=..6..KI...{.<.9E.SU..[.....z&......U%........K..+.G.......].L..R.m..b....Rf.6...SY`.@S...KQ.e~+.P.?Y.Gm....'...`UbV..m..UYFe).l..Z.JT.."...%..J....o).>....]8]..r..;.tY...qE...rYnsMT.Z.....R.v...e..3}F.2........E.Q....+..K..T..w..c..Z...j^..\|/...1p#.S.....hWx..s..n.~.......a7h;.F......_K...(..`..F\|Z..C.<.G..g.v.>/...........Q..B....):..A..;.P...i..2...&.....8L:......y.S......a...n..8.?..kp....Q.p.{..K..3....z...~...ftZp.nS..C....-........;.,.T.$..RL...#...XI.VY&X..._......m`.......x.XA.X.O}......E.q$.._.+.....Z.6.".$.3RC..[n..6@.].R7;C.L...-+n[....ZQ.T...4]k3m.....d....k..-5....o.P...=..J..-..B..O......h.5..!.%n......p.>.....Z.s.`7z..."Xm...pL>....pI.uq..`......q.NtYt.]k....<..D.r...&.\}.C.=A..'.......B..;....yW.v.Bp..B..F......;.1...........?...p\|.8,...=..\f^...h_\|.]+.c...8..<.w...Z.......r.....T..].4:....I..@.Qh..}...../..O....b`E.p

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageWKVC5GYQ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x451, frames 3
Category:	downloaded
Size (bytes):	128908
Entropy (8bit):	7.957382116794195
Encrypted:	false
SSDEEP:	3072:hS56U+nEWsGyZj57NkrzU5gS+lGmlzN8EIuSaxcVj:hjUKEWWZjTqU5bCpN8fuBxc
MD5:	1B9CAEE20058AC6F76F9DFDF3E0595AB
SHA1:	D5F3A13CD9CDC51BB764221F5347F668EC4C1D01
SHA-256:	1531DD73479F2F06655D64937366B1343E05E8E94C9A596AC1690B5DF5A50FBE
SHA-512:	3ED4390B6FD804DA0AA12DDAF75A002832DEDECE09888EEC7BD2F5C443A3E964BEE16A330437F7ADAAD5597D147AA1B935B2BB24D61D9B413E1673D6AE55C25B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4931365.1588969615!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...4..Z[..M.4.{.+h:.D!...oZ.......m...aZ.3...iN..i\...,e.M...U<.=G.Ut.Mo..+........O9..G.[...A..\/.u1/.."i.#a...!...%.....c.U9$..D`..>..c..P.....A.;......qg-..g!..c...-...k.J..X..........E:}:I.4S..P..".~...*.....%GG(....=}j..nPN.l........."h...n..n.e$.2H$....8.Ss-..-.8.YB.:..`.#..U.]...o...\Yc.M.o'C.ep.....W.Z.de..T.......4Q.9...s..e8..;...]...\...c`.....u.$

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageWPSPF3EH.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	13490
Entropy (8bit):	7.932970360482097
Encrypted:	false
SSDEEP:	384:3/YgTUkZ4r1GPFc1Qhm7ZXaQCXVUozYnv5qZtkar6:3RTD4RGgKQCVUVR9aG
MD5:	3D60431FF091C3899D029EEAE80CBD13
SHA1:	9CE4FCBECEDD8E429D89BE8E189F94568F852767
SHA-256:	A9FAAEB1CBAA6AF0CB23443615559FE20E462DD875AEBEA3208D8303A73EA173
SHA-512:	9BAAF26DC4E805822720EF89A656E7AAB5237BD60418E48F840637E0161F62642E37456B1840485D7C3B010153BFF23410A24AD9F338C29A5CF05B0EA6EF00D0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5351578.1616021618!/httpImage/image.jpeg_gen/derivatives/box_190/image.jpeg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..\...76...>Z.w....2.....<7..<..."J.+..~..}n.Lq.Ga^.\|...G....i...CA.u..\...Fz.A.....m.../<b.C.!...o.....?.\|3{.$[x@.N.Z.nI39*..V~Rk..{.`A.8..F...Nk.........{d. .Tb.w......lm.{W..'.=M.bm..m.........?.&.....mM..XHR=.".R.....<>...^..^...3..F>.&....o..a6..M..-..,.q.P.....+...!..k.o,...x...pq..u{..yR+k...........Fk.l.uB.c.f.....c2.EI..-{....i....y..sw.PR{.q^

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageWVWU6QUW.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	6170
Entropy (8bit):	7.9026924227290785
Encrypted:	false
SSDEEP:	96:d6EPazuEGhvIOhQT0ewf6P7xm8uqO2i/x/FpqgCvWMwx5GKVMTo0PBLG8L:UyLvClC6I8NOB5/2gCeWL1K8L
MD5:	1A20D1468DEF0B155A390A7B97EA41C3
SHA1:	B35AD7D81D38EDF85BC0723E80A8F621FB882A48
SHA-256:	462A11A3BE4CF02EC337BFB56EA8526C7F4CCFFC55F0BC1AAF9150D677CAF3A9
SHA-512:	F925C4D48332CCE827DA6E3C60991D5E28DF508F63DA1F06A464CD15E5549B2CDAC2D52AF75403B0D8EFB65CE8C3631AA18BA552532F02395225FBA1C241F7A3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5071086.1599144107!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..o?n..7...........m&.;B...\|G......:......0".x%...q.....\|'.....g.<u.-C...4..x7[...;{.V.vx.x#..r.7....P...x.H.N.@f"k..;O.:~u..\|JFKM..q_y..l...I...+.{.k..vz];+y.l.-..T....&./f..}_v~.i_.w....\|+..7M..-&. ...i.....U..b.V..yE.A$ ......._.&.._...\|[.%..+.D.5..\|....v.O.......'#.j._?.\|I.......S...8.>b.........!.p..^..N.JW...3.o....l.?.:.uyn.....B6..]..K.....f..i....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageXILRB115.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	8580
Entropy (8bit):	7.931661429348854
Encrypted:	false
SSDEEP:	192:RZhCHf9bU7ymwm4x6WsjvP+QYLvXEYZ3v:RZhCHFw7YmU6WsTePLJ
MD5:	D17D11ED9A001F2711FD8DB0747B3F55
SHA1:	3E844DE864E318DED2517BA4903B0BE90FC4FB87
SHA-256:	7673884B48BEE2E972FC23CF7C06AC6F6922323BBA32632C194DEA31D3596F4C
SHA-512:	BE98DA6EC1F1E5BA6E2CE8334F532B691195B44ED8E5A351D94B3F2D3F9C290A2F74E5627CC45B6E8F063BBBD5FDCEE1FAEAB0F1AD76053F5357C06A315317DE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5207647.1606506531!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..;m..gw.9U.jh`&.....9...K....7....l&`.2.......Q......+>g.5.m7....JWP...?l_.^<@a.t...QC.9...}M~j..u[8..}..a....W.......7.}.....^....&.B.w...:#....]..`.}(.=..E..1.H....%...w........k.N..j...Z...Z...6...A.. u..2n-...#.F..jud.O~z7.........xy..G..1.YR..i...J..S.iE=\l..._Ft.Va..y$....?..!..:`.MB.k...hw/......:.J...'.+...WV.#.9;.K.G...#.?.+.....O.....t+

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageY5N2OAFU.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	9427
Entropy (8bit):	7.9306367707237815
Encrypted:	false
SSDEEP:	192:3jccG/Mg50Bii7UFUuQluqYoe8DsLoguxp/ZjQ+rAT8nJS:3jh8b0oi7VuQwqM8DsLBmhk+rATqS
MD5:	07519BEF3CF385EAC6424603D12F6AA4
SHA1:	C87CE9226F3BE88FED176ED344C93AB8B9CE88BA
SHA-256:	3107A5FAC2DA585C6C92A8357096C6B75A3CBCFB2B5CB74642A87F02B78C210C
SHA-512:	09B635234AB99FDB84E159FDE81AC574D30E830126966D99F69D5A00F4FD7D5217A6ABE056B7F28F3FC86C3779F307B1ADDAC61AA01FDB375A261A2817131E1F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5314530.1615970210!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...[..@...jw,b<.W.Z.l......r..r}+.]`.N'....u<W.2dH..Z....o.pv...N+..........8...ynH....Nh.Q.&t...#...l,\|.0rI.\|....&.rw....)...n...I...-..l\|.._..)...FM.0.........p.+...^..#`6...,N2FOa...U..d...'.^[......+......?d..\|...._.>..~x...m..<S..,f..XV(4._+~.(n.L.....\|..a{i..3......x..........4.\|E..\|-..Z}7T.....V&..ZP.D[a...*I9..X..#..t.M......[[.t..TS.y.......;u

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageY9NBVE8X.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	7415
Entropy (8bit):	7.922100094815355
Encrypted:	false
SSDEEP:	192:3G7I0MzSQsHJW4HYmDyRE4sgy2UlLMPpd:3GMsQlnth8gd
MD5:	7EA40BB99C4B147CD12693A926BF7FA5
SHA1:	950DB537E5DCDCC733DE5126A5453B26A4090DC9
SHA-256:	093D4EB567473CB323F7B77ED1D9F8331BB3551A2917A22579738AFF2BA9E2D3
SHA-512:	B40C0941694E233203A2BF7CBDED58A925CEA66A901978C32AF3CA4461B30AFD6F1F8464DAF3CDA4E1444046C43CE102F61A6240C50443A06CCB3BF81528DBBE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5332014.1614792178!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......R..?ZJ...QNU..P4..)8.R.Y..T.B..c..lAd[.....5\D`z8l...g.f.W ..]%..#.QI.3[zn..:.....^...i.` %...}+.3......yVW.;.p.4.k:..\..+..."8.c..ck^....dE!..$c....^M.0.R...\|.gR..J.w?.<%.V.?...z..p..H#.....O.a......'..g.h..b].8..t..Gye......J...U.:.G.Q.d.z<..n..?3<A../.C..}[.....d.Np......2..e..1^.y..H.\|.O^W..._<%.i=../..{.<..1.>*.<.+2.FNO..{..).]0......9.[.....L.:.Wwm.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageYDIGUJJ1.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	43759
Entropy (8bit):	7.895411196830273
Encrypted:	false
SSDEEP:	768:LT/NXC9hNKnOWBLduqeIP5stvvj57dV8FhltGZqOPOmBPw618KtodnGlP4:LxeDWhgqOzhL8TltGZsm2VKtoX
MD5:	9298810C28D2390CA53161FD1A4F08A0
SHA1:	4D75A2B8400367EFF58361AB612AB89DAFE8F876
SHA-256:	53EF9872CC5EAFBDC12C38F3A489CFCB00514B0462C26053E58F308BEDFA0444
SHA-512:	1A9677801BF4C68FE732CE118B8F2B32363EB1A1E1AC8BF6436A52AB4AB03E59136182BF4620CEF66CC0B4A08AEC84268CA96E3E84E12A7F8243B9717BD85CAF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4588552.1568222675!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...?.(...(...(...(...(...(...(...(...(...(...(..W`.QES....(....QE6..E.Q...QOp.(...(...(...(.....;.(.E.h.......E.......p(...........E.(...(...(...8......(....QL..(..E.t..C.....)..(....E.T9Y.H.+}sU..{p..IMd.V......,. x............1k...3..;^.r..b.5..).u>....u.'i..%.?.oJ......5....c.\|.K......Q..(~..TI...1fB..Q...Z..K..K.q.s_<,./.v..YK.. .n:\|.g..+.....I.#nVe...,..c.V.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\imageZE93J0HX.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	132521
Entropy (8bit):	7.944398417995556
Encrypted:	false
SSDEEP:	3072:991MDKeN7o9McvGyc9r3LIx0DBqoDLaPrN8S2EiaY:h0NU9Mcep9r0xyBNaPR8SW9
MD5:	2082460377D734FD8B2D0AD0E90E9C13
SHA1:	4B2C04F30E341A718C6784A9DD1590EDB91D1D0A
SHA-256:	21C0F5443EAC15B03E613B1D703D803063CA088D8014C5EDD6A9A3A8177D9B94
SHA-512:	662FF84786F0DC44194812B7E3047B0C460F36E12AFD50ECA69C0C1BD3117FC372B7ADCE91CC74817ADD17AF700BFD472AC15AFE7989DFFB5E701987A5B2AD65
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5071086.1599144107!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.._SHuO..!tYR.....$..N03..U......C.O.-g......]..l4.l.ew....;vd.._FxN[]_........b..q.c......S=..,.D. A.k.u.LLf3. .^:W..:.5..F.WK........J....4....?..T..?.f.v.@.......{.xN.... .i.Q.....npH._g......C...a./..$ .sy(.m..!....5.......W...,...,..Go"...p....=.+g>L.7....8?~.Wu....5...p[)...`....[.\|.,..~.=.qke..P.o.....$c..i.%.....bE.1.....^....Q......"..E.<s.nO.....\..%L....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[10].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	170523
Entropy (8bit):	7.962354040812353
Encrypted:	false
SSDEEP:	3072:E92kORvbr0N3x7c94vvtVyWNbWNUjBmOD3XKdQonJ20jUZc2uECl4:EwbMc9AvrJNDjBmODnKdfnPjUZbu32
MD5:	D3A33582C56B8FF038670E00CD3FB510
SHA1:	B0EA2AE501A2B085FAA2EA30668DAD89AB748135
SHA-256:	2F0B6D1813801FF713ED6F9172EDE149ECA26E4FA785977A2E9AD38473183194
SHA-512:	1309F30BF546709293B52655CE7CD78FD572EA79406CA2E4BB5F5C49F59101D87696EAC97E3634945630EB05A67AD5D60A289A1637A9244E016D952FE306502E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5143574.1602619537!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......z~..i..Q.9I.J.N=R!.{t.Z.......\|?........'..e.1.}....[Bcg.M.b..9.=..^.H.s...s.W9$....n..i.q].'....3......Z\|1..h....3\|...g...b}...D.cs..F.g.....O..+.^.....sh..y1\|..y..~}..[..>V.u$....L....L.0.f'..Qr_._.x..V2.4...*..Pr....yl.<......v..!O..I=..PkEa$.!pO.0yR?.c...T..\..>..N.9..?...}..2...............\|..$\|.P.3..q...sZ.~.....]....V.x.-..e'.V.<.O..<p.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[10].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 150 x 84, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	31600
Entropy (8bit):	7.97801617670414
Encrypted:	false
SSDEEP:	768:m23BfN1PZQl+z5+Nc+UVQ3W7NHqvuoWgIPUwaqBF5RGsDaWs:vxfN1nz5+KVQ3WhHq2xXjNBzRa
MD5:	E3942C846DDAFB16C69F6CCFC4A459EB
SHA1:	7EB2DE6DCF42CD09E7B55807AAECBED2684B0D51
SHA-256:	3E25299B7F590A093E2430FFC836D9097EC49978E142E6ED50B4562D7ACEB657
SHA-512:	277520D4E34B647AD363703C1D2A3EE3341156CB1ACF79C53A48D0F0A738FF6F802F6CCD5287278F2F5701CD1CA24D6A1C8998D75DC016DA4FD2D99476427FCD
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352687.1616089119!/httpImage/image.png_gen/derivatives/landscape_150/image.png
Preview:	.PNG........IHDR.......T.....`!.]..{7IDATx..g{[Y....P.YU!...... .Z..........{.)R.(J...&2"2#.fFFfV.Lw...g....g.w.Y.(E.L...\...8.=k.}..bbb....Ftl.b......e.E..z0.{b....#eD..4...c....o...._Ft.......HD.Gd$.........c....x.....b.v.aa.#44.._.8BBB..e\....=^.GDd(..#.....6...4.u900.sQ..BqQ.J.S.+I..,..x\...!4..?7..CC...?.....`]~.....r../.....<...p..+.?......O>.>'`.O.G."...EJ2.....ej..x..e".IH......c.{.x\|RR"....3!?3...qHL.Gbb<..8...w..'">..q1.#VD....X........`I.".Ud8..;.+..2...I.....X?.P......8..$1B.Att8R.b.T6.J..\.f..0.2t..(+.Kn3.0$.o.O..8......\|.l........%.......`..%.........s.?.......'.q.VBb.R..LF..3......l.:.JJ.Q^^..=..k....6.t.....c...jPS[..SY.....NW.2].J.(...H-?O[X.B.... .9..dd.#-=...d.j..1>>..qqR.I..bA...t../.O..........X!B/.Cv..~....b..................Q".....Q_.....2>.....2...............tr..,...O..P]<...,...<.... X99Y(P.D.}y......X....]]...k......X....`.....K.........m..lA....-u...r..-*.2?../S..4..{..O.:I...KD8..K.....P>...."....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 45x45, frames 3
Category:	downloaded
Size (bytes):	2137
Entropy (8bit):	7.7008724938928825
Encrypted:	false
SSDEEP:	48:BLSuERACUOC72q9DCvMleKXaVcElkfcaeax7s883T:d1EPUpycCvMIMa+ElZae6s8aT
MD5:	BFC44EEE8306A737B0BE1EEB4E5E4EA9
SHA1:	9D675C8C0973892F4BD0AA1556DAC38ED81AD27A
SHA-256:	2239C8AB74DE1C53E5B41140EFDDF7BAB994C0AB539601DAED4323CF621E380A
SHA-512:	B67E8AD520F28A5B6F5904D4AC6234C1CC254AD88366CB1D6FAEE6D32EFA9BEBBC427EC22BB4A710AD7EB453E4CD04AC290F7A64CC7846441113CA64473AD52D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4703645.1591719133!/httpImage/image.jpg_gen/derivatives/box_45/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................-.-.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...c.0?.Ya..[............h.,.O@.$....:g=...v...y.f..>%\|G.o..C.2..i...imw.U..lR<<.<..J.....>....0.Icq..K.v?)./..e...,....]...:..s.....:>....k......%...B...vM..?.y..........xw...7.Ko..?..........\.w#.$.Y]..X.e.%Vb..{..X.k_..$.n<!.I.o.Y.V.(/<3c-..VI...Il....*...H.+./..m..v..?....._......m..v.....n..".pmXo.`.?.`.H#5.8....4.{.uo.?`.p..X9.M{..j.;...+...Vs.3...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 442 x 71, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5107
Entropy (8bit):	7.893076857546692
Encrypted:	false
SSDEEP:	96:NXZ//XqLU5Mz8JssrpvMKfHMRE25KU/as6Y5y2O08ZvtSHwqsmTE/7OnLo:NXZ/vqLU5usr7sbJyvrNmTECnM
MD5:	3F6F0644EAD89C7525181AA526791F5F
SHA1:	D32F3DF9BF66FA856EF53241DA130439E9198600
SHA-256:	B2009A11E8B2B8B896CA02BEC28B1AA19ED2DE1F3A66F67891274140136B8D85
SHA-512:	BEAD0B3760D8ABD9525E1584721EA404CCE3A1AA8BC628EB304547E12EBD2E06821AC99266E355098A22DD13C0BE2891D2FD6FCC9671E2106AADE262C675AB92
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4693935!/httpImage/image.png_gen/derivatives/default/image.png
Preview:	.PNG........IHDR.......G.....q.......IDATx...$G...O.pg...H...3& $....sw............0.... ..-.K.......-..}.........z........7.?.>.~\|_%I$.i..?K....I.(.........0[......v....y.o..I........Ec....V;Hm..f:......A/hU-dT..........B.....R/..x.J.<K.....o.....`......^.%................._..U2....Y.}.<.v...#....-.....bb1Y.c...mh.TSV...@....../K....<.{V&o...:11..$I...d.....ta@..K......}.......d.......o.s..u.9.].E...B..!....tu...2....X.X.s..7.^[.#.f.h<...Dwp.....#.\w..t.....n/K.....-.....3.......S%<)6.\\9....$w'...]....X..t..VZ....v.yIMHr.<s.Q..V.PMp....)AW.0og..M1v.."`,'Q.2...y....vm.../T...............l.}q.p..n.SL...U'0.a'....a...^N@....8.......+...).).CA....0. 7...y.....S.tb..+...y9.W_.V.?..o...W.M..r..^<z.G.N@....a.....RN......:.H=.9eu%@...MYV..u.W_...p,'.......]#7...\|..'.._.....X`..G.(..........tc.....L.........Y3..n...n....tr...(*.X....v+..M..v..su...7..ZyN.. .....+..........t...N............T..x.....Q.....n..U.u.t~...P.es?)*,..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[2].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x451, frames 3
Category:	downloaded
Size (bytes):	143010
Entropy (8bit):	7.952594326912523
Encrypted:	false
SSDEEP:	3072:nmCTATDA3OKGoD5oimOKt+vvcuiyY7twBDSTRo4rWL:nme48+Y5ontSvOtwBDwPr4
MD5:	1AEFFC27FE3EE6041FC68A024BB476BC
SHA1:	DBA329B6E00559BEAAB53704B7D327F6DE9975F8
SHA-256:	47BB9AC5037E0797FC0FF0920DB184FBA6509F6CEFE8E9C6B52549F171C3C6FE
SHA-512:	CD5A37986F57382C927C301F95A4D655B44D1DBAA14308AF45162D90F0CFBBE41E707D01461606D5EE0C2D7741A8072E3D36F1AD473F177EFB0D1CB4485D2DF0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5258189.1610062886!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.. .Yxb.2.rq....V.f7.99...3@P..i..s.......fq.O......tb....ORP....[........,.@.d0....\|.B..#....N.L..........R..m....).!FK...6.U..N.$..4...N.C.....O.I.\.N.x......2w.M...@'.^I.#,...NI.u...+& ....9..H?....Z..v.. r...{zWdZ8......!.?..3......I#..:..=..22...... ...@@;.Kq..U..9b..%.......W ....'.x..&.v..I..d...EC....g..T.^V:"..&..X6...8.QK...8`.<.p.'(....?.."...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[2].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 300 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	27356
Entropy (8bit):	7.978104999137632
Encrypted:	false
SSDEEP:	768:gJO1tJmSSXlllU8Cbhrkur6Ue3w1mwW5jUIwe6OIhNH9m1xTaac:OmSVbU8i6UpgAI76OGd8M
MD5:	AD5BD5E5D0E689A07A087D2784B4128B
SHA1:	9988B3F8D8ECFFF7950E657E3F003495DA022B5B
SHA-256:	26A3D4245BE21EE377C2985938A4BB84B588423F040259A0D9B4DC26442141C6
SHA-512:	CB844F3900B46BA38B0905E94F7B67BBED8235E3697AC61DEA28FC12CC57D45FB797665B0234BE69578FF4C965A73A219A7F8C0FD4DADED19AA2E01D77AE0A47
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4894106.1586801736!/httpImage/image.png_gen/derivatives/3x1_300/image.png
Preview:	.PNG........IHDR...,...0.......G!..j.IDATx..w\.W.......X...<..s.`.:.Q,Xi..>.......J.e,("D@j...I2.$.grg2.....<....Y.Zk.}...0s?.>..Y.s....o....,,\|....o&X.n...D......,....,..i....7...yY`.T....`...._.X...p9X.V.x)Z.X.W.EH...-..h.Z6P-[,.....B...~E8..2...)..h...}p.A..R1L....8m.!\....m...0Z.........0.98..........v....Z1.&-d.....G3.p....&,.Z.WH.....q8.R....<.fP..x...ba.r...f(n?...F......B...G.x.8.2:.q..........1^.Jq~..\........ar.P..'.i...Y....7.q...&...6^.m.q....n...n\.3.qz~..}..H.u.....J...Z%.S0>.!.l.......b..............=_R...'.b.q.Mm...V.......`...vi..rS+X.8...rk.ab.Ep@.Xp..-.c..)....e`.).X.....6.Zv......np.7..u....q..8d....n...,._q..O>...>Q."...z.:.....q.Kqx.11....N.~....K`..:..}.......AH.G0..6X.....v..x.m`.{..e....W...p...Y..\$.$..[..9.gp..# .`.7......n......0...0.W.4....2Z.49.#.Wg.Z...`. ..1..=....f.53.,.C..I`.B..U..J{..X....<.."i..!.Q.T>.dt....:.x......,....B..kC......j.....J._A:D.i>.*.k.....\.....i........<u_...'.+.f>^.^.?h.f.e.:.kT=...6

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[3].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	121568
Entropy (8bit):	7.963076999076092
Encrypted:	false
SSDEEP:	3072:s8xI1Vw3UeZm2M6CtNhBNsi6gnRYdXG2iTykHKoVJ:skIeU8q9BNHTnGXRgykq+J
MD5:	027C2817D38E1625D8DDE9232BC20231
SHA1:	C4B3642B38C978209E3F9F2BB310EE674640E254
SHA-256:	B72C928F89D2E27755B31A43F5FF0591F7807C350ED610745E0D4FD9A67E6EE5
SHA-512:	3180D07AD7ED9671A286FDE4D84D9C911B20E61837F39B1FE66408E0C13AD86CEBD9C09E40CD58DD43A1324C27D45939E063F45F95FFA1EFFFB4071171E6FD9E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352733.1616090976!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......UP..?.....;.Q....f{.)...>bGz.\|)..8......qV....I.........Z.,....9.....I.&.d.HfA.....otE[/..Mo...9..w..m....\|.Y.3.0.~bj....A.[...9'.[C>[x.URA...H#,..(U..O.h.,pNX..7....$.M.Sv......R..F..^M.../..>.}.e......wM.Y...q....S.......3.1..J..kB+p.I\.s..i.......dw..@.. rsV......9....)..A.,..X..9...Ny-.H......Tq.+9a...s..4q.?pt..kt...@.#.(.@$.a....Z...c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[3].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 800 x 449, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	997150
Entropy (8bit):	7.990530949361038
Encrypted:	true
SSDEEP:	24576:hPGn83TxsMhnf5TyX/aa95DBL3vqHqN8EwrAKO/vcaokktc:hsw9sMxflyd9TL3vqHqm8KO/vc/kkS
MD5:	E1F64F9C5DF7CA596F733D79085F1A69
SHA1:	2222CC68746B6EFA9C5EECA5C9CA2AE67B7E29DE
SHA-256:	035A1A7D7F8DA431740519309AF50680CF55B1011111CA7DDD2AD6CC00E1020F
SHA-512:	8CCFCC931364257FF785506B2D4566EA35B45B98BDBE163C0D8F863DE2612075D74118CC6D71E828A99C17140217860BA261DFEF45321DBD4B7B02BF48166D9D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5350970.1616001448!/httpImage/image.png_gen/derivatives/landscape_800/image.png
Preview:	.PNG........IHDR... ............f....IDATx..u\\Y..?.;.2;>;....t.;...nE..P..^.;.M.@....$....-..=D....~~.s.........R.n.{.y>...S?.l.).k.....r..O..?............D...~._..........x..U.`.!>Yn.9+.0o.......E....?..~.&~..7.......}.....=......O./..._.1...`)....~...}o!..\...>H..u..0t.6.....K....Fhf!LU>...@zI.....Z..}S;,Y..+t..Z..:...52..L....2GGXskjm..33,Z.._,]..K.../...K...={q..Ml.].[.G........0....c.......M0w......}.4ZO...g_.........kw.}.6...BNM..R.........?q..w......#..9..?..o0....~.-:..B..k..;...\(..afd.....U..t..Z.^G;.k.p.....n..a.....24.\]....g...t..&ccE.:._@..[......w.w...o>..'........{.=z.../.t...n..,....0..k.?x....W.`cM'\|.s.......L........lD^C....C..........h....z.../1..k......^..}>.M....]..H.....B........(l.i@.......:u...X...Pq.,.'....=..\|...7..o..mk@Z~9.B.ak..M....}.0z."&N_...s(.Y...(.....]..j..............9...>..#............Vrk(]..pq.....^.h..D...\=.ani.K^g'.....Aq.h?r.{........_...3...m...........i.T>.P.m.TY#(....Z.=.a.........R]],^...:k.x.J...[.Ie..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[4].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x449, frames 3
Category:	downloaded
Size (bytes):	159344
Entropy (8bit):	7.976876054496385
Encrypted:	false
SSDEEP:	3072:WrWhkLve8ltwq6o9Ok6LEcje7FG5DFheJrYU+ZGxiqOubxNATWG:WrWqmGtwqnVee7FGTglYU+6Oub/AL
MD5:	D63A578150BF33814F619A32A310870E
SHA1:	E9465E490C1CAC0ED06B129B01E43C50795DA278
SHA-256:	A0AE7A4255E5F68F5909A465D4B1C06822B792273F999A07A3D2FE812F5B08AA
SHA-512:	659D17F7B934DC75C24F5B360BB75FE8A6C706EB330102BA9F2D55DA386BC70119079EEDBB3D2F3F25BA1F99B852E6417F6E3E1591A81FA5C0EA75FF477B8E30
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352557.1616085216!/httpImage/image.jpeg_gen/derivatives/landscape_800/image.jpeg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..r.m$Vs2....c...]F)A..8.k.o.x&i.UH...8.k.-<,m..&...8,.@jaNq.....4}9..._...(%B..^>.....B.T.......F..5....Wt..g..{.'.B.L...t}:..i&..;Hwc.....=..4h....._(.4Z.n.....}....^.A...c...Vx\|<Q...iRm=.zn.y...]T.\|...#..B.2.G..Z..RKa< .....}B...B.X.N.ASR....8VWH...~ I..iY.g..k.a...o..d.A,..}..4r.Y]..[..\KKk.."..I.g{.T........%.....8.....W.;.....C.]-.Q.8UP.t5..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[4].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 150 x 84, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	35479
Entropy (8bit):	7.985032018316327
Encrypted:	false
SSDEEP:	768:A8Ei8s/GIixz+bccDQtuCu+RNa1fp6dfnnUArs:AXxpcDBV4E4fUT
MD5:	620C586F5D9FF83245F508E4E68706FB
SHA1:	679804919C48B3F19FFEDEB36F85E2432A35B705
SHA-256:	2AA65B5154076E52201EBDFF57D8D3CFEC525D1EBDC7989F320BD0B93FA0A229
SHA-512:	76EAF9B8FC026F698E1C6147C69F74F3542762DBD7145B5C0512579DEC635F33E5108D6CFD6EFBADC8D7F82F3EBC19830C43961D1CAA04FDDE6DEA668B281AAF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5207554.1606503333!/httpImage/image.png_gen/derivatives/landscape_150/image.png
Preview:	.PNG........IHDR.......T.....`!.]....IDATx.t.ux..../fff...e133Y.%..2.e.-.lY..2.L.4..M1.&M..m.>.s.:......\3;.Zm4.=.\|..Ga...../1...p.....o....H..}.........O.=.....?...z.7.x...<.k.?......>y..........:...0p.}4_z.._./....h:.6R.=...a(.$A.4.....?....c....$;.".Q.y...l....!bC}P\[...".U. . ...FHI.@nA...JQ...N.P.uU.nmBmW;..ZP.....z.ZF....4...#.1.u76.=..{.ax..,.=...G.\.al<z.....C'...4..>..s.phn.....k.1!t}....8z..........}...P;...z.2.%."6...!>...AJf&.ScQ...H./j.\|wN..r....N.<..;..a...8pf.G..`\|~.csS8\|n.'...t\|.4...s.,..Y.J..+..yf..'.o..5.=...=q..N....$....g.....]..Q...Kg..;vy.'....+..i.......}..}..s....C\|.1.:............\|.......WO......o..........[_>.....?..o..Dz..?.+.>......$xw.....<...~.....r.}.z.?8.?...;.8.*...B.6.@...2..%4um..d.d..`.F...........@YS.J...X.r+.....I../JCyC...2..e].l.Emg+..DMg.....~=:.G...hY...+7.}.(A:.-.N`.1. H.....\|.Q...M.&......>..3.7;..s...O.Eq...D.5.p../]...s<...;..>...3X3..h?..........#+.@%. 72.......FC^.vM....T.&....I..8...s...\...Y.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[5].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 637x358, frames 3
Category:	downloaded
Size (bytes):	122666
Entropy (8bit):	7.957552063770355
Encrypted:	false
SSDEEP:	3072:LjFIIRtuyY+i1rq4D3fXDpsj3Bi5yB3AxigNlcE1RN3EiErQln:aIRtuyY+AD3Nsj3IoQxiUBZUxrI
MD5:	C3E8F4EAAA97275A596F7AF7AC8F1682
SHA1:	5957B6FC76E8ACA054B65B2B8AF1B83CEA3ED022
SHA-256:	31CD424A6A164C5A30C129BF3AA1F70AF42B2D44B4A1B261714F5457926C1C80
SHA-512:	8369177C7DC132A47558E08E4399718B007FB062BD5581ED8EDDCFEE38B7A4EB97A146AB3BA0871C64999BAB05F2078A5D88B4AC2F17475CFFEE169E77E98174
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353441.1616114342!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................f.}.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...u....1{.I}.?.x.C....?....m.4..&..,JB.......W..>..].T.O..kG.l..[..g...e.fy...7. "bC.1....aW......\|?..]....i....Y.<71.$.!.&;Kp.W......y...Z...o.\|[..~)..si._.:.Q,of.o.u..v......\s.W.A5.n..{....".q...5.Mu.x3.g..{......wX.k....Uil-..C...3.*..].I...."...F....'.W..+.Y.i.x:..._E8.3........h...fk.4_.xb.!..5...j.I.5-A/d..$4W/.;..$..n.q^c...>...x../...O.Qu...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[5].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 135 x 76, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	25691
Entropy (8bit):	7.965587981560219
Encrypted:	false
SSDEEP:	768:W3VjtFEVjZjehsu/K6KfVl3i5HxCZHI1X:W3VjfOZeKr/fVl3itslY
MD5:	B6064F0AE2BD2C64269B8386B5BB4D06
SHA1:	8DDB86CAECCAD2200A8E3C1D6EA6944BB1E64FEC
SHA-256:	D8375F032B3A690CB472051BDBDEE852DD908EA931DFD64A4630800F12F5C360
SHA-512:	81B3F79A5D83B1958B4634F7223A9A040D0BB05A47A8D40AC1A6B5C3787D4531D8EFCE6E6505F44E1F47C10BC04F06CD6F1E666A6BF3BB08C7F2BA6845E348E9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5202582.1616073429!/httpImage/image.png_gen/derivatives/landscape_135/image.png
Preview:	.PNG........IHDR.......L.....G.}..d"IDATx...w\Y.....;.E...%..9B!.,4......%.b....b).1..U]U]U..vw.5.....a......d;..{.\|xV.B.{.....}....:.Z...u.....b6.j1{..2!.i.+....".n.Y...^.LF...D.+.N....@..:........MF~...Q.....{..q..Z.......N.wwc....m.p.........6~....Nx.......(..G..{.9..{.............f1..!...c\|.!.....q..7.f..m..,Jl..^.A..Q..._[..q_.B]..~......C.U...j...8...O.a!.3mV.. U T.h....o..Z.Mz.B.......0k.........!.>....S..vv..m\|7.... ....49.i...n..V...2.a..L.4`.D.ZSt.......f....b...=o";....{..,F..W.M............o.0..a..........\|.E..,18.....@...8.:.................@oO............115.....8&.g0...../.s3.....h.}..HLJ..`..!.'.).0I0$..4..0........%8...8..}N.x............?.p..p8.ph...+.T,.\w ^....._M.....~f9..Z.O.4..1...@....+...C1{5._.X.....H....`.....D.F........cA....V=..`@....0...yK/.J...X....+...@.z\|..."$.&wF.!..9.fe.}G....."&@.o..;...."11.e.E^..B.O....`[..[.0..~...........ub\.1=...a.1....f.yB.x...0FXF.0<;...3..z.8.=....".....*.......#.$......J..X..-,t.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[6].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	179218
Entropy (8bit):	7.9763240400778255
Encrypted:	false
SSDEEP:	3072:wdi7lAGfe9A6eZeV1GLncGrRSIUxVd0zbHTSTuxvSssfUvpvCnjDiU6S8dMvCKs:Y0TfeKP8oLncCmVuzbuTU1sUvCnjD36/
MD5:	805DD4C5BBC796BC163ECC24C23FDA85
SHA1:	60CC4E3B336B1642EF5366D0D8E9A44E8840DC8C
SHA-256:	FD0A3FDE8A746A03B44C138BD74AF19A7812DFA48FB108BB23D6C3EF71A230DE
SHA-512:	C465B2A27DABC2D5FEE309D7EE2FA497511776982E33294A7AFE80D147216FD37AFF7A1301E0F01B9F7CB227268401C1C41B7EECE9D04ABDB6C017C0885228C9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353148.1616105607!/httpImage/image.jpeg_gen/derivatives/landscape_800/image.jpeg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....d........~..aH>....I..+.O.5J....ns._.Dc..#.k.B....2Q..G....+=.......u...........7..i..a[...S..I9.h.=.s...O..R.I..dn.=y....c/...n.......V..\s..eFXrG....)4.#M..0.;.._..g.............o.?...<i..iW0...(..&........U..T.5b.?.7/...f.E....<.&..Im..=..S...O..y.i.<.=..m^...>-......i...]D..K....r....c .._;2.....7...iN2o.;.t.V~8[~....\|C...1x.T..[.]OT..[.E..%.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[6].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 53 x 34, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2857
Entropy (8bit):	7.90619174637659
Encrypted:	false
SSDEEP:	48:dDkWOUsOfuMe0rtsRSyscIQYHw/zMy6MaclYi9IG5gxbLeN2as5tSnglJFtOsnig:dwWAnMe06RS3cIBS/Lvi0IGOxby2asfb
MD5:	5414BC154DF71BF9C15C447CA6470D30
SHA1:	F3C209488970A50EC1D6E404D919A6CB3428D92B
SHA-256:	102E866EB3DA5862E9E83A7D623F7F2F9F260835F96A51C50132B0C0F4E6C46F
SHA-512:	22B2A34FC7210F17F3CC368146EA6279FA7BFBCF970339E12692D39D52DD06D837D14851458A02958B060A862F355C751D8BB75D47D89247EB19F5908B32A9A0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/7.726390!/httpImage/image.png
Preview:	.PNG........IHDR...5..."......5.S....IDATX...y.T.....^wO.t..#.8.2 ...a.e.D..:.eq.....D.0.I..Qc@...G.(. .x..YDT....".l3.L..3...?..l.EL...}..R.nU...3(...........8.K=j..{.b..........\.!.ew..&.....0.,.xH.,....rz>WR...U<..(...1.%l.U....k.B..P.3.H(jX.....f.s..B.g.p....[...vm(.r..S...PW.....@..... ....T......y..-...X.`W..\|f:1..c..;.B.6.6..o...`..F*..\vy3IG..A..<......9..{w..\|..<.....&.([1..H...^...aj..z..,..l.\|M........n.T4.lw.a;L(..V..[x..v."..BB.E..g..M}Z.8.+C.....n1....S.m.@....Y..{....@..k.....p.u....6X.....76...`o....#9....<.]...._...k.{..)..q..q,84/....{.-.YB..[.@.y;.......Z...m..i.R.-(.i.M.VI....F...mnP&(......;z.R.cj...g...s.].....f.6...\|..+.....T<J..`.......jTe%...S'.bE+?.wQ..`.VM.tG.X...0.Z.C../".+..i.G...[..././k./..U.Lw....'...L...(..u.."..F.........O.......Mp.l.....}...Z...e...[.\.h..x=.Ypx.F.....l..\|z...;.....M.fc..S.R.,7....Yw...L(.BFl..UE..!C.:w&.f..W_!...,l..C.v..j..K(...#PY/....^V.i...w.y....x....7m.m^.......v.M.vT...u...&...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[7].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	110670
Entropy (8bit):	7.9611002468223475
Encrypted:	false
SSDEEP:	3072:dAi1pwsIyv+WfOF7fmY2NY+BWOJL3cspJp:SiDwRyv4F7fmY2N33l
MD5:	EAD4CBFFAD3496FB1D88401F1DDE536D
SHA1:	6E29A0EEE51E1631C58152C75643B0B98D98E3FE
SHA-256:	C66A56BA5479CF53F8A8E6354F24EAF5661AD195F7CC6B1BA530CA90B0755421
SHA-512:	FBD3FCB4B33028EBED265886D5788A530A8613357E33076CD635AFD6F88CF8238D87B6772383A5236D3EFB77D307E1FAA353F91F5E89CB10AD2D41BB8524C4E7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5277349.1611277313!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..`B.Tl.;..Zq@....d.s...n(.".`...pq..5............h..hdq.G.p@.=.R....B....6(.)...A.1Z.F.....1.^)....D.o\r.O9\.O.......".?9.'..K... ...u5.o..o..n......$.kJ..=`l..k.ABH....j,.Q.`.....$8...rrON{U....pT.s.<.q..t.+..;J.T.2..t.D..............WV.tK6..5;.&.<....X.@.r.z..+......4KO.>.}M.....f'.D..I...Y.i.wa..]x.S..[.7o[lz..VL6Hn....GO..........Wd.6Q ......?.Yx..;O8..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[7].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 121 x 82, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7788
Entropy (8bit):	7.960353348931063
Encrypted:	false
SSDEEP:	192:CibORncDzBLypbgnXsbUNJZ0T7CF8ycFL4wbcTL9/e:CiA+zicncaq4wovFe
MD5:	03F511EFE0D71BE7BC27410A91E2C992
SHA1:	B08AFB7AAE2FE939675CF3B0F6FE2AD6D8E2FA95
SHA-256:	0A007A1381962A005C5D74B77FDE287BD82960343FAAD6C0FF39ECF7AFEF1F09
SHA-512:	111BDAC9279585768B9FD807CF238658CBF89D92ED41B16EFA0A17FA0CB925FC51D4F77E1F10F9A7466F4D7B242B8FD683A57717ADCE26D4288AD49A024A38A6
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/polopoly_fs/7.726186!/httpImage/image.png
Preview:	.PNG........IHDR...y...R.....p.{....3IDATx..y.T......gg`@vd.......EQ#..D.%....K.1./.3.%"..J..!.+.. "...((.....0.3.=..}...^......7y..\|.g..[U.N.sN.:m........z.%<mS\!p.0.8.....J..`..<..@.`y.P&....."h..d`..le[.Bx....b......-Q.-`..\;.@..,.7.~..WL.~.....``".[`....=x....%.N..\|)pn....M......../.4C..6..q..x..`.T..."..`!6........&8..D...s.It^.!@S.W..}/4W........m\|... QB.....>P....iJ\|.]....V1.?p?p..."..K.r..'g.(\|....G4..!.Su0..o.p.........dx..@N.....LN..H.7.#.#J.<o>].].x...).GF..!J._.:....^D.."..g.v...../....o...n...<....;q"Fi.&D...z..94>....Z.c...).6.~.W.....b.......+.{.h0ia.P...a(......SZ.O.....>.0 ..h".].y...74..=.....x.r..il...._.E...k...T~7.v...4w\|q+@......F..g....<..I>/%....n..:...+.\z)R_O.SO.8.>.k.3f.EO<A.yx........#v..s}y.e.x<P...\|(..(.~..F....P..K+.\|?....A4V......{..mn..M...Z2.K{^.@........y/}..r}._.......>R...>....1.n&..{,..&.\|.l..i@1@..L.L.#. . uW^I.....l....)..nr/......)S..f.....^....{..R^.Y...l..Q3.c(."Q.6....OF.Gt..j..Cgx\/{AB~.;FQ....9

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[8].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	229002
Entropy (8bit):	7.948484640325469
Encrypted:	false
SSDEEP:	6144:OWuSsXHR+dpuIl3CcDXuQ7nK5vBhQ9gODiyZCPVX:xuSsBWuKnDXu6no49PBy
MD5:	4748625CA2F253757E043FAF1A70F1FE
SHA1:	2CEB78CB3849255EC6049EBB7BAA23CEB18E41EF
SHA-256:	74004B04CA8106B67224A04B7A86D945D6D64DFFEACB6560D2D638C819B826AE
SHA-512:	5E164F7ECFE92D0F2157A3AC2F2C8D6485F55B5306C2E344AB1BAF526D65C9E7E2EA32988D55B28B16F7DE425EB8E3093E3DCC4237FBD6D636188BC77D455F52
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352915.1616098544!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...R.R.....7....Mpz.s.E...Y.....=+..].....9.....!. .c.^...iw..I..$.a.M.X.......R....9}....4mZ.S....?.,..H.~..=.W.\|a.S.t+i.1H].S...~u...~.E....i.....s..^o.j2k7...(..fG.cp.`.]j.L..'..).mNj.&...d}..eC...G...s$...8.S...?Z...i..Tx...u...?.k...Oqsk.I)B.y...8.._...U..^..1.Bm../.....\.\|."l..P<...<u..^..[.3Ky.4.e..8.y?.\|q.].k1..hDV...%....k....m....H....G=.*.sl

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[8].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 442 x 71, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5107
Entropy (8bit):	7.893076857546692
Encrypted:	false
SSDEEP:	96:NXZ//XqLU5Mz8JssrpvMKfHMRE25KU/as6Y5y2O08ZvtSHwqsmTE/7OnLo:NXZ/vqLU5usr7sbJyvrNmTECnM
MD5:	3F6F0644EAD89C7525181AA526791F5F
SHA1:	D32F3DF9BF66FA856EF53241DA130439E9198600
SHA-256:	B2009A11E8B2B8B896CA02BEC28B1AA19ED2DE1F3A66F67891274140136B8D85
SHA-512:	BEAD0B3760D8ABD9525E1584721EA404CCE3A1AA8BC628EB304547E12EBD2E06821AC99266E355098A22DD13C0BE2891D2FD6FCC9671E2106AADE262C675AB92
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4703529!/httpImage/image.png_gen/derivatives/default/image.png
Preview:	.PNG........IHDR.......G.....q.......IDATx...$G...O.pg...H...3& $....sw............0.... ..-.K.......-..}.........z........7.?.>.~\|_%I$.i..?K....I.(.........0[......v....y.o..I........Ec....V;Hm..f:......A/hU-dT..........B.....R/..x.J.<K.....o.....`......^.%................._..U2....Y.}.<.v...#....-.....bb1Y.c...mh.TSV...@....../K....<.{V&o...:11..$I...d.....ta@..K......}.......d.......o.s..u.9.].E...B..!....tu...2....X.X.s..7.^[.#.f.h<...Dwp.....#.\w..t.....n/K.....-.....3.......S%<)6.\\9....$w'...]....X..t..VZ....v.yIMHr.<s.Q..V.PMp....)AW.0og..M1v.."`,'Q.2...y....vm.../T...............l.}q.p..n.SL...U'0.a'....a...^N@....8.......+...).).CA....0. 7...y.....S.tb..+...y9.W_.V.?..o...W.M..r..^<z.G.N@....a.....RN......:.H=.9eu%@...MYV..u.W_...p,'.......]#7...\|..'.._.....X`..G.(..........tc.....L.........Y3..n...n....tr...(*.X....v+..M..v..su...7..ZyN.. .....+..........t...N............T..x.....Q.....n..U.u.t~...P.es?)*,..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[9].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	286874
Entropy (8bit):	7.9602264263989655
Encrypted:	false
SSDEEP:	6144:L1xS2TtlejO8F+COkEowpk+zSpRAnKj5ZMwxtg:BxS2ZlejO8F+BNowNzwMwxtg
MD5:	257749C8A1373F9674B85BC42648066D
SHA1:	4068EB2A13A6C83632263CC45D31F6DC86E26F1B
SHA-256:	19F6A76B91CCA8CFC25402E5CD0F315319CECF8C711590BC86155EF3AEAD2662
SHA-512:	C7E202C8152B0083C9C08C2E966B1878511F054A9177804DD84C665168EAD5186983DB6B4D5A51CA4E1C083507A27EC2AC74FD53E1ECC79726E307F1147B8920
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5350742.1615994448!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....g{..Zm.dk..=....k...S<...X..P<.QCnE.:.......f..k~!....7......z..%.%.L..Q..?...cx.jHT..Q..OM.u...C.x.\.F.ah...v.#..H....4J"..O.)q.w............Z...O~.?................o.b..9..'...P......V..RR.+v.S..9...~.!......Zx..Q.....t....m..T....U....... /......./..&..q...xC.VQX.~..,.>......kD..k....{D....`.9...._.....$...v...E.$O..w..u.}...yd..O+r...I.6.@,~[....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\image[9].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	156130
Entropy (8bit):	7.984231857954285
Encrypted:	false
SSDEEP:	3072:3vH5H0C9aIwD8LtAGRRk31jy0bvjRrFdk1YCKCk1odPUOswL4PhRcBJHxIai5hs:3uCAjALtAGRo77RDH4TswLKzcB1xIe
MD5:	AB5D89B9C2A954B799DD307D39BBB380
SHA1:	00834BB79451573C5FC528F010C24E34489FF3FB
SHA-256:	0F76F7E1B3CF552A35A643F7A7B3D20791E22FD577F690402BD2128FAEE010E2
SHA-512:	27F055C2DDEE80CA4533473B877D5A76C08AFE0E0CE86805B1321C609730A9BC92EC20830625D3E5AACB6F24AD12472B1AA914CB21FEACADA7BA8F53D0E606E8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4894318.1586807914!/httpImage/image.png_gen/derivatives/landscape_620/image.png
Preview:	.PNG........IHDR...,...,.....y}.u....IDATx...o\G..=$........z......w./,..@..@Q.....k.^g....3....-.-.!K.$..... H".@0GA.......>...P.}.(..>g.9..oUWu.B........P)<..[..fnW..X...G..iS.0..-........^1...m.5.S.m&...P..^...l&..a.V2.../...r..-..].....C.}...1.6..Y.x........I...........6.,.VT.V.V.B...a[y....Y......{U._...p..l..^V.9x.a..`..:.]g.I...U..>+\......&j_...c...\|Nu\|]..;...........j'...\|.J]q.>.58..p].........%.t...d%{......_......u.....y......t.9..l....%.cW..X..s.............5.T..T...q.g....T..`w.R...........{..O....;.1.;.~..W...<...........W.P)..........U.T.0\|....\.Xe...J_..J].JYp...>....>o..j......W...V...T....yRM...~...M..>p>.-t.V..p.K.yE....M..me.7..g...3..cY..v~l._W....V.-.A...f..n&....a..;.7Z.6g'.........m.q)_w.^.........[..+..?..q.:.........r....2T..p.p.6.X......`!.K.&....M... ...Z..L.h..f.j..7.....Pe..K.v:.<.....a....`.6....pJ..a.H..H.....f..d6X.!RE..Fm..X./.c.@T....x......@...U......A.........X....,.d...y._..p....!...`..+NB

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\iu3[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	248
Entropy (8bit):	5.01519467925752
Encrypted:	false
SSDEEP:	6:qzc6OqPbRKa1abIrCDYNOH0bfCYKV/RsOWP6ZTOoz:kc4wa1a0r+YkUbfCYKVk6ZTl
MD5:	6555E4F493DDA25F4A53D1B4DD2FE5F4
SHA1:	BF5B9696318C82E2BF8A6D2AA9411F0F08801B80
SHA-256:	FD30B3DB16E371C0534F43C7107A0A55C0F248E64855F49E887C2385264235F6
SHA-512:	6E2E20808275AAC5B4908E799DFE891243FE68774DCE1C456F4D33F1DF23F718C51E3FB42D61009AA0CBA80168DAC84B8AED1EDAF2D5C73957ABCAD6EEAA7BD1
Malicious:	false
Reputation:	low
Preview:	<html><body style="background-color:transparent">.<iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="//aax-eu.amazon-adsystem.com/s/v3/pr?exlist=n-smaato_dm_n-vmg_an-db5&fv=1.0&a=cm&cm3ppd=1"></iframe>.</body></html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\last-hour-countbox-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	314
Entropy (8bit):	5.2687045717844345
Encrypted:	false
SSDEEP:	6:WSVOXuLseqjDMRIQ6ZHKBf+c4j8VqSLTcbjATAS99ZnJQ7Rr8:WSVOXuCMR76ZwfCWLQbre3a8
MD5:	E033F16B0C0911DB127744516E28EB13
SHA1:	438BC46240EA558F119ACDF46FAE9B8018720300
SHA-256:	619CA91B4F0F691832C0F5EDF95DCC5B9AC772A48D225ED1617D82B5350DC001
SHA-512:	E98C977A5E7BA3D4D7543A0300475A7E736C651E80D522D1D3208C6D8A966878C7E9083D82BEA10E63238585314A705748CD131F992EE489FE79B748876DBC7A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/last-hour-countbox-7.690285
Preview:	#countbox {text-align: center;font-family: "Flama-Medium",arial,sans-serif; font-size:39px; font-weight: bold; padding-top: 28px; background: url("http://www.ctvnews.ca/polopoly_fs/7.690284!/httpImage/image.png?asfdwqer654654asdfsdf23423") no-repeat 0 0 scroll transparent; width: 300px; height:110px}.........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\logo-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	216
Entropy (8bit):	5.088541672055081
Encrypted:	false
SSDEEP:	6:ULgAr5CBRLj8VqSLZNl5AAykMeWFoDd3HUcZu/qqEadFVz:HAr5YWL7fVDd30cZuTEaN
MD5:	BD5214B6D8F13E012BD3D280CB82AF64
SHA1:	09AE5778E9C68354EEFFB9983AD45927D8B6ACE4
SHA-256:	07313341F36C51E2484E3F1127149FEF0CF5C3CC43099FB885EDF3D4C920D66F
SHA-512:	F6AD6CE51EE421879C0D464F12D281BFDC1A5D6AC974CBB21AB73289F8375F2423E0D44083B42E5A7F9B0D9C8B519D495D418CFE9089C9B4D1A82BCAA50F89CD
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/logo-7.726372
Preview:	a.logo_ctvnews {.. background-image: url("https://www.ctvnews.ca/polopoly_fs/7.726371!/httpImage/image.png");.. width: 157.5px;.. height: 77px;.. }../..a..search.element form {.. width: 163px;.. }../...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\mab[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\membership[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	17000
Entropy (8bit):	5.4282514056092905
Encrypted:	false
SSDEEP:	192:aiZrVRotdtIP8AgED2c9iOVkk3QiF7l2lyfIM1oicXULqK/WtLSfecjyYnlio4l9:Ztfo3CGIbAmpKUx/WtLSfbjoyo0b0l
MD5:	636C5FBB96C5D5C9CEF21E43322D8502
SHA1:	6BB1B9B6ED9E1F4D0B5944F81D5A04D9B2BBEF05
SHA-256:	1AB0E585F888CC3059A57981F8BD7394EBF4D221A10D17046B51A8C49E89F1B1
SHA-512:	B40AB2CB1ED58E67BE900AD313147295E7A0F4497BE1497E5381ADA379407BC1C6CDB24F3AC40B73A7A3023F84646D3A0A5BD7306A40F62479462212B49EE8C8
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/membership.js
Preview:	if(polopoly){throw ("Initialized twice");}var polopoly={};polopoly.service={};polopoly.user={init:function(){polopoly.user.data=polopoly.user._initCookie("cata");polopoly.user.sessionData=polopoly.user._initCookie("data");},_initCookie:function(cookie){var ud=polopoly.cookie.get(cookie);if(!ud){return;}var data=polopoly.base64.stringDecode(ud);if(!data){return;}try{var json=polopoly.json.parse(data);}catch(e){return;}return json;},getServiceSettings:function(serviceDefinitionId,serviceInstanceId){if(!polopoly.user.data\|\|!polopoly.user.data[serviceDefinitionId]){return;}return polopoly.user.data[serviceDefinitionId][serviceInstanceId];},setServiceSettings:function(serviceDefinitionId,serviceInstanceId,instanceData){if(!polopoly.user.data){polopoly.user.data={};}if(!polopoly.user.data[serviceDefinitionId]){polopoly.user.data[serviceDefinitionId]={};}polopoly.user.data[serviceDefinitionId][serviceInstanceId]=instanceData;polopoly.user._persistDataInCookie();},getSessionServiceSettings:fun

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\news-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	3340
Entropy (8bit):	5.10644919372109
Encrypted:	false
SSDEEP:	96:RJoGSJlfxt7oaJetKFrdJtzFhVjq/rKf7ncoJx:RJZSJlfrfJyKBdJxFhVOHoJx
MD5:	7F39D439F508E859C0CC5BF380ED9145
SHA1:	C0DA8EDEC6E0DAB95C6052F5A1F59F5F191A946A
SHA-256:	9A88992079CFBFC618CD947BB82D6B3713E25C2FDE095CC43503ADC379F353DC
SHA-512:	436E39E34BCF79A7F527304EE2A45F6D6C627D48ECDB246BE1AEE6C711CA4B777F9DF6143730D6FDC0FE8428D46A4F1F9D4A81E52B1B8139683FCBEB0FE4CD5D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/news-7.291979
Preview:	/* CTV News Specific Styles /.....flaherty .topStoryPromo .teaser .teaserTitle a {font-size: 0.7em}.....aeorplan-right .boxAd {margin-top: 6px}.....weathergraphic img {width: 70px}.....twoColumns .col1 .linklist .sponsored, .content-footer .linklist .sponsored {position: static; display: inline; color: #000}...twoColumns .col1 .linklist .dc .sponsored {display: block; position: absolute}......@media screen and (-webkit-min-device-pixel-ratio: 0) {.. .sidebar .ad-story .linklist li.dc .teaserTitle, .sidebar .ad-story .linklist li.dc .teaserTitle a {margin-top: 15px; display:inline-block; line-height: 1.3}..}..../ google plus overlay video player problem /..table.gc-bubbleDefault{background-color:white!important;}....../ Countdown Clock */.....countdown {background: url(https://knlive.ctvnews.ca/polopoly_fs/7.454763!/httpImage/image.jpg) no-repeat 0 0 scroll transparent; width: 300px; height: 58px}...countdown #countbox {color: #616c75; font-size: 24px; font-weight: bold; margin

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\omnitureTVE[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	5594
Entropy (8bit):	5.220543489023481
Encrypted:	false
SSDEEP:	96:wf2HabWX0A7KIWzDYEgfV2AjUYnnfhxQ17myB7S14TUt29UR:wf2HabWX0m4GIKUYnfI1CyBm1iUt29UR
MD5:	06B1F9E389D283253ADD4D226E6471C9
SHA1:	6BCD77EB411CAC322568574728E70431ACF39C84
SHA-256:	2E4B35BDD84D850D127B50F969E79A576EC0A8E68C3E98A7B8856F61813050FF
SHA-512:	8BFFF3942813D1806E56AF0993CC960CFCECD496EB2959A1EF2E2CA0D8480E23A0FE06FC47F519DCE3A3D6350F9613A3CB9919491C873735B1C6A2D273DBD97B
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/omnitureTVE.js
Preview:	function setupOmnitureTracking(omnitureAccount,omniturePrefix,omnitureCategory,sectionName,pageType,mode,siteName,isCP24Tracking,isElectionHub,isDebugMode,isErrorPage,globalSuite){Tracking.setGlobalSuite(globalSuite);var pathname=window.location.pathname;var pagename=omniturePrefix;var subsections=[null,null,null];var isMobileMode=false;if("mobile"==mode){isMobileMode=true;pagename+=":"+mode;}pagename+=":"+siteName;Tracking.setValue(69,siteName.toLowerCase());if(pathname.length>0&&pathname.indexOf("cmlink")===-1){if(isMobileMode){pathname=pathname.replace("mobile/","");}if(pathname.indexOf("search-results")>0){pathname="/search-results";}if(siteName.length>0){pathname=pathname.replace("/"+siteName.toLowerCase()+"/","/");}pathname=pathname.replace(/\//g,":");if(pathname.length===1){pathname="";}if(pageType==="home"){pagename+=pathname;pagename+=":"+pageType;}else{var index=pathname.lastIndexOf(":");if(index>0){pagename+=pathname.substr(0,index);if(pageType!==""&&pagename.substr(-1)!==":

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	243694
Entropy (8bit):	4.908151584063988
Encrypted:	false
SSDEEP:	1536:DvNvWv6OPmcfcvWPGemsZNMSE+Pt7WdkHCjvcPXPF4VuVOOCaS9OeXf8ALqseM6W:D1+SF0fN4VuVO3+kmKJ6TRNGacdTEs
MD5:	EBAEF3C5F5E97C3B301E7D5F3B470CBF
SHA1:	238025A6D1EF464E3E89DA52088C57DD4997EFCE
SHA-256:	D83457A302147209C73472AD454B37188BA5CA3D6922111FB76B1A4984670033
SHA-512:	D4AFA391F91D607E946AEDFE91B857DEB3CFEA103C8A670532452CA1B529F146E21ACEB32CA0ABB8A3028D376C3B8336827DF479DE3D9572D4A935C1232FA6F2
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784
Preview:	<!DOCTYPE html>.<html lang="en" xmlns:og="http://ogp.me/ns#" xmlns:fb="https://www.facebook.com/2008/fbml" >.<head>.<meta http-equiv="content-type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="text/html, charset=UTF-8, IE=edge, chrome=1">....<link rel="canonical" href="https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784" />.......<script type="text/javascript">.var videoPageUrl = "https://toronto.ctvnews.ca/video";.</script>.<script type="text/javascript" src="https://static.ctvnews.ca/bellmedia/common/js/jquery-1.7.js"></script>.<script type="text/javascript" src="https://static.ctvnews.ca/bellmedia/common/js/jquery.cookie.js"></script>.<script type="text/javascript" src="https://static.ctvnews.ca/bellmedia/common/js/requireDependency.js"></script>.<script type="text/javascript">. var kruxID = "ImoeZsch";.</script>. END Krux Controltag -->....<style>...@font-face {f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\optout_check[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	82
Entropy (8bit):	4.956407455964654
Encrypted:	false
SSDEEP:	3:DLMNNNB3mXHWiBdVJX/YcHfH+FuH1M:8NYDBdVBAcHfZm
MD5:	6A2B99D5F18BFF33AC253C2B4558FC32
SHA1:	74FD84C5E92E3527CF029C60AD9886C3ED7DAB59
SHA-256:	CBCCDED655DB5E0A42239FB8DAFD699D35DE3A81EDF9993467CEBED65A833371
SHA-512:	9C8364AB9ABF0BB2E4EDCFCC7A44FCF1116DFC65499EFB3B4708DDAC8FFF6751DC25289081D6716612B00B893F3AA3A0DC599250F82F4CF2C940AF0D7F8EFCEE
Malicious:	false
Reputation:	low
IE Cache URL:	https://beacon.krxd.net/optout_check?callback=Krux.ns.bellmedia.kxjsonp_optOutCheck
Preview:	Krux.ns.bellmedia.kxjsonp_optOutCheck({"status":200,"body":{"_kuid_":"OAo8OofK"}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\overlay[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	109
Entropy (8bit):	5.027859773152774
Encrypted:	false
SSDEEP:	3:yionv//thPlE+tnMmqRthwkBDsTBZtqAkxxPluJtH1p:6v/lhPfZMmWnDspxnhp
MD5:	1FFD3F2F0544F86B78C9B44548DBB3D5
SHA1:	914D4A2D310881472D9AEC063AF9BC32A340A5EA
SHA-256:	80A5C5719D465827285BC7AF904594F04DDFC1186CEF8A08A822DD643B9BB5DC
SHA-512:	5D652B4E55564A3BA8570070C0B0C22AD92F2410178911975142B1AD58CC2B287D6EA184210D548BD61CA43042A620C5675BBBF73A19C99B0B1EA20E9E923A22
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/overlay.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b```...`............IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\p[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\pixel[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\player-style-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	959
Entropy (8bit):	4.981342734130965
Encrypted:	false
SSDEEP:	24:xo7QrG3XFCrMnehJ/oqOB/WZln+r8u2oQ:27QKO//qhSV+O
MD5:	FE78E46F2F7B8876366329FA75191E2D
SHA1:	7CBB384339BD1FD1E5BD62D213205B93F41942BB
SHA-256:	3A1FBC571816CFA07266954B19EAF5FABC5A10878FAB8CC91CA8D60C4EA85A1F
SHA-512:	3FB1AD36C57717DF57D93FA8099B7CE1488B77625B52484B833A9465D1FD17AEC0627779B9E37BA98660A9ECC669275F5696D1F6684B6BCBEC79E6AF5E3BCA95
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/player-style-7.363763
Preview:	.leadership-group .shows-player {width: 620px}.....leadership-group .playa-playa {float: none}...leadership-group .listing-box {margin-left: 0; width: 620px; background: none}...leadership-group .playa-list {height: auto; overflow: visible; margin-bottom: 10px; border-bottom: 3px double #CDCDCD; padding-bottom: 10px}...full-wrap .playa-items {float: left; width: 180px;margin-right: 20px}...full-wrap .playa-items:first-child {margin-left: 20px}...full-wrap .playa-items:last-child {margin-right: 0}...leadership-group .playa-items h2 {font-size: 14px; line-height: 1.2; text-align: center}...leadership-group .playa-items h2 a {line-height: 1.2}...leadership-group .playa-items p {font-size: 0.75em; margin-left: 10px}..../* google plus overlay video player problem */..table.gc-bubbleDefault{background-color:white!important;}......div.vjs-current-time-display, div.vjs-time-divider span, div.vjs-duration-display {line-height: 50px!important}.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\qANoY7mBzs8[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	511267
Entropy (8bit):	5.408417649987759
Encrypted:	false
SSDEEP:	6144:/uWbMPGRwPtAxiNg3rlGw/QExWydVb1hPGMZafF/f/x25c7vLtr:2WHRxiJUQExWyj4x7vLtr
MD5:	0C5D4DE86FDC0508C68732E870538EE1
SHA1:	35894C93AA2B2BD94BB6B2C82F3A1CD1409D2686
SHA-256:	CFF34D498B5C10D674FEDB3712AAD669B751783C4BEE65DA6A0B600E82A680BB
SHA-512:	6B96CEFD7B900C47D7175A5DE74D9F07CB8887E97A13D1D42EDE32CFF6663B293108FDE5D0C36939713BA341C7CAE09229A8B1D6F5B105CA7FB6E74741BC59C8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.facebook.com/rsrc.php/v3iEpO4/y2/l/en_US/qANoY7mBzs8.js?_nc_x=Ij3Wp8lg5Kz
Preview:	if (self.CavalryLogger) { CavalryLogger.start_js(["Z3urS1k"]); }..Array.from\|\|(Array.from=function(a){if(a==null)throw new TypeError("Object is null or undefined");var b=arguments[1],c=arguments[2],d=this,e=Object(a),f=typeof Symbol==="function"?typeof Symbol==="function"?Symbol.iterator:"@@iterator":"@@iterator",g=typeof b==="function",h=typeof e[f]==="function",i=0,j,k;if(h){j=typeof d==="function"?new d():[];var l=e[f](),m;while(!(m=l.next()).done)k=m.value,g&&(k=b.call(c,k,i)),j[i]=k,i+=1;j.length=i;return j}var n=e.length;(isNaN(n)\|\|n<0)&&(n=0);j=typeof d==="function"?new d(n):new Array(n);while(i<n)k=e[i],g&&(k=b.call(c,k,i)),j[i]=k,i+=1;j.length=i;return j});.Array.isArray\|\|(Array.isArray=function(a){return Object.prototype.toString.call(a)=="[object Array]"});.(function(){var a=Object.prototype.toString,b=Object("a"),c=b[0]!="a";function d(a){a=+a;a!==a?a=0:a!==0&&a!==1/0&&a!==-(1/0)&&(a=(a>0\|\|-1)*Math.floor(Math.abs(a)));return a}Array.prototype.map\|\|(Array.prototype.map=funct

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\rebrand-affiliate[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1049
Entropy (8bit):	4.993119295557996
Encrypted:	false
SSDEEP:	24:0+F28qjpo2/X/X4CzvZzPBonRFfdvXRFfdo0RFfdo5XRFfK:9I8qjpo2f/XjzvZrBYRFfdvXRFfdPRFp
MD5:	D529ABDB162325DF787A622AA31EB2FE
SHA1:	EBD6D711FE5FD5A268B797CB64056B21E61CFFD9
SHA-256:	90C9200C0750DD1A89ED32616C9F09CE27DE2E62559F6D8F619B53E96255E75E
SHA-512:	159A5823267AF0B6E58CA6EB5D4E33BD14F27C1DF2BCA2A9581DA7109755389231A0D0B6007A9BE90B7020E6A5D6FBE4321EADD4A5044442D1D01D754C3007BB
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/css/rebrand-affiliate.css
Preview:	.mainnavigation_wrapper{border-top:0}.micronav .list.element{padding-bottom:5px}.banner .micronav ul.linklist li{padding:.4em}.banner .search{margin-top:75px;margin-bottom:1.4em;margin-right:1em}.liveSched .vidLock{background:url("../img/lock-icon.png") no-repeat scroll 0 0 rgba(0,0,0,0);margin-top:-2px}.banner .search.element input.submit{background:url("../img/search-button.png") no-repeat scroll 0 0 transparent;width:22px;height:19px;margin-top:5px}.banner .search.element input[type="text"]{border:0;background:none transparent;color:#FFF;font-size:.7em;margin-left:0}.banner .search.element form,.search.element .no-search form{border-radius:9px;border:1px solid #0374ce}.banner .search.element input::-webkit-input-placeholder{color:rgba(255,255,255,1)}.banner .search.element input{color:#FFF}input::-moz-placeholder{color:rgba(255,255,255,1)}.banner .search.element input:-moz-placeholder{color:rgba(255,255,255,1)}.banner .search.element input:-ms-input-placeholder{color:rgba(255,255,25

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\responsive-override-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	4.7933853840100715
Encrypted:	false
SSDEEP:	3:NxSCJgXXgkZTfuFl62Vx6IUARCR8kWACJgXXgkZTfsVyC3n:GlgrfViARCBBlgn3n
MD5:	A77A25AE95B35C6575FDAE2D3C364139
SHA1:	67CD6DD46CB20319812EA6F288AF505608A86DAD
SHA-256:	42F5DD5CF8D92B493A558DAF75CF1D146F1C3FA298785DC81F2A608B07E81ABA
SHA-512:	86252945EFD15ECF99FFF4803AD4AFC6206E7F8FBB88B0DFA44012709DCAFAADD3913ECD862809A7FD91CCA298CD8AD8DE8A8EE3455949EC9918E3553E178192
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/responsive-override-7.726278
Preview:	.specialArticle .articleBody li {margin-left: 120px}..@media screen and (max-width: 768px) {.. .specialArticle .articleBody li {margin-left: 35px}..}.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\rx_lidar[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	120082
Entropy (8bit):	5.330409293522434
Encrypted:	false
SSDEEP:	3072:6Ai02gg1tYfvS45jSqUtyGQuX3N+NmuZu:12x4dPGyGQuX38UuZu
MD5:	770FD2A1623A64D88DD04AED6F28A72D
SHA1:	FEDC31F20A0840E44286FE7ADDB4C7DF8F4A23E9
SHA-256:	941C260356B6AA75782A27384179A63581C9E41B42155774982F36B0D84CDE9C
SHA-512:	A235D9AC3F9292894612CD6FC280A18ECE2789A4DBF7FED0B0E8148465647D07D757F154C31199AF2BE6B73871C4245E968F0A3711BD522203DBDAEAE59AC2C8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagservices.com/activeview/js/current/rx_lidar.js?cache=r20110914
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),q=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.q("Symbol",function(a){if(a)return a;var b=function(e,f){this.vd=e;ba(this,"description",{configurable:!0,writable:!0,value:f})};b.prototype.toString=function(){return this.vd};var c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\sean-davidson-1[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	95698
Entropy (8bit):	4.406801196252871
Encrypted:	false
SSDEEP:	1536:cvNvWv6urj62kCZAMYFsf5Rv9+DyQ8kAkC/PpPg4Vu5dm/ZQVcARZboPhwn62xCS:c1+Sd8kyRI4Vu5rVcdhu
MD5:	38808B9C5FD8044E9F8B7539A5792CE9
SHA1:	21439A06755021681AA53D751C9D948E7C174256
SHA-256:	D8D4C400542F56442D408715EEEDCB5A8360B5AD30A9804E3431BF085EC3E7F3
SHA-512:	B4854F36B8DD3E4AA8F49C4C1A733CEDCDAE41DC709C7FC671074D32664CAE566C472A55613222499A13BC00F8593989B0476BEB0724A6F3EF6B3A389AAF777A
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/more/bios/sean-davidson-1.4670847
Preview:	<!DOCTYPE html>.<html lang="en" xmlns:og="http://ogp.me/ns#" xmlns:fb="https://www.facebook.com/2008/fbml" >.<head>.<meta http-equiv="content-type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="text/html, charset=UTF-8, IE=edge, chrome=1">....<link rel="canonical" href="https://toronto.ctvnews.ca/more/bios/sean-davidson-1.4670847" />.......<script type="text/javascript">.var videoPageUrl = "https://toronto.ctvnews.ca/video";.</script>.<script type="text/javascript" src="https://static.ctvnews.ca/bellmedia/common/js/jquery-1.7.js"></script>.<script type="text/javascript" src="https://static.ctvnews.ca/bellmedia/common/js/jquery.cookie.js"></script>.<script type="text/javascript" src="https://static.ctvnews.ca/bellmedia/common/js/requireDependency.js"></script>.<script type="text/javascript">. var kruxID = "ImoeZsch";.</script>. END Krux Controltag -->..<meta name="viewport" content="width=1024" />..<style>...@font-face {font-family: 'Flama-Medi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\site.min.44a1783be8e88dc73188908af6c38c01[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	188
Entropy (8bit):	4.6564031168155084
Encrypted:	false
SSDEEP:	3:Gh2EXz9jQ6LeBMvLAEoCxCxY5MwLeX4dLGl0NDSn:U2+5s6LTjAnyMwLx1Wn
MD5:	44A1783BE8E88DC73188908AF6C38C01
SHA1:	F2C0BB7B28B52DA504B5C7106AFEA2C49DE5F279
SHA-256:	12823BFA48756385CE7D06C9D3C673ECCA7320B3C422180A1196E1FD186DC339
SHA-512:	2B7C31A5AFDDFD8601EB1495C4AB99A64042FF994EC8AB24AA1B5DC36720C547908C1C8079487DAE7E37451B8F6FBC8A1DAB9E03144F819C82352FC49C69235B
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/core/wcm/components/accordion/v1/accordion/clientlibs/site.min.44a1783be8e88dc73188908af6c38c01.css
Preview:	.cmp-accordion__header{margin:0}..cmp-accordion__button{display:block;width:100%;text-align:left}..cmp-accordion__panel--hidden{display:none}..cmp-accordion__panel--expanded{display:block}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\site.min.b104a4a85c21511ada13e2c6e7552d37[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.1852301329094015
Encrypted:	false
SSDEEP:	3:9mIECLnNmn:3m
MD5:	B104A4A85C21511ADA13E2C6E7552D37
SHA1:	475C6EB572D41F86D612EF9D8D64C2CD9AE95980
SHA-256:	34A8D4F240F1B7A01D0472D5367E1BC57E17F70A12A91AAE37DCAC3B33B24732
SHA-512:	A619FC2EDFEDF9EBC77B7D5F733780F7440E366E8EBEB5F6AB6C0BC59DB7014CE9250E83DDCAF7C9DFE1C6788819574F8585D411C4E4785477A55BA2CD3F320E
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/core/wcm/components/image/v2/image/clientlibs/site.min.b104a4a85c21511ada13e2c6e7552d37.css
Preview:	.cmp-image__image{width:100%}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\sodar2[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	17576
Entropy (8bit):	5.323822055197575
Encrypted:	false
SSDEEP:	384:Ub6e6ylBfiX9H8ycdSy5W1ThtIjzM9BERDQ:MflkX9Hzcb5WfWjz+BuQ
MD5:	3BF08686ED5CEB6BBEA916BF3CF6CD1C
SHA1:	9348DCECD9003A58AFA9F208698A845924FD0647
SHA-256:	D9CEBB89ED3E16A74386F743F3FC12FE98CB4FC5C11F03AF5FEBDF1141CA6A39
SHA-512:	B1C5F4E088E3D4ADB1D600C50A330F0FE9E4C3BBE509C1CA020A09F2063F2A91B2DBBDCAA7D062D8F3BDF2D1E7093CA561D6B688F612F047E5007DE2C3308B56
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function ba(a){var b="undefined"!=typeof m.Symbol&&p(m.Symbol,"iterator")&&a[p(m.Symbol,"iterator")];return b?b.call(a):{next:aa(a)}}var ca="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},q="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=da(this),t="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),m={},v={};function p(a,b){var d=v[b];if(null==d)return a[b];d

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\swfobject-2.2[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	10206
Entropy (8bit):	5.489061061168631
Encrypted:	false
SSDEEP:	192:vBsWGAZvwGxPIqNWwP4H/O/+xrWF1hRt3jZgympVyrs7uk0/dOJ4/yrytF+NCQN/:JsWGAZvwGxPIqNWwP4H/O/+xrW3hRhjw
MD5:	F89D81009ED7B402AE965461040BEDDA
SHA1:	385183D57D8A257CFEA099F82553D6B4DDAF7055
SHA-256:	6C74C19B1FEA2603750C1C49546A4FE461F85A50EE728D09E8A8576F140FB419
SHA-512:	22158AA8B2ABC076737009D4DA3F178C5CD158C04C681344E4D0864A5887DD022CBC14EACEB5DBF08714379EBF3B7FBEF2E756074B9B1F02A9BE3083F5596AAD
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/swfobject-2.2.js
Preview:	var swfobject=function(){var D="undefined",r="object",S="Shockwave Flash",W="ShockwaveFlash.ShockwaveFlash",q="application/x-shockwave-flash",R="SWFObjectExprInst",x="onreadystatechange",O=window,j=document,t=navigator,T=false,U=[h],o=[],N=[],I=[],l,Q,E,B,J=false,a=false,n,G,m=true,M=function(){var aa=typeof j.getElementById!=D&&typeof j.getElementsByTagName!=D&&typeof j.createElement!=D,ah=t.userAgent.toLowerCase(),Y=t.platform.toLowerCase(),ae=Y?/win/.test(Y):/win/.test(ah),ac=Y?/mac/.test(Y):/mac/.test(ah),af=/webkit/.test(ah)?parseFloat(ah.replace(/^.webkit\/(\d+(\.\d+)?).$/,"$1")):false,X=!+"\v1",ag=[0,0,0],ab=null;if(typeof t.plugins!=D&&typeof t.plugins[S]==r){ab=t.plugins[S].description;if(ab&&!(typeof t.mimeTypes!=D&&t.mimeTypes[q]&&!t.mimeTypes[q].enabledPlugin)){T=true;X=false;ab=ab.replace(/^.\s+(\S+\s+\S+$)/,"$1");ag[0]=parseInt(ab.replace(/^(.)\..$/,"$1"),10);ag[1]=parseInt(ab.replace(/^.\.(.)\s.$/,"$1"),10);ag[2]=/[a-zA-Z]/.test(ab)?parseInt(ab.replace(/^.*[a-zA-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\tag-hide-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1199
Entropy (8bit):	4.897868893771985
Encrypted:	false
SSDEEP:	12:aPDTTIPFdm5IDIguHISbmOPAcFdtKPFQC7FTtFdpFdSif+1XFd3Ixt5NARAKxjFF:a3MnhHC9tKGwJ9E13IFOAKx2S4gyWAxC
MD5:	E10368BF38035DAA8BC516E9A00EF551
SHA1:	7F70A4E6D3F9E861D7C8B23787A60E3B155F6B53
SHA-256:	F5F634D4AB505DE450813B558F2E3E057EF03D180DB9C3EDC32F1B78A8B35158
SHA-512:	559B2B0AA6F1F4D47EBE8858D0FCAB4853D93448D996238526AF16266414039B847786305960FF8B18695348DBD304088E03EA203F725ADCCC4A916E1F265C61
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/tag-hide-7.741408
Preview:	/span.tag {.. display: none !important;.. }../...element.list .linklist li.dc.teaserLink .tag {bottom:unset;margin-top:-35px}...background-line {background:#fff;}...responsive .pager-cta {background:#fff;}..ul.slick-dots {background:#fff;}...shows-player.election-height {min-height:450px;}...element.list .linklist li .tag.eHub-tag {display:block;margin-top:-35px;}...element.list.li-divider .linklist li .tag {margin-top:-30px;}...element.list.topStoryPromo .linklist li.dc.teaserLink .tag.eHub-tag {display:block;margin-top:-34px;}...element.list .linklist li.dc.teaserLink .tag {margin-top:-34px;}...element.list .linklist li.dc.grid .tag {bottom:unset;margin-top:-30px;}..../patch applied on 31st March for labels/...element.list .linklist li.dc.grid .bn-headline .tag {margin-top: -40px;}....@media (max-width: 575px){.. .element.list.graybox div.teaserImage a {display:flex;}.. .electionArticleSecondary .sidebar .element.list.li-divider .teaserImage img {margin-bottom: 0;}.. .el

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\tooltipLabelV2[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 284 x 155, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2901
Entropy (8bit):	6.946432759316197
Encrypted:	false
SSDEEP:	48:v/6GMYL4knA9WIYq8/c0nPZZM4bwI3AiDHny3nPjXHccReZPDik1/75YPEhl:vSLYkknmWIYq8/fZMZ3iDHnaHcco991N
MD5:	D1157A5519D462E75DEC56A25F7D582C
SHA1:	3A9468D4EBC5AEEAA12EA3B6FEC4F55E95138CF2
SHA-256:	F7D1DC167D6933736F89760C4E607CFBDF4E5DBB7183B8247A56A15F64B7CEE6
SHA-512:	100636FFCF0D12AE7A85AE34C4996E0E9095C52335AFA09FF713CEBB193E49C837CC7ADE495987A0F4640DDB0935243D7EE541FBC248C04D855CCA429E01C79C
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/elections/tooltipLabelV2.png
Preview:	.PNG........IHDR..............6$4....pHYs.................iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stEvt="http://ns.adobe.com/xap/1.0/sType/ResourceEvent#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmp:CreateDate="2019-08-16T18:14:08-04:00" xmp:ModifyDate="2019-08-28T10:15:56-04:00" xmp:MetadataDate="2019-08-28T10:15:56-04:00" dc:format="image/png" photoshop:ColorMode="3" photoshop:ICCProfile="sRGB IEC61966-2.1" xmpMM:InstanceID="xmp.iid:291272f1-ecb6-614c-bdd3-e43c8d84e4f2" xmpMM:DocumentID="adobe:docid:photoshop:757a4bc8-1ab5-104f-a2a3-e84982a89ed

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\toronto-header-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	158
Entropy (8bit):	5.089895309618836
Encrypted:	false
SSDEEP:	3:N+LJaGkovOCXLP5CBTXKeGRGaVK1RSLSWx2IECAXLEovkH33W5FdSRFFC:ULgAr5CBTnwVqSLZVAAyknodSjFC
MD5:	D142E1DD956F0A4E9714E8469D6BCD7E
SHA1:	153E55AF76BFA6731670EE7CC112D1B548EFDFDA
SHA-256:	B08C3B403C8FDA101E66D96776B0B55A44B55482F626B9CAD7EBD295498BF1B5
SHA-512:	02DDB117557F50E99A2CDB6F692D23844670849C42D86FC2017F0BDB48EF9A6DEF4F9D7A86030F864EA8282B9E4FC9BF336D68C536AC1A1B9D007CD354CB9004
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/toronto-header-7.726187
Preview:	a.logo_ctvnews {.. background-image: url("https://toronto.ctvnews.ca/polopoly_fs/7.726186!/httpImage/image.png");.. width: 122px;.. height: 83px;.. }.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\traffic-7[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	6
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:N/F:v
MD5:	A127FD1F86E4AB650F2216F09992AFA4
SHA1:	08E02D827446F7FE647672CBC95DAB2C71F3D0EE
SHA-256:	399141BE1D30AC2656D89EEDCF0D8DCEDAA72D6C29BF959CAE243DC7B1442CF6
SHA-512:	9B864F19E1475420BF04EFAAFC338515ED4C1AB12E5E8A04785643088934BA7014F983D9E8E67B8292A19DE55691E400A014E64881993F69858B586E8D90CEA0
Malicious:	false
Reputation:	low
Preview:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\traffic-7[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	6
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3:N/F:v
MD5:	A127FD1F86E4AB650F2216F09992AFA4
SHA1:	08E02D827446F7FE647672CBC95DAB2C71F3D0EE
SHA-256:	399141BE1D30AC2656D89EEDCF0D8DCEDAA72D6C29BF959CAE243DC7B1442CF6
SHA-512:	9B864F19E1475420BF04EFAAFC338515ED4C1AB12E5E8A04785643088934BA7014F983D9E8E67B8292A19DE55691E400A014E64881993F69858B586E8D90CEA0
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/traffic-7.290517?colwidth=960&derivativeType=
Preview:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\v2[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	257
Entropy (8bit):	4.997343810915214
Encrypted:	false
SSDEEP:	6:p3xVWMEgjp0TpIHthzLSueiX+D2EkCS3b:p3xVWzy7X2iX+D2PCm
MD5:	32DD4CC1B1FAC67D31472D1708D0D032
SHA1:	67FA839255A7373C5BA4BE122284D31728CFF104
SHA-256:	7D06F3DB7B835580E7CC9A341C9D1F0E22710444C5F21EEB0D38DA3E767DDA45
SHA-512:	3B2C6F067ADB0FA4B3ED566CD246CC7DCB7DAADF50E95E15F6A3CC1A342BF6B70A9A8745E437D657618344AD75FF37DBA2A2D3B68BA0F839AC514910AFF8150D
Malicious:	false
Reputation:	low
IE Cache URL:	https://mb.moatads.com/yi/v2?ol=0&qn=(%2BIb%7Cj8o%3FJjDkk%7Bj12%3Ev%3EhhX%2FIX%5EpB1I%3Cq.bWol5%7D9%250m9%3FAd%5E8YDMt7%5EYa%5Dee%24%26X%258bNJqI011%5Dln13%2C(%3DN%7BqD%3D_11%5D2%24%3Cvmu!9%3FHa8h%3EdL7F%24%26FXJ9lrct2W.P%60n1%25y%5ETm_h(GJ25%3Dq%24%3BEtB8.%3AIO7v%3Ch%2Cqk%3BRk3Z.apc%3D%5EXa%5DLzXuI2mFjrRPP%3CV%3Cye%7Bzb%26mxjr%40%3F%3BggqhB3U4(%5BrU%24J)%2C4i8od%23pw%40%40bRS%3FIDzbPTR21KC&th=2077627710&tf=nMzjG----CHewJ-1rCAqD-P72zg-Id8O-&vi=444444&rc=0%2C2%2C2%2C1%2C1001431019%2C1%2C2%2C0%2Cprobably%2Cprobably&rb=1-fsovPrh6hhsj2wAIuY7sH0xj4dy8ZWK4aztFOewYCG7c8eOm5Kk0%2FX%2FtDJ5WspFf7egP&sc=2&os=&qp=00001&is=&iv=8&qt=0&gz=0&hh=0&hn=0&tw=null&qc=-8&qd=-8&qf=1280&qe=906&qh=1296&qg=1000&qm=420&qa=1280&qb=1024&qi=1280&qj=984&to=000&po=1-0220002012002220&vy=ot%24b%5Bh%40%22oDPRHj%5BG%2B1ck9L%22%251xbqddcBX%5EOC%2CNKxnD%2CYooX%25%24(%3DNqU%60WNCNmL5%25GF.pB&qr=0&url=https%3A%2F%2Fwww.ctvnews.ca%2Fhealth%2Fcoronavirus%2Fcanada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1.5352524&pcode=bellmediaprebidheader755367530455&callback=MoatNadoAllJsonpRequest_45380567
Preview:	MoatNadoAllJsonpRequest_45380567({"oh": 551942, "dc": 283819, "n": 748958, "nm": 95873, "nu": 863943, "s": true, "pcode": "bellmediaprebidheader755367530455", "c": ["gs_health_misc", "moat_safe"], "ct": 0, "g": 0.0013492107391357422, "yi": {"_pbd": false}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\weather-link-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	132
Entropy (8bit):	4.576480980547626
Encrypted:	false
SSDEEP:	3:NxzAAZVkIEcUsLzErAZV+hvXWlIrukdslIHDfFHKmyFFFw62+KvC:AAZG6UqorAZc5XW3ke2ZHKlFFweKvC
MD5:	727BC10E31F9E5D5512C5280C585B86B
SHA1:	9462A22A52C7D6A1EA365DC36211DD20E9271010
SHA-256:	C3EFEB1B67A619C0AFC0B0F29209CC48E191BCCFF4CADFB4A97A0A9BC9A22D3F
SHA-512:	0FA4271244CF655728D799B8D644B649EB805A5651645B727FA7279F2667FD5A696E3CA7A60AA13FC842AF654FDA36A4B6B55C4B03B0C3C88C8440EDD976E191
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/weather-link-7.729539
Preview:	.weatherlink {margin-top: -12px}.....weatherlink a {.. font-size: .7em;.. font-weight: bold;.. padding-right: .5em;..}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\webiconfont-v7[1].eot Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Embedded OpenType (EOT), webiconfont-v7 family
Category:	downloaded
Size (bytes):	54992
Entropy (8bit):	6.2558667547054005
Encrypted:	false
SSDEEP:	1536:yYLoDgqdl3j++xOKw1FHuDWraQCSXWDUwlMVJLf8:ojlS+xBw1FH0WraQDXWDUwl6z8
MD5:	5E914810622A468CF22173D77E281955
SHA1:	5C30A101FC02121CA0809D964293C7133A182549
SHA-256:	DE88B33808A02B249E8BE0AE8338E6AF31DF307459AE439766B08B73971A5AAF
SHA-512:	4830C13BABAC38040882BEE76285A81956EB38C4E0C7698E7E2316D5FB0A1F19BE3D72884EB567E7D26C590AA38EB0526755E2C9A68BBE688184DB8AD3B82880
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/bmdaem-domains/news/clientlibs/clientlib-brands/ctvnews/site/resources/fonts/webiconfont-v7.eot
Preview:	..................................LP.........................f.,....................w.e.b.i.c.o.n.f.o.n.t.-.v.7.....R.e.g.u.l.a.r.....V.e.r.s.i.o.n. .1...0.....w.e.b.i.c.o.n.f.o.n.t.-.v.7................0OS/2...........`cmap...4.......\gasp.......x....glyf~.!........Xhead.=.o.......6hhea...o.......$hmtx.W.@...4...(loca.W.....\....maxp...Z....... name}..7........post........... ...........................3...................................@.........@...@............... .................................@............. ............. ......................................................79..................79..................79................U.m....%"'..'&'..5467107>.7632............1......#."............1......327>.765>.54&'1&'..'&#.8.12....#"&518.14638.9.5"....326510414&#8.9...A?@{<<9....%%.]^pB?@{<;9.....%&.]]q.gVU{"#....677r::;gVU{"#....678q::;.0EE00ED1EaaEDaaD...F55F......-,k,,..G55G.......-,j,,.N))b.......A11B..))c).......B12C...E00EE01D2bDEaaD.Db..........!.....w.....#"..1.#54

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\B87Z87FM\wrap[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	83847
Entropy (8bit):	5.599351944249313
Encrypted:	false
SSDEEP:	1536:fTv1f/x4g8F/S9ahn1S6vl5gOuuit1te3iOumaTaFFG9flI0Bdnr6zrweI:fT9Mq9ah1S6cOuuit3eYl5n+zrwp
MD5:	ADE951A9956828717F10355C2F49A253
SHA1:	8303E67AB0099829241FF987C423B7308C273CDD
SHA-256:	C92D8E0768F7E692715C3BC8625E0B0B7E0D894A33EBFC89FFB7B4493F06E410
SHA-512:	414A802E5FD955CCFD7255227E39CE23138CE067735F2AA3BDF1DD84F4B08549D2B00216F8B3492D989A6F50F6CBBC322F4D7B0013B2D47D0D11288DC3BA9B68
Malicious:	false
Reputation:	low
IE Cache URL:	https://confiant-integrations.global.ssl.fastly.net/prebid/202103091517/wrap.js
Preview:	/* eslint-disable spaced-comment */.(function() {. 'Copyright . 2013-2019 Confiant Inc. All rights reserved.';. 'v3.202103091517';. var _0x4411=['Y3VycmVudFNjcmlwdA==','Z2V0QXR0cmlidXRl','cXVlcnlTZWxlY3RvckFsbA==','c2NyaXB0','bGVuZ3Ro','c3Jj','aW5kZXhPZg==','cHVzaA==','c291cmNlVVJM','ZmlsZU5hbWU=','c3RhY2s=','c3BsaXQ=','ZmlsdGVy','aHR0cA==','Y29uZmlhbnQ=','c2V0dGluZ3M=','Y2FsbGJhY2s=','dG9w','X2Nscm0=','Q29uZmlhbnQgZmFpbGVkIHRvIGluaXQ6IG5vIGNvbmZpZ3VyYXRpb24gaXMgcHJvdmlkZWQuIFBsZWFzZSBjb250YWN0IHVzIGF0IHN1cHBvcnRAY29uZmlhbnQuY29t','ZGZw','Z3B0','cHJlYmlk','YXN0','aXNBUg==','YXJD','bnVtYmVy','Y29uZmlhbnRSZWZyZXNoU2xvdHM=','Z29vZ2xldGFn','cHJlYmlkTmFtZVNwYWNl','cmVxdWVzdEJpZHM=','c2V0VGFyZ2V0aW5nRm9yR1BUQXN5bmM=','cHViYWRz','cmVmcmVzaA==','ZGV2TW9kZQ==','Y2VpbA==','cmFuZG9t','cXVl','bG9n','Q29uZmlhbnQgc2xvdCBhdXRvIHJlZnJlc2ggY2FuIG5vdCBiZSBjb21wbGV0ZWQuIE5vIGdvb2dsZXRhZyBvYmplY3QgZm91bmQu','aHRtbGlk','cGxhY2VtZW50RWxlbWVudElk','cmVmcmVzaEFk','Z2V0U2xvdHM=','Z2V0U2xvdEVsZW1lbnRJZA==',

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\183816-263227036570116[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	124620
Entropy (8bit):	5.495451633905687
Encrypted:	false
SSDEEP:	1536:myaRrtXDAg0SqcDmQFhGkI5cOJGm1LYlfULr+P8BwhO8lo7kb:uuSgziTH
MD5:	E2BED6B9422CEF135D7B58D77EA47B0D
SHA1:	781E4738DE633281A6227042DD3F98F99714AD8C
SHA-256:	7EF7FD8D25A5631D1FD8225A0D9596C05C74AF1243743D66CE280F890AD4F0CE
SHA-512:	0C0F9F1F0F89301F8ADEE5B0E89ECFD402672BD0C4BD4AE99A180C9B302B9F2A1D60C663636DC69DFE119A5DF6E2C4FFD324FA82441E24ADE0ED26FC8F95CAEC
Malicious:	false
Reputation:	low
IE Cache URL:	https://js-sec.indexww.com/ht/p/183816-263227036570116.js
Preview:	!function(){function e(t,r,n){function i(a,o){if(!r[a]){if(!t[a]){var d="function"==typeof require&&require;if(!o&&d)return d(a,!0);if(s)return s(a,!0);var u=new Error("Cannot find module '"+a+"'");throw u.code="MODULE_NOT_FOUND",u}var c=r[a]={exports:{}};t[a][0].call(c.exports,function(e){return i(t[a][1][e]\|\|e)},c,c.exports,e,t,r,n)}return r[a].exports}for(var s="function"==typeof require&&require,a=0;a<n.length;a++)i(n[a]);return i}return e}()({1:[function(e,t,r){"use strict";function n(e){var t,r,n,u,c;return function(){t=s(),u=e.desktopGlobalTimeout,c=e.mobileGlobalTimeout,"mobile"===a.DeviceTypeChecker.getDeviceType()?a.globalTimeout=c:a.globalTimeout=u,r={slotDemandHistory:{},desktopGlobalTimeout:u,mobileGlobalTimeout:c},n={};for(var i=0;i<d.length;i++)n=o.mergeObjects(n,d[i](e,r,t._executeNext));t._setDirectInterface("GptLayer",n)}(),i.derive(t,{})}var i=e(10),s=e(3),a=e(56),o=e(25),d=(e(26),[e(35),e(29),e(32),e(31),e(34),e(30),e(33)]);t.exports=n},{}],2:[function(e,t,r){"use s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\289d106c-df24-4cd9-a9fa-753e928c23ad-web[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	283879
Entropy (8bit):	5.360149357351729
Encrypted:	false
SSDEEP:	3072:pyBjSbNPD5baA/x9RyIqciqSYh3eJJRdPnz/kh2M4y/:ptFD52WRydci5EC/kYy/
MD5:	514E76038D56DA6D8B3A2662C18C4BB6
SHA1:	F35E355269DA782BC7E8C4C2C2A09506AF64ACF3
SHA-256:	692A0C568A4DA7F6F7D859FF1335022B2A6CE43182436F7821E0DF8DDB1ECECF
SHA-512:	BDF645BAA500EF17A9FC0F6E5114AFD055BBE413C7480AA76A4EA32BBB2C2E2EF9C4B69441CD5620F8FFE00EC590D0C25AB7F5677E046F720194D334DD9B01F5
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.permutive.com/289d106c-df24-4cd9-a9fa-753e928c23ad-web.js
Preview:	/! permutive-javascript-sdk v13.0.0 (web) (built 2021-03-19T06:31:01.590Z) /(()=>{"use strict";var __webpack_modules__={828:(e,t,n)=>{n.d(t,{g:()=>o});var r=n(735);function i(e,t,n){return function(r){for(var a=Array(n.length+1),s=0;s<n.length;s++)a[s]=n[s];return a[n.length]=r,0===t?e.apply(null,a):i(e,t-1,a)}}var a={1:function(e){return[e]},2:function(e){return function(t){return[e,t]}},3:function(e){return function(t){return function(n){return[e,t,n]}}},4:function(e){return function(t){return function(n){return function(r){return[e,t,n,r]}}}},5:function(e){return function(t){return function(n){return function(r){return function(i){return[e,t,n,r,i]}}}}}};function s(e){return a.hasOwnProperty(e)\|\|(a[e]=i(r.bc,e-1,[])),a[e]}function o(e){return function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];for(var r=t.length,i=s(r),a=e.map(t[0],i),o=1;o<r;o++)a=e.ap(a,t[o]);return a}}},500:(e,t,n)=>{n.d(t,{Eh:()=>i,pR:()=>a,xH:()=>s,ke:()=>o,zT:()=>c,md:()=>u,Qp:()=>l,Ew:()=>d

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\8613[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	962
Entropy (8bit):	5.326269622167282
Encrypted:	false
SSDEEP:	24:WC/tJPT5hrR4A5hrRGC/tJPT5hrR4A5hrR3:PzrPrBzrPr1
MD5:	A15379BEFBE6E82F5F641B020BEF0ABE
SHA1:	002C7F961CA9EEE6FBEB72F4C54B8FA4C7DFFF2C
SHA-256:	7CDC225ED6212779C2F3489AC9642551D924E9A1D3712EF3CBF7F55D160F1B19
SHA-512:	E114C814779DF4A7BAE215485DA84A159C75B285ABEE0F7E78F97129ED5FF1C4FC53666649F5604AE64156FDD329FA9B063E1F11C09A577D7269F7881FF7EA61
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">.<html>.<head>.<meta http-equiv="pragma" content="no-cache">.</head>.<body style="border: 0; margin: 0; padding: 0;">.<img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293468&gdpr=&gdpr_consent="/><img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293438"/></body>.</html><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">.<html>.<head>.<meta http-equiv="pragma" content="no-cache">.</head>.<body style="border: 0; margin: 0; padding: 0;">.<img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293468&gdpr=&gdpr_consent="/><img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293438"/></body>.</html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\8613[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	481
Entropy (8bit):	5.326269622167282
Encrypted:	false
SSDEEP:	12:BMQtJOo9vt2xsK+zT5njluMG0RGXA5njluMG0RGaEQb:WC/tJPT5hrR4A5hrR3
MD5:	CEAF86943B63ADB58ABBF297FDE73C8B
SHA1:	2D15CE63D394948DB2CF990DC704A9C50F80F9E4
SHA-256:	33028B306202787AF41768DACB7FBC2B20A84F3A1F026CC0893D177AF270FCCD
SHA-512:	F2C3D39F2978BAD6D410E7BF554BA34260AA65D25D8C136ED831534493DFDFF2D718F91EFB5BD25F83BAF3D286E0C130608DEFC5AA13101149CA4EDC6C40D509
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">.<html>.<head>.<meta http-equiv="pragma" content="no-cache">.</head>.<body style="border: 0; margin: 0; padding: 0;">.<img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293468&gdpr=&gdpr_consent="/><img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293438"/></body>.</html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AppMeasurement.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	33462
Entropy (8bit):	5.357057188294372
Encrypted:	false
SSDEEP:	768:oLXw5OhrPiX7fVXt9KQ2vYlcOe9kBEemysr0:oLXw5OhraX7f58Yxq/0
MD5:	F259EE6445C19C2CE3C64A1B117A4F35
SHA1:	A4C64554F653AB4E5BD5D2D03CE5685BB0A9DDB8
SHA-256:	D6B423C91328EEC9C218DD8B21AE1E676987D574E5432411A32806E5DD2BDE32
SHA-512:	8050C59A188BF36A920EE6BD90BA52F14967AD2085A32A37D9211C265803C962276146F8FD5F8487D42763CE9A68D3DC6CCD053322B57DE52FAF3A03962DBB99
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement.js`..function AppMeasurement(f){var g=this;g.version="2.22.0";var p=window;p.s_c_in\|\|(p.s_c_il=[],p.s_c_in=0),g._il=p.s_c_il,g._in=p.s_c_in,g._il[g._in]=g,p.s_c_in++,g._c="s_c";var d=p.AppMeasurement.ic;d\|\|(d=null);var l,b,k,m=p;try{for(l=m.parent,b=m.location;l&&l.location&&b&&""+l.location!=""+b&&m.location&&""+l.location!=""+m.location&&l.location.host===b.host;)l=(m=l).parent}catch(e){}g.C=function(e){try{console.log(e)}catch(t){}},g.Ra=function(e){return""+parseInt(e)==""+e},g.replace=function(e,t,a){return!e\|\|e.indexOf(t)<0?e:e.split(t).join(a)},g.escape=function(e){var t,a;if(!e)return e;for(e=encodeURIComponent(e),t=0;t<7;t++)a="+~!*()'".substring(t,t+1),0<=e.indexOf(a)&&(e=g.replace(e,a,"%"+a.charCodeAt(0).toString(16).toUpperCase()));return e},g.unescape=function(e){if(!e)return e;e=0<=e.indexOf("+")?g.replace(e,"+"," "):e;try{return decodeURIComponent(e)}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\AppMeasurement_Module_ActivityMap.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3303
Entropy (8bit):	5.452973373664524
Encrypted:	false
SSDEEP:	48:m5Y978Fy8XpF6Ybu+iLRm/PAeNeGdgOIDcgQQ1rQN5ePJcmktcp98AKDBW1:m527Z2pF6YurK508Lx7ePJY9LFW1
MD5:	5DEDCDA2C8A6C3A51FD419D306427010
SHA1:	B5B77880EA73F4370C8B478FBF527D050CA1B650
SHA-256:	0486530F1E98818865754A08E1B5442AC5A6A36A6BF6042E3B3338A532E998D2
SHA-512:	20BE4D54AAD68CFD360A760D09CE7E22EFACBD793D91EFBB9F5871FDE686D7095C10502D11274A44A5999A50AF0D5C17780C178A408F4E3CF73B6D45360D1682
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement_Module_ActivityMap.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/extensions/EPbde2f7ca14e540399dcc1f8208860b7b/AppMeasurement_Module_ActivityMap.js`..function AppMeasurement_Module_ActivityMap(o){function e(){var e=t.pageYOffset+(t.innerHeight\|\|0);e&&+g<e&&(g=e)}function n(){if(f.scrollReachSelector){var t=o.d.querySelector&&o.d.querySelector(f.scrollReachSelector);t?(g=t.scrollTop\|\|0,t.addEventListener("scroll",function(){var e;(e=t&&t.scrollTop+t.clientHeight\|\|0)>g&&(g=e)})):0<i--&&setTimeout(n,1e3)}}function a(e,t){var n,r,i;if(e&&t&&(n=f.c[t]\|\|(f.c[t]=t.split(","))))for(i=0;i<n.length&&(r=n[i++]);)if(-1<e.indexOf(r))return null;return e}function c(e,t,n,r,i){var a,c;if(e.dataset&&(c=e.dataset[t])?a=c:e.getAttribute&&((c=e.getAttribute("data-"+n))?a=c:(c=e.getAttribute(n))&&(a=c)),!a&&o.useForcedLinkTracking&&i){var l;if(e=e.onclick?""+e.onclick:"",varValue="",r&&e&&0<=(t=e.indexOf(r))){for(t+=r.length;t<e.length;)if(n=e.charAt(t++),0<="'\"".indexOf(n)){l=n;break}for(c=!1;t<e.length&&l&

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\CTV_Sans-Black[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 31728, version 1.0
Category:	downloaded
Size (bytes):	31728
Entropy (8bit):	7.988420506951846
Encrypted:	false
SSDEEP:	768:BCcxhh8Voxs8sdgW+/dHoHvdCs/2K1MMCyvdBs+kv:BCshh8Ys8egW+lIPdLuKWrUXsj
MD5:	831CD2DC97C3333F3B1565A6E73266F9
SHA1:	7303E9E9400EC908DD568DEEB24DA72E83661817
SHA-256:	D9A9C36BBA3C7A58490B3243F603658E1B3B6CE59B982612D753F782751E5A66
SHA-512:	7FD0847FD36DC1F727CC2033A55A7FBC5594C6D002C2404C5AE350EC57AFB8BBE260251671570A0C541CA51C557B59901B9F8943CD7892A12DDD95328DD8FBCC
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/bmdaem-domains/news/clientlibs/clientlib-brands/ctvnews/site/resources/fonts/CTV_Sans-Black.woff
Preview:	wOFF......{...............z........%........DSIG..z.............GPOS.......0..>...P.GSUB...............9OS/2.......O...`}n-.cmap.......P....\|n..cvt ..tT...0...<....fpgm..t.........?...gasp..tL............glyf...(..M.......7#head..f....4...6..0.hhea..f4...!...$....hmtx..fX.......T.';.loca..i....,...,...maxp..lH... ... ....name..lh.......X....post..o....<......>prep..zH.........P..x..[}.S..?'.l.o.]>..............`@D.-...TQ+E.....?.3E...jm.j...A....L3-v.L.Z..Rkj.......e..C...{...K6...Yh.....=..s~..s..#&"...R.-..\M.......r.mR...L.....j.7.Y..\|...............\|...L../.....[.. ..%.+..4.b....S...[.6.m..jE..C\|.D....?.?..._......I.........h......W.V.S...p......M.XpU....?....Z.Z.....j...S5...F....\...d.r....i+..o 5..H-....~.t.=G...^CZBo -..(E7.q.et.N.J.i..F..+..V.X.Kkx<......v^...E^.Q.2/..t...5..o.ut7?..Wx.........!...'.. .D....g......V;.N.P79..b.y.F...Ch=.u.m(..>...(;dg.......E..E.g..'.~".'.J).Q.J.(.Ai...GS.s..0A).3...@..N(.@1...(..n..u.r...A..Nz........S..)Y.......N.P..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ErrorPageTemplate[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	2168
Entropy (8bit):	5.207912016937144
Encrypted:	false
SSDEEP:	24:5+j5xU5k5N0ndgvoyeP0yyiyQCDr3nowMVworDtX3orKxWxDnCMA0da+hieyuSQK:5Q5K5k5pvFehWrrarrZIrHd3FIQfOS6
MD5:	F4FE1CB77E758E1BA56B8A8EC20417C5
SHA1:	F4EDA06901EDB98633A686B11D02F4925F827BF0
SHA-256:	8D018639281B33DA8EB3CE0B21D11E1D414E59024C3689F92BE8904EB5779B5F
SHA-512:	62514AB345B6648C5442200A8E9530DFB88A0355E262069E0A694289C39A4A1C06C6143E5961074BFAC219949102A416C09733F24E8468984B96843DC222B436
Malicious:	false
Reputation:	low
Preview:	.body..{...font-family: "Segoe UI", "verdana", "arial";...background-image: url(background_gradient.jpg);...background-repeat: repeat-x;...background-color: #E8EAEF;...margin-top: 20px;...margin-left: 20px;...color: #575757;..}....body.securityError..{...font-family: "Segoe UI", "verdana" , "Arial";...background-image: url(background_gradient_red.jpg);...background-repeat: repeat-x;...background-color: #E8EAEF;...margin-top: 20px;...margin-left: 20px;..}....body.tabInfo..{...background-image: none;...background-color: #F4F4F4;..}.. ..a..{...color: rgb(19,112,171);.font-size: 1em;...font-weight: normal;...text-decoration: none;...margin-left: 0px;...vertical-align: top;..}....a:link, a:visited..{...color: rgb(19,112,171);...text-decoration: none;...vertical-align: top;..}....a:hover..{...color: rgb(7,74,229);...text-decoration: underline;..}....p..{...font-size: 0.9em;..}.....h1 /* used for Title */..{...color: #4465A2;...font-size: 1.1em;...font-weight: normal;...vertical-align

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\NewErrorPageTemplate[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1612
Entropy (8bit):	4.869554560514657
Encrypted:	false
SSDEEP:	24:5Y0bQ573pHpACtUZtJD0lFBopZleqw87xTe4D8FaFJ/Doz9AtjJgbCzg:5m73jcJqQep89TEw7Uxkk
MD5:	DFEABDE84792228093A5A270352395B6
SHA1:	E41258C9576721025926326F76063C2305586F76
SHA-256:	77B138AB5D0A90FF04648C26ADDD5E414CC178165E3B54A4CB3739DA0F58E075
SHA-512:	E256F603E67335151BB709294749794E2E3085F4063C623461A0B3DECBCCA8E620807B707EC9BCBE36DCD7D639C55753DA0495BE85B4AE5FB6BFC52AB4B284FD
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/NewErrorPageTemplate.css
Preview:	.body..{.. background-repeat: repeat-x;.. background-color: white;.. font-family: "Segoe UI", "verdana", "arial";.. margin: 0em;.. color: #1f1f1f;..}.....mainContent..{.. margin-top:80px;.. width: 700px;.. margin-left: 120px;.. margin-right: 120px;..}.....title..{.. color: #54b0f7;.. font-size: 36px;.. font-weight: 300;.. line-height: 40px;.. margin-bottom: 24px;.. font-family: "Segoe UI", "verdana";.. position: relative;..}.....errorExplanation..{.. color: #000000;.. font-size: 12pt;.. font-family: "Segoe UI", "verdana", "arial";.. text-decoration: none;..}.....taskSection..{.. margin-top: 20px;.. margin-bottom: 28px;.. position: relative; ..}.....tasks..{.. color: #000000;.. font-family: "Segoe UI", "verdana";.. font-weight:200;.. font-size: 12pt;..}....li..{.. margin-top: 8px;..}.....diagnoseButton..{.. outline: none;.. font-size: 9pt;..}.....launchInternetOptionsButton..{.. outline: none;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\addthis_widget[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	361292
Entropy (8bit):	5.507224233490729
Encrypted:	false
SSDEEP:	6144:joM/HvwM4X4UZ8pVTXPZIcVykc2VeakzRDU:MM/AXMDP9ykc2VeakdU
MD5:	61DCFA8958E6A7CC3F23B3B4758EE178
SHA1:	C4313CF29A2C056422AB798A2D088743C0972E97
SHA-256:	ACD2F7AD78EDEEBAD4B6B0FDD17FF57D81C3726C60FD5435EE8C5A0115D29403
SHA-512:	9FF8F714925A8CB650F206747164FBD575B964F530C4241F1B3A1F6678CAB245B5D34D6C6CFA761642026E3B7700CDA36AC0AC4143FB27F7865E3C9C5BB96D43
Malicious:	false
Reputation:	low
IE Cache URL:	https://s7.addthis.com/js/250/addthis_widget.js
Preview:	/!.AddThis - v8.28.7 - 20201026;.Copyright (c) 1998, 2020, Oracle and/or its affiliates../../!...invariant : 2.1.0.BSD.Copyright (c).All rights reserved...Redistribution and use in source and binary forms, with or without.modification, are permitted provided that the following conditions are met:.. Redistributions of source code must retain the above copyright notice, this. list of conditions and the following disclaimer...* Redistributions in binary form must reproduce the above copyright notice,. this list of conditions and the following disclaimer in the documentation. and/or other materials provided with the distribution...* Neither the name of invariant nor the names of its. contributors may be used to endorse or promote products derived from. this software without specific prior written permission...THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS".AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE.IMPLIED WARRANTIES OF ME

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\all[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3224
Entropy (8bit):	5.607051064244525
Encrypted:	false
SSDEEP:	48:Xp+y/clUyAQHWs5+TaorOFzyHOgeEh7z5jFqxv4tx5YHIekZ462X+wI4DuExjGx:5+5AQHAray48f5JJYHIh4PJI4Du9
MD5:	F8D43CFB32B12581F30D503825A77C4C
SHA1:	F0940DC9E5F8F89E541FBBE5845BC0BE16E1A0DF
SHA-256:	5E02CDD92DE573528CC0E5AB4E759C5AC83A7AA51CA87A4A07133C276C399712
SHA-512:	EB2150A2BB32445BEC8275A2126DD383A8588C9D573201B60A925F484FCEDFD9FC01D7765F0081B107EBA71CB746C87BE41CDB8C56A55C7D8457E8BA26B75AD0
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/en_US/all.js
Preview:	/1616136827,,JIT Construction: v1003479689,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\aps_csm[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	6482
Entropy (8bit):	5.386219794662181
Encrypted:	false
SSDEEP:	192:UaveH+XTFLLgXxQRCJS3ZE1m1j/YMvKTP+pmY2/:UdqTFPKt16EMiY2/
MD5:	A4D296427FC806B21335359E398C025C
SHA1:	46928CCD1407B4E55192BB9D0A07DCFEBD9687B7
SHA-256:	06B99248A163333E36980A6CFB756F1A7DE60FA49517162B87B1A44D5D48F844
SHA-512:	4C0326040E2C7837FA78185CC5A185EA43697DD4F3591757F84BDA76BAC746BADFBE047DAC2C1DC677561FD6CC6C5D5B4BEBB7D671CB82AB04E070DA766FE6AF
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.amazon-adsystem.com/bao-csm/aps-comm/aps_csm.js
Preview:	var amzn_aps_csm=amzn_aps_csm\|\|{};amzn_aps_csm.errors=[],amzn_aps_csm.reportErrors=function(a){var b,c;for(/^https?:\/\//.test(a)===!1&&(a=document.location.protocol+"//"+a),"/"!==a.substr(a.length-1)&&(a+="/"),b=0;b<amzn_aps_csm.errors.length;b++)c='{"adViewability":[{"error": {"m": "'+amzn_aps_csm.errors[b]+'"}}], "c": "aps_communicator", "api": "RTB", "error": 1}',"https:"===document.location.protocol&&/^http:\/\//.test(a)===!0&&(a=a.replace("http://","https://")),(new Image).src=a+c+"?cb="+Math.round(1e7*Math.random());amzn_aps_csm.errors=[]},function(a){function b(a){return a?a.replace(/^\s+\|\s+$/g,""):a}function c(a){if(a&&a.s){var b,c=a.s.length>0?a.s[0]:"",d=a.s.length>1?a.s[1]:"";c&&(b=c.match(j)),b&&3===b.length\|\|!d\|\|(b=d.match(i)),b&&3===b.length&&(a.f=b[1],a.l=b[2])}}function d(a,d){if(d=d\|\|{},!a)return{};a.m&&a.m.message&&(a=a.m);var i,j,k,l,m,n={m:e(a,d),c:a.c?""+a.c:a.c,s:[],l:a.l\|\|a.line\|\|a.lineno\|\|a.lineNumber,name:a.name,type:a.type},o=0,p=0;if(i=a.stack\|\|(a.err?a.err

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\apstag[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	122288
Entropy (8bit):	5.326880780477764
Encrypted:	false
SSDEEP:	1536:iJLWXmG4UdFN43jr1pHQZp9BF/BH2FdvK4uk5m1M1AGsfsk7btBcPclx:iJLWXmV463j5KZpfF/njM1CsdP4x
MD5:	D2BBE61D6C9CFD2F9D26C66417C4FB1E
SHA1:	94D5B56E5637CE9664A67142D5688FED844B5A23
SHA-256:	86CEF609C85D2C2CE6A507AF54E77A9C150E2FA408043E1454082614C4B0CE2B
SHA-512:	9E608379A43865AEE084F97EC0BB05F470357DDC24E6A3470D70A0E4DB60F5317CB4FBA5B0087C6FC3CC7DF43886F78629BC0351B62B96E13A12A614C262BC11
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.amazon-adsystem.com/aax2/apstag.js
Preview:	/! amazon-dtb-javascript-api - apstag - v7.60.00 - 2021-02-22 15:53:08 /.!function(t){var e={};function n(r){if(e[r])return e[r].exports;var i=e[r]={i:r,l:!1,exports:{}};return t[r].call(i.exports,i,i.exports,n),i.l=!0,i.exports}n.m=t,n.c=e,n.d=function(t,e,r){n.o(t,e)\|\|Object.defineProperty(t,e,{enumerable:!0,get:r})},n.r=function(t){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(t,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(t,"__esModule",{value:!0})},n.t=function(t,e){if(1&e&&(t=n(t)),8&e)return t;if(4&e&&"object"==typeof t&&t&&t.__esModule)return t;var r=Object.create(null);if(n.r(r),Object.defineProperty(r,"default",{enumerable:!0,value:t}),2&e&&"string"!=typeof t)for(var i in t)n.d(r,i,function(e){return t[e]}.bind(null,i));return r},n.n=function(t){var e=t&&t.__esModule?function(){return t.default}:function(){return t};return n.d(e,"a",e),e},n.o=function(t,e){return Object.prototype.hasOwnProperty.call(t,e)},n.p="",n(n.s=25)}([function(t,e

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\articlePlayerNavigation[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8731
Entropy (8bit):	5.26539936558158
Encrypted:	false
SSDEEP:	192:OKKCmokR52Bc7KTmR74edZe4CWg9xf1rKPYP+4UOIJmOwR13:iP5g9xNYYP+LOXL13
MD5:	23648B0D00BCD57F4288D32ACE4AFAC2
SHA1:	2647114589CCEB9D3880C496B75FA7384A2C32F3
SHA-256:	7C9EC82AF243BDEFD58E5166EE54426A80387A485A44CDFEE08CDA51BADCD807
SHA-512:	F4F88347FD11B62136B6690C395A657CC987484098D750F14631C69E2A1F09419E677C9D52EBEC9A9402BD6ACC211E3DF0CCE6AF903E63A24E28BB5115F33DC2
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/articlePlayerNavigation.js
Preview:	function populatePlayerNav(pageNum){var startIndex=(maxClipsPerPagepageNum)-maxClipsPerPage;var endIndex=(maxClipsPerPagepageNum);var currClipIndex=0;$("#storyPlayerNav").html("");for(i=startIndex;i<endIndex&&i<playlistNav.length;i++){var clip=playlistNav[i];addClipToPlayerNav(clip.id,clip.title,clip.description,clip.image,currClipIndex,pageNum);currClipIndex++;}setCurrUserPage(pageNum);highlightClip(nowPlayingClipId);$(document).trigger("isDone.renderClips");}function populateMobilePlayerNav(){var currClipIndex=0;if(playlistNav&&playlistNav.length>1){for(var i=0;i<playlistNav.length;i++){var clip=playlistNav[i];addClipToMobilePlayerNav(clip.id,clip.title,clip.description,clip.image,currClipIndex,1);currClipIndex++;}$(".mobileViewForSlick").on("init",function(event,slick,direction){if(playlistNav.length<=2){$(".shadow-right").addClass("hidden");}else{$(".shadow-right").removeClass("hidden");}$(".shadow-left").addClass("hidden");});$(".mobileViewForSlick").slick({infinite:false,slides

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\background-override-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	45
Entropy (8bit):	3.865782801134698
Encrypted:	false
SSDEEP:	3:N9VtNkGOCXL+jW7n:pk8IW7n
MD5:	7EE75BB432E64F7DE186CDE8D17DBCFE
SHA1:	CE376133F47112BA257B711CA4E8FEF8E8FA7989
SHA-256:	84CD473E38378F7E65EC7ABC4ADF6D5A5461AFD530EDEC9E7048AF78818DE0C4
SHA-512:	C636F638765DF8F40F1DFFD4C24EB6A5053DF4F7F46DB08E310D17B25E1209A41FCDB21B2C08418C143B8B28899FC331706EE9BB5FB5EE38856BEAC09D7EA0F1
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/background-override-7.682833
Preview:	body {.. background: #F8F8F8; ..}.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\banner-temp-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	10991
Entropy (8bit):	5.155847441877316
Encrypted:	false
SSDEEP:	192:q4iCj0BKbG5wKcMeCJcHoFKD5/r0nrUz4yhrEHFrjIAryrgLGobDTjOkPfGeV8MY:/7rgUz4yFEHZjZEmOCvGp
MD5:	EC10D55FA742024A992EDC0EA0AE9E12
SHA1:	8081928ACAF0669F0DA572F630E29322090BD203
SHA-256:	C414662A41E9E6911F09F8A500B26D082CE0E26E20C91CF91D3361B20812CF43
SHA-512:	A1F030D41BFD3B233025E643D9F6EB1DB654131A497C3629D9BF6FE7AE79B946BE3381C1C42EB2CCB5876E9086A6BFA90413CD67D1844BB2F9BAD5EF2E39C274
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/banner-temp-7.298239
Preview:	/* Temporary Ad Placement Fix /.....content, .banner .boxAd.secondClass {background-color:#FFF}.....content-footer div.thirty-by-one, .thirty-by-one div {border: 0}..../.topAd {background:url(http://static.ctvnews.ca/bellmedia/common/img/ad-bar-bkg.gif) repeat-x scroll 0 0 #2d2d2d; width: 970px; margin: 0px auto}/.....on-electoral-news .columnsplitter li.dc .teaserTitle {width: 195px}.....topAd .advert {/width: 728px;/ background:url(http://static.ctvnews.ca/bellmedia/common/img/ad-bar-bkg.gif) repeat-x scroll 0 0 #2d2d2d;}.....breakingNews .comment-video, .content-secondary .videoPromoList .dc.grid .comment-video, .content-secondary .tabviewelement .element.list.none .linklist.vertical .comment-video, .poll .comment-video{display: none!important}.....list span.comments {text-indent: -30000px}../ Not in file */...toronto2014 svg {.. background-color: #fff; }.....comingUpBlock p a {.. display: block;..}.....coming-up ul {padding: 0 5px 0 22px}.....commentList .row {padding:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\bidRequest[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.248156995696272
Encrypted:	false
SSDEEP:	3:YMfEE1n3GG3fDuHX4nEuHY:YMFl53fDIoEuHY
MD5:	FA056CEE57B4267BD98C82BA7C745651
SHA1:	19DF449E2AA9118C27AE790E0C2A3AB305B299BF
SHA-256:	3F527176966B772042C8027EA2D263BD49823D8863E914BF174FA31CF5611202
SHA-512:	D4A37CBD344D02E005210B934C331F57B2D00BCB9E5F85D5A693C0B7ACE854F42D59F8912A882757C51B61B7AE460565E2C12BE73F65507011152EE921AC959E
Malicious:	false
Reputation:	low
Preview:	{"id":"1474c0baf07a4fffa45e7cbefc52fff1","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\bidRequest[2].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.390717327007075
Encrypted:	false
SSDEEP:	3:YMBAeExSHUQQHwlurHonEuHY:YM2bxSEwl2HoEuHY
MD5:	9332426CBFBEA0F2AACDC59477F54047
SHA1:	D793A7C452FBBEB4F18BC19885D0EA692600B982
SHA-256:	68D0D83E912BAFC6E0F512BF7C511168D04503103D6A73255B140D145D85EFCA
SHA-512:	3D1C920E77EFA26BC348FC2071C3D6FF9D6B596ED5639F118AB1D3D0EC70F53C459276F755B67F66D69A13DAA7D7FEDC80DA3D272615C0662D17E46B8A8C1310
Malicious:	false
Reputation:	low
Preview:	{"id":"ffe4c3e63aaa4097bcf1a787bdc6a4a9","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\bidRequest[3].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.4252610278147575
Encrypted:	false
SSDEEP:	3:YMATdUdRF9rlQ14nEuHY:YMARUTF5lTEuHY
MD5:	C3729C4D3567BF2D468490ABD417880E
SHA1:	A1F7FBECDCE2F9B37530FEAC0E8C97755880A06B
SHA-256:	3803B54D2AE4C04714E97EA3B8883685475BA807C482FB9A07D1EC295E87ADA1
SHA-512:	43AE420C5BD9376C217B4C1F8BCC64C7F155561720532516F3247349CAF8BBB4A1AAEABD2E222696964A3DF04ACB24CA44778E2333F6328BA7DB25611A460708
Malicious:	false
Reputation:	low
IE Cache URL:	https://c2shb.ssp.yahoo.com/bidRequest?cmd=bid&dcn=8a9694c7017474db0327db644d6e001d&pos=ctvnews.ca_desktop_atf_300x1050_360&secure=1
Preview:	{"id":"677daf862a484187bb8fbf1e2040c9bc","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\bidRequest[4].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.2077338113950375
Encrypted:	false
SSDEEP:	3:YM9CM4nGjQ0aGfb4nEuHY:YMcM4nGjQ0NfUEuHY
MD5:	A606479055EC36D1581B851C0C5952B3
SHA1:	2B30C1D23B965A3855C24ACFA06D870CA98F0C76
SHA-256:	CA214CF69537B3394544FA0B59A301D4F3232976C3E3BD3A8BD72B67C4D496CD
SHA-512:	17E73A1DFFEC98B217C585C7DE89212FD108BBF1C9AE025A822B45B0A4118CABECFF00029C06078B9CCA36162322987BDA6DF8EB8E7F0B8A99C980F24E928914
Malicious:	false
Reputation:	low
IE Cache URL:	https://c2shb.ssp.yahoo.com/bidRequest?cmd=bid&dcn=8a9694c7017474db0327db644d6e001d&pos=ctvnews.ca_desktop_atf_970x90_371&secure=1
Preview:	{"id":"bfc04f3bd38d4cfbbbdc423711fc3d4c","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\bid[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	167
Entropy (8bit):	5.236108560825513
Encrypted:	false
SSDEEP:	3:8WiCLViemMQ32p0kHRTFHH+QwItLIoCYKlGSnIwBM4D/YLrItRI6FksfNh:8WiIUem/32p0kHRTFHPbfCYKpY4DeraB
MD5:	CB0AE0712CAF2C8A27F03640ED934912
SHA1:	B5CE595E6192AF42752BAD2B76FDF0BA24B8B44A
SHA-256:	666DF7DC4B93C0D442121071842B67165AB141F67839F2B4D360351D171E0C3F
SHA-512:	74374BFBB38DD2688F8CAC76346D735F11F60A350A080402E5AD938820045C372EB37CE6BFD86E03BD0EA3CBD1CA5BA970A385FDB62A673E5851DA9716318BD5
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.amazon-adsystem.com/e/dtb/bid?src=3733&u=https%3A%2F%2Ftoronto.ctvnews.ca%2Fontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784&pid=M5Lv0K8Ic19Ke&cb=0&ws=784x554&v=7.60.00&t=2000&slots=%5B%7B%22sd%22%3A%220%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x250%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnewstoronto%2Fhome%2Fstories%2Fdiv-gpt-ad-728_90-1%22%7D%2C%7B%22sd%22%3A%221%22%2C%22s%22%3A%5B%22300x250%22%2C%22300x600%22%2C%22300x1050%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnewstoronto%2Fhome%2Fstories%2Fdiv-gpt-ad-300_250-2%22%7D%2C%7B%22sd%22%3A%222%22%2C%22s%22%3A%5B%2230x1%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnewstoronto%2Fhome%2Fstories%2Fdiv-gpt-ad-30_1-3%22%7D%2C%7B%22sd%22%3A%223%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnewstoronto%2Fhome%2Fstories%2Fdiv-gpt-ad-300_250-4%22%7D%5D&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
Preview:	apstag.punt({"cfg":{"CONFIG_CALL_ENABLED":true,"v":1},"cmp":"https://aax-eu.amazon-adsystem.com/s/iu3?cm3ppd=1&d=dtb-pub&csif=t&dl=n-smaato_n-vmg_dm_an-db5","cb":"0"})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\bid[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemVh:8WiIUemf
MD5:	EAE5EE6C7E3134A287AA23FCD63D64F0
SHA1:	3B17DC8EB29B01BD80C12C7D64159D0434EDFDAC
SHA-256:	745A085B52B8371EC6705413FCA70A28C6D8BFF0DB480E6B124BD08C54E95EF8
SHA-512:	3A534A5E4557ACC431634EBA78950183078C2F78816C6E156679F3A8753C4C6514353111E6CE3F52C91219D036351D090970E8097CB4D41D65A1EC39D0E450EF
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.amazon-adsystem.com/e/dtb/bid?src=3733&u=https%3A%2F%2Ftoronto.ctvnews.ca%2Fmore%2Fbios%2Fsean-davidson-1.4670847&pid=gvO3uRqfu5hom&cb=0&ws=1280x906&v=7.60.00&t=2000&slots=%5B%7B%22sd%22%3A%220%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x250%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnewstoronto%2Fbios%2Findex%2Fdiv-gpt-ad-728_90-1%22%7D%2C%7B%22sd%22%3A%221%22%2C%22s%22%3A%5B%22300x250%22%2C%22300x600%22%2C%22300x1050%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnewstoronto%2Fbios%2Findex%2Fdiv-gpt-ad-300_250-2%22%7D%2C%7B%22sd%22%3A%222%22%2C%22s%22%3A%5B%2230x1%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnewstoronto%2Fbios%2Findex%2Fdiv-gpt-ad-30_1-3%22%7D%2C%7B%22sd%22%3A%223%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnewstoronto%2Fbios%2Findex%2Fdiv-gpt-ad-300_250-4%22%7D%5D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
Preview:	apstag.punt({"cb":"0"})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\bid[3].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemVh:8WiIUemf
MD5:	EAE5EE6C7E3134A287AA23FCD63D64F0
SHA1:	3B17DC8EB29B01BD80C12C7D64159D0434EDFDAC
SHA-256:	745A085B52B8371EC6705413FCA70A28C6D8BFF0DB480E6B124BD08C54E95EF8
SHA-512:	3A534A5E4557ACC431634EBA78950183078C2F78816C6E156679F3A8753C4C6514353111E6CE3F52C91219D036351D090970E8097CB4D41D65A1EC39D0E450EF
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.amazon-adsystem.com/e/dtb/bid?src=3733&u=https%3A%2F%2Ftoronto.ctvnews.ca%2Fmore%2Fbios%2Fsean-davidson-1.4670847%3FcontactForm%3Dtrue&pid=X8EHl9aC99A23&cb=0&ws=1280x906&v=7.60.00&t=2000&slots=%5B%7B%22sd%22%3A%220%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x250%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnewstoronto%2Fbios%2Findex%2Fdiv-gpt-ad-728_90-1%22%7D%2C%7B%22sd%22%3A%221%22%2C%22s%22%3A%5B%22300x250%22%2C%22300x600%22%2C%22300x1050%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnewstoronto%2Fbios%2Findex%2Fdiv-gpt-ad-300_250-2%22%7D%2C%7B%22sd%22%3A%222%22%2C%22s%22%3A%5B%2230x1%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnewstoronto%2Fbios%2Findex%2Fdiv-gpt-ad-30_1-3%22%7D%2C%7B%22sd%22%3A%223%22%2C%22s%22%3A%5B%22300x250%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnewstoronto%2Fbios%2Findex%2Fdiv-gpt-ad-300_250-4%22%7D%5D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
Preview:	apstag.punt({"cb":"0"})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\bid[4].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	23
Entropy (8bit):	3.914866303883101
Encrypted:	false
SSDEEP:	3:8WiCLViemVh:8WiIUemf
MD5:	EAE5EE6C7E3134A287AA23FCD63D64F0
SHA1:	3B17DC8EB29B01BD80C12C7D64159D0434EDFDAC
SHA-256:	745A085B52B8371EC6705413FCA70A28C6D8BFF0DB480E6B124BD08C54E95EF8
SHA-512:	3A534A5E4557ACC431634EBA78950183078C2F78816C6E156679F3A8753C4C6514353111E6CE3F52C91219D036351D090970E8097CB4D41D65A1EC39D0E450EF
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.amazon-adsystem.com/e/dtb/bid?src=3733&u=https%3A%2F%2Fwww.ctvnews.ca%2Fhealth%2Fcoronavirus%2Fcanada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1.5352524&pr=https%3A%2F%2Fwww.ctvnews.ca%2Fhealth%2Fcoronavirus%2F&pid=zde72q8eCKXew&cb=0&ws=1280x906&v=7.60.00&t=2000&slots=%5B%7B%22sd%22%3A%220%22%2C%22s%22%3A%5B%22300x250%22%2C%22300x600%22%2C%22300x1050%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnews%2Fcoronavirus%2Fnature%2Fdiv-gpt-ad-300_250-1%22%7D%2C%7B%22sd%22%3A%221%22%2C%22s%22%3A%5B%22300x100%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnews%2Fcoronavirus%2Fnature%2Fdiv-gpt-ad-300_100-2%22%7D%2C%7B%22sd%22%3A%222%22%2C%22s%22%3A%5B%2230x1%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnews%2Fcoronavirus%2Fnature%2Fdiv-gpt-ad-30_1-3%22%7D%2C%7B%22sd%22%3A%223%22%2C%22s%22%3A%5B%22728x90%22%2C%22970x250%22%2C%22970x90%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnews%2Fcoronavirus%2Fnature%2Fdiv-gpt-ad-728_90-4%22%7D%2C%7B%22sd%22%3A%224%22%2C%22s%22%3A%5B%22300x250%22%2C%22300x600%22%2C%22300x1050%22%5D%2C%22sn%22%3A%22%2F5479%2Fctv.ctvnews%2Fcoronavirus%2Fnature%2Fdiv-gpt-ad-300_250-5%22%7D%5D&cfgv=1&gdprl=%7B%22status%22%3A%22no-cmp%22%7D
Preview:	apstag.punt({"cb":"0"})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ca46aa22-e6b4-464e-9077-7215dc98bc0a[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	672
Entropy (8bit):	4.672282959714178
Encrypted:	false
SSDEEP:	12:H0E4XjfLyT9R4xExlPezL0E4XjfLyT9R4xExlPezL0E4XjfLyT9R4xExlPezL:H0PDyT/4xExlSL0PDyT/4xExlSL0PDy+
MD5:	D04F49059DE2B448BD19E94B98753E40
SHA1:	77D5BC0BE12A98A4D1A99C1B32D272144394851C
SHA-256:	CAF7A6D5FDD5D2D7B3BB30FB58134A7FC2F7C1221BA252C1E71AAA40FEB9D37F
SHA-512:	DDB235477472B678AC852F0DE10EDC60CA2B2FD60DD116DD6A0F9BA8CC21B9278B0581EED54F6415F1EBD8D42BB28AF1008C18D451053AAC4500FD0687D305C0
Malicious:	false
Reputation:	low
Preview:	Krux.ns.bellmedia.kxjsonp_consent_get_0({"status":404,"body":{"settings":{"dc":1,"al":1,"tg":1,"cd":1,"sh":0,"re":0},"pr":"global","code":"not_found","source":"unk","errors":{"not_found":"consent not found for OAo8OofK"}}});Krux.ns.bellmedia.kxjsonp_consent_get_0({"status":404,"body":{"settings":{"dc":1,"al":1,"tg":1,"cd":1,"sh":0,"re":0},"pr":"global","code":"not_found","source":"unk","errors":{"not_found":"consent not found for OAo8OofK"}}});Krux.ns.bellmedia.kxjsonp_consent_get_0({"status":404,"body":{"settings":{"dc":1,"al":1,"tg":1,"cd":1,"sh":0,"re":0},"pr":"global","code":"not_found","source":"unk","errors":{"not_found":"consent not found for OAo8OofK"}}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\chartbeat_video[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	70512
Entropy (8bit):	5.437419232007179
Encrypted:	false
SSDEEP:	1536:7I4cf1WH0rP10qh4pMTppBml+s4/rAtwwcVyKTlCzcZjzDPVE:M7f41p8M+sXKsOvDu
MD5:	C0CD1E62D0BAC066B62250BF86DB1078
SHA1:	779155A141D949542BDFC85ECDDBD4D21EC8DC55
SHA-256:	E7396117998C722BC6557D4461EF689F36DBDD89C1327B499F5EE8AFF838EDA5
SHA-512:	27F0D876B654AB71FBF6ED17F8BAE32A8945174DC601C43B633B59501DFE1F1865491047300F08BCD8D090DC9C582CB19744EFD56A2542BFB0F1F56B290B75F1
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.chartbeat.com/js/chartbeat_video.js
Preview:	(function(){var d=void 0,g=true,i=null,j=false;function k(){return function(){}}function m(a){return function(){return this[a]}}function p(a){return function(){return a}}var q,r=this;.function aa(a){var b=typeof a;if(b=="object")if(a){if(a instanceof Array)return"array";else if(a instanceof Object)return b;var c=Object.prototype.toString.call(a);if(c=="[object Window]")return"object";if(c=="[object Array]"\|\|typeof a.length=="number"&&typeof a.splice!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("splice"))return"array";if(c=="[object Function]"\|\|typeof a.call!="undefined"&&typeof a.propertyIsEnumerable!="undefined"&&!a.propertyIsEnumerable("call"))return"function"}else return"null";.else if(b=="function"&&typeof a.call=="undefined")return"object";return b}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function da(a,b,c){if(!a)throw Error();if(arguments.length>2){var e=Array.prototype.slice.call(arguments,2);return function(){var c=Array.prot

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\clientlib-news-site.min.2adab4a18a55724b1c083e290fb6c95a[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2246
Entropy (8bit):	5.015413053725154
Encrypted:	false
SSDEEP:	24:lr4IVhfCU0E+o9HQk10psURCEe6ChcJZOUPh/lWm9xIL/AupG4HNrreVIS237k:lr4ut0e9H31E7nmcRhHOKIS9
MD5:	2ADAB4A18A55724B1C083E290FB6C95A
SHA1:	5BBCC9AA422FEF6C4CC3937B35D1E88CE2355300
SHA-256:	6D9D99CCE509D7E8FF09508FDC1FB8167C6E057063B4F38669883459328F686E
SHA-512:	5E668594377E86424C527025A392C4E6BBAB7189686B794151C6AA76288A6D5CCF531FF95D3B0B95ED3CD4CD04DC69E586F78EEBA36A418462B315EA87C0F7F3
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/bmdaem-domains/news/clientlibs/clientlib-news-site.min.2adab4a18a55724b1c083e290fb6c95a.css
Preview:	/. Copyright 2017 Adobe. . Licensed under the Apache License, Version 2.0 (the "License");. * you may not use this file except in compliance with the License.. * You may obtain a copy of the License at. . http://www.apache.org/licenses/LICENSE-2.0. . Unless required by applicable law or agreed to in writing, software. * distributed under the License is distributed on an "AS IS" BASIS,. * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. * See the License for the specific language governing permissions and. * limitations under the License.. /./* @define image */..c-image__image {. width: 100%;.}...screen-reader-only{position:absolute;left:-625pc;top:auto;width:1px;height:1px;overflow:hidden}.c-authentication__button{cursor:pointer}.slick-slider{-webkit-box-sizing:border-box;box-sizing:border-box;-webkit-touch-callout:none;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none;user-select:none;-ms-touch-action:pan-y;touch-

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\common[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	110409
Entropy (8bit):	5.063213551221806
Encrypted:	false
SSDEEP:	1536:S2kwVhQcQuuoArRpkGlCmzu7Q07wsgvPcYj8gA:C+Quuox
MD5:	8E028ADDFE3CF8FE86BDB7E167C6ECE1
SHA1:	50585437938A2290A7FED6EBB20F74D04E97A5C9
SHA-256:	54BA29F7FF5DDDA304B4534A3AF50DCB70CE6C727AB0FB85000A59DDC63D2F66
SHA-512:	3B27E41F40CEC98E2C02AA10496DF1D65445383D81464BF613FE41BBCBEEB085FF8FD3E74DB85BA2D6710CF111AA05FC49B215E17B8714B8710614FC98CF926F
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/css/common.css?v1
Preview:	@import url("tooltipster.css");html{display:none}html,body,div,span,applet,object,iframe,h1,h2,h3,h4,h5,h6,p,blockquote,pre,a,abbr,acronym,address,big,cite,code,del,dfn,em,img,ins,kbd,q,s,samp,small,strike,strong,sub,sup,tt,var,b,u,i,center,dl,dt,dd,ol,ul,li,fieldset,form,label,legend,table,caption,tbody,tfoot,thead,tr,th,td,article,aside,canvas,details,figcaption,figure,footer,header,hgroup,menu,nav,section,summary,time,mark,audio,video{margin:0;padding:0;border:0;outline:0;font-size:100%;line-height:1.6;vertical-align:baseline}article,aside,details,figcaption,figure,footer,header,hgroup,menu,nav,section{display:block}ol,ul{list-style:none}.articleBody ol,.WYSIWYGPageEditor ol{list-style:decimal;list-style-position:inside}.articleBody ul,.WYSIWYGPageEditor ul{list-style:disc;list-style-position:inside}blockquote,q{quotes:none}blockquote:before,blockquote:after,q:before,q:after{content:" "}ins{text-decoration:none}del{text-decoration:line-through}table{border-collapse:collapse;border-s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\config[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	79882
Entropy (8bit):	4.831480506226318
Encrypted:	false
SSDEEP:	1536:YHHSHsKQL3/9SJEIsNuI9krDV8z5Rmml+xdF5zUZea:5HpcExuRmXdTUn
MD5:	DA295FFE99AB138AD846A850EBD210F5
SHA1:	375E59FA49749D14D178638A6473A37D4E94311D
SHA-256:	FA3BEB3D3C2FA617405538CD5FD1606A3CDFB5DFA6F45BD4E9942A73A14C66FE
SHA-512:	B76280E035893F6488D67A57C8E56A95D4D9D1A29FC74727D8609D1A43D506EE1BB44113BACE690EF0E16495C7685DF4F7D660FD5981D5DEB38101737B43FAE1
Malicious:	false
Reputation:	low
IE Cache URL:	https://confiant-integrations.global.ssl.fastly.net/5rJjPRoNo_MlaGcpOA6YOlm0Fmw/gpt_and_prebid/config.js
Preview:	/* eslint-disable spaced-comment */.(function() {. var confiantGlobal = window.confiant \|\| (window.confiant = {});. var clientSettings = (window.confiant && window.confiant['5rJjPRoNo_MlaGcpOA6YOlm0Fmw'] && window.confiant['5rJjPRoNo_MlaGcpOA6YOlm0Fmw'].clientSettings). \|\| window.confiant;.. var integrationSetting = {. config_ver: '202103190202',. integration_type: 'gpt_and_prebid',. prebid_integration_version: clientSettings.prebid_integration_version \|\| '202103091517',. gpt_integration_version: clientSettings.gpt_integration_version \|\| '202103091517',. c_integration_version: clientSettings.c_integration_version \|\| 'undefined',. native_integration_version: clientSettings.native_integration_version \|\| '202103091518',. exec_test_ver: null,. };. function defaultCallback() {. console.log('Confiant: ad blocked', arguments);. }.. var settings = {. propertyId: '5rJjPRoNo_MlaGcpOA6YOlm0Fmw',. adServer: 'https://protected-by.clarium.io',. confiantCd

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\config[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	340
Entropy (8bit):	5.135790086905765
Encrypted:	false
SSDEEP:	6:Ysr+eY4XlvOECjKJ8mgO9l3FCOfUENnYKHgjOzUWqIQCpCgKLS5Q2ueMTHOnmrXR:Ysr+ba9Ooiu39DYKHgyzXtQCBQSrSOmt
MD5:	1F62BDF98AA9441F5C052D087AE12DA4
SHA1:	000A36B0F538ECFF31D77050ABDD11D3D217B1B0
SHA-256:	47788D94B7B5DAB17D13A394E02DF0CE6442FDF1F659D03B7FB3EBA6D740BC4A
SHA-512:	EE0DABD4ABB9DFAE41FCC8494C2F93BC85EFD4ECED0478053CCAA1EAC36683D84D1DFC1614F18E541DF7257FBA347E891B9CA222F87C5E6EEB786BDCA5EB802F
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.amazon-adsystem.com/cdn/prod/config?src=3733&u=https%3A%2F%2Ftoronto.ctvnews.ca%2Fmore%2Fbios%2Fsean-davidson-1.4670847
Preview:	{"3pvendor":"var propertyId = '5rJjPRoNo_MlaGcpOA6YOlm0Fmw'; var scriptTag = document.createElement('script'); scriptTag.src = '//confiant-integrations.global.ssl.fastly.net/' + propertyId + '/gpt_and_prebid/config.js'; scriptTag['onload'] = function(e) { window.creativeVendorLibraryLoaded = true;}; document.head.appendChild(scriptTag);"}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\config[2].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	340
Entropy (8bit):	5.135790086905765
Encrypted:	false
SSDEEP:	6:Ysr+eY4XlvOECjKJ8mgO9l3FCOfUENnYKHgjOzUWqIQCpCgKLS5Q2ueMTHOnmrXR:Ysr+ba9Ooiu39DYKHgyzXtQCBQSrSOmt
MD5:	1F62BDF98AA9441F5C052D087AE12DA4
SHA1:	000A36B0F538ECFF31D77050ABDD11D3D217B1B0
SHA-256:	47788D94B7B5DAB17D13A394E02DF0CE6442FDF1F659D03B7FB3EBA6D740BC4A
SHA-512:	EE0DABD4ABB9DFAE41FCC8494C2F93BC85EFD4ECED0478053CCAA1EAC36683D84D1DFC1614F18E541DF7257FBA347E891B9CA222F87C5E6EEB786BDCA5EB802F
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.amazon-adsystem.com/cdn/prod/config?src=3733&u=https%3A%2F%2Ftoronto.ctvnews.ca%2Fmore%2Fbios%2Fsean-davidson-1.4670847%3FcontactForm%3Dtrue
Preview:	{"3pvendor":"var propertyId = '5rJjPRoNo_MlaGcpOA6YOlm0Fmw'; var scriptTag = document.createElement('script'); scriptTag.src = '//confiant-integrations.global.ssl.fastly.net/' + propertyId + '/gpt_and_prebid/config.js'; scriptTag['onload'] = function(e) { window.creativeVendorLibraryLoaded = true;}; document.head.appendChild(scriptTag);"}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\config[3].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	340
Entropy (8bit):	5.135790086905765
Encrypted:	false
SSDEEP:	6:Ysr+eY4XlvOECjKJ8mgO9l3FCOfUENnYKHgjOzUWqIQCpCgKLS5Q2ueMTHOnmrXR:Ysr+ba9Ooiu39DYKHgyzXtQCBQSrSOmt
MD5:	1F62BDF98AA9441F5C052D087AE12DA4
SHA1:	000A36B0F538ECFF31D77050ABDD11D3D217B1B0
SHA-256:	47788D94B7B5DAB17D13A394E02DF0CE6442FDF1F659D03B7FB3EBA6D740BC4A
SHA-512:	EE0DABD4ABB9DFAE41FCC8494C2F93BC85EFD4ECED0478053CCAA1EAC36683D84D1DFC1614F18E541DF7257FBA347E891B9CA222F87C5E6EEB786BDCA5EB802F
Malicious:	false
Reputation:	low
IE Cache URL:	https://c.amazon-adsystem.com/cdn/prod/config?src=3733&u=https%3A%2F%2Fwww.ctvnews.ca%2Fhealth%2Fcoronavirus%2Fcanada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1.5352524
Preview:	{"3pvendor":"var propertyId = '5rJjPRoNo_MlaGcpOA6YOlm0Fmw'; var scriptTag = document.createElement('script'); scriptTag.src = '//confiant-integrations.global.ssl.fastly.net/' + propertyId + '/gpt_and_prebid/config.js'; scriptTag['onload'] = function(e) { window.creativeVendorLibraryLoaded = true;}; document.head.appendChild(scriptTag);"}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\container[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	6094
Entropy (8bit):	5.594357023995857
Encrypted:	false
SSDEEP:	96:C4QlVsk1gm+WbQSD/ly928hOzzS1m5aCKhmI5NC2LaLObolrxJ4FjMZ3zj:C4QlVEPaQQ/lc5+zSbhmI5Y2La6bTMDj
MD5:	5BF6D4D82A62935545D23B69A08BA8F8
SHA1:	EFECB9DADA10AE70E7C644BAAC0ADD7526058E0E
SHA-256:	A73730123A43C3040D889AAEE11EC35094277CE5F778076B262C23A293870ADB
SHA-512:	60CF7BC7BCFA2D096A9AFDEDA9B3EE112E73512727E6CEDC1D99E4E149431DB381763341BD93C4321A52A52C54F75F92F1D4EAB4D85CBCE5F42CAA7A3E71CE5F
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/safeframe/1-0-38/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var m=this\|\|self,w=function(a){return a};var x;var z=function(a,b,c){this.g=c===y?a:""};z.prototype.toString=function(){return this.g.toString()};var y={};var C=function(a,b){var c=void 0===c?{}:c;this.error=a;this.context=b.context;this.msg=b.message\|\|"";this.id=b.id\|\|"jserror";this.meta=c};var D=function(a){D[" "](a);return a};D[" "]=function(){};var E=/^(?:([^:/?#.]+):)?(?:\/\/(?:([^\\/?#])@)?([^\\/?#]?)(?::([0-9]+))?(?=[\\/?#]\|$))?([^?#]+)?(?:\?([^#]))?(?:#([\s\S]))?$/;var I=function(a,b){if(a)for(var c in a)Object.prototype.hasOwnProperty.call(a,c)&&b.call(void 0,a[c],c,a)};var J=/^https?:\/\/(\w\|-)+\.cdn\.ampproject\.(net\|org)(\?\|\/\|$)/,K=function(a,b){this.g=a;this.h=b},L=function(a,b){this.url=a;this.j=!!b;this.depth=null};var M=function(a){m.google_image_requests\|\|(m.go

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\controltag.js[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	255346
Entropy (8bit):	5.333485044151254
Encrypted:	false
SSDEEP:	3072:XVzSZUR5YJGjGcc8qS027Mt7/WPMr5fGmd4vVpCTd1kUSD6zcrbfR:XVzakjXq8Mr7d4vhOG
MD5:	C3D6B4CEE41D11F8CABF66D974C1842E
SHA1:	59D6C52CE83A6D770B9E5F313B5748127A8FBBBE
SHA-256:	3C9C46BB150B2ED41F5DD685FF25B03747E5B29EAC72B1BAA63A6E54A4A1BCCB
SHA-512:	AAACE27B1B9293E90106920479664A68533EA459DBCC0FF6B3136C7403C6D8C412D83F1B754DB5E65E5C87F8820F9490F4F98EB06E3C95ACCEEEE21B889FE58E
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.krxd.net/ctjs/controltag.js.e4cdf7ad64ebac73f207c1ce55cc1727
Preview:	/*. @version v6.44.17. * @copyright Copyright 2020 Krux Digital, Inc. All Rights Reserved.. */.!function(t){function __webpack_require__(n){if(e[n])return e[n].exports;var r=e[n]={"exports":{},"id":n,"loaded":!1};return t[n].call(r.exports,r,r.exports,__webpack_require__),r.loaded=!0,r.exports}var e={};__webpack_require__.m=t,__webpack_require__.c=e,__webpack_require__.p="",__webpack_require__(0)}([function(t,e,n){t.exports=n(1)},function(t,e,n){var r,i,o,s;null==(i=null!=window.Krux?window.Krux:window.Krux=function(){window.Krux.q.push(arguments)}).q&&(i.q=[]),r=window.Krux,o=n(2),(s=/kxdebug=?(trace\|debug\|info\|warn\|error\|silent)?/.exec(window.document.cookie))?s[1]?o.setLevel(s[1],!1):o.setLevel("debug",!1):o.setLevel("silent",!1),r.commit&&!r.ns\|\|(null==r.commit&&(r.commit=1),t.exports=window.Krux=function(t,e){var i,o,s,a;if(null==e.params&&(e.params={}),s=e.params.control_tag_namespace,window.Krux=r,null!=(o=n(4).init(s,function(){return n(74).call})))switch(i=null!=(a=r.q[0])?

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\controltag[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	28178
Entropy (8bit):	5.381432747694635
Encrypted:	false
SSDEEP:	768:mnppa5a5Q6G5DpUrG0TbxDb734sDUUq2a/6d3dddTdwdTCnfdtdedEdeEpdeWde6:mnppaqLGnY9Db7IWUUq2a/qNH/v
MD5:	BAF517E96CA244D3CBA8F8F2A29A6093
SHA1:	AF4CF26AC31AFFC34783E1C5FFF5029A7FE12C7C
SHA-256:	9EB2A25719506923C5B68CD1832B99077EEE2B3D6231D5FEE55C519F26C1B079
SHA-512:	470B495B537C49AC3323BA1AC44D50E90B3F4CE8F1CA13E909BA0449A32F08381310FA4505660A35584D3EBCF3C37B529AF31AA8077B564E2FED755EFF5C6685
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.krxd.net/controltag?confid=ImoeZsch
Preview:	..../* ControlTag Loader for Bell Media ca46aa22-e6b4-464e-9077-7215dc98bc0a */.(function(w, cs) {. . if (/Twitter for iPhone/.test(w.navigator.userAgent \|\| '')) {. return;. }.. var debugging = /kxdebug/.test(w.location);. var log = function() {. . debugging && w.console && w.console.log([].slice.call(arguments).join(' '));. };.. var load = function(url, callback) {. log('Loading script from:', url);. var node = w.document.createElement('script');. node.async = true; . node.src = url;.. . node.onload = node.onreadystatechange = function () {. var state = node.readyState;. if (!callback.done && (!state \|\| /loaded\|complete/.test(state))) {. log('Script loaded from:', url);. callback.done = true; . callback();. }. };.. . var sibling = w.document.getElementsByTagName('script')[0];. sibling.parentNode.insertBefore(node, sibling);. };.. var config = {"app":{"name":"krux-scala-config-webservice","version":"3

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ctv-contentnew-bg[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 2x34, frames 3
Category:	downloaded
Size (bytes):	4071
Entropy (8bit):	3.9679742639584243
Encrypted:	false
SSDEEP:	48:HqFak/9WmPN/allBeiPF1MQctYHaVPLAl:tkVWmPN/cBr1MHt9VUl
MD5:	91A7530D26198F286069887D8A64A493
SHA1:	A03C1513C97F3FCB3E00C762B2E12B06EF19A704
SHA-256:	C35741087F4C166926DDEC5B09CA2D709208789E44C15F2C976A598913E7C1C2
SHA-512:	2AFFF352F1CB7E97D3C36865544B038F7551F072E1A002548F8989E710ACF8B752572F9760580D3BFCB349E80F6A174A7D79DCE2749076BB887A71AE82995AFC
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/ctv-contentnew-bg.jpg
Preview:	......JFIF.....d.d......Ducky.......P.....Ihttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". xmpRights:Marked="False". xmpRights:WebStatement="". photoshop:AuthorsPosition="">. <dc:rights>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </dc:rights>. <dc:creator>. <rdf:Seq>. <rdf:li/>. </rdf:Seq>. </dc:creator>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </dc:title>. <xmpRights:UsageTerms>. <rdf:Alt>. <rdf:li xml:lang="x-default"/

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ctv-search-box-grd[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 148x24, frames 3
Category:	downloaded
Size (bytes):	4535
Entropy (8bit):	4.53185945399892
Encrypted:	false
SSDEEP:	48:HqFak/9WmPN/allBeiTF1MQctYHaVPL87777777HI999f:tkVWmPN/cBP1MHt9VA7777777HI999f
MD5:	92E5E1AE34141E80E480802ECA35C260
SHA1:	0766F37FF1730FC481C4D820E9369D698F1C1A9A
SHA-256:	EC911F37A800EFECF6D05399E688D8B309AC9D080A5E5DB51CC88A9D48FBC359
SHA-512:	65DA0762777695403030DB887FA5E202DA9A467BAA987D64BCF0A2C2D394C9CC80B259DEC13FE6ACB1BB6023BB14D0A346C01E5C85F98E2AF4BF158C1AFBAA94
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/ctv-search-box-grd.jpg
Preview:	......JFIF.....d.d......Ducky.......P.....Ihttp://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 4.2.2-c063 53.352624, 2008/07/30-18:12:18 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/". xmlns:photoshop="http://ns.adobe.com/photoshop/1.0/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". xmpRights:Marked="False". xmpRights:WebStatement="". photoshop:AuthorsPosition="">. <dc:rights>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </dc:rights>. <dc:creator>. <rdf:Seq>. <rdf:li/>. </rdf:Seq>. </dc:creator>. <dc:title>. <rdf:Alt>. <rdf:li xml:lang="x-default"/>. </rdf:Alt>. </dc:title>. <xmpRights:UsageTerms>. <rdf:Alt>. <rdf:li xml:lang="x-default"/

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ctv-styles-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5
Entropy (8bit):	0.7219280948873623
Encrypted:	false
SSDEEP:	3:NVn:/
MD5:	1FFA6AFAE980D20B989794057FDF02CE
SHA1:	B4687F265EB717DFA144B691454B3812EE3BC68F
SHA-256:	63AD8E85349FE11819885976EF96CBE3F6F65C288B290713ACADBDF9A9280388
SHA-512:	CA0FFB5FACD39DA98D74D729EB1EDC1AAFF8E985C76B41C3EE8FEC32D09F3DA21D8D7968E54FCA54AC52219D426B49E56A7951E506306D0AD7874EC6B6312E49
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/ctv-styles-7.132
Preview:	.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ctvnews-ca-covid-all-news-tag-driven-1[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	XML 1.0 document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	13650
Entropy (8bit):	4.993025358467264
Encrypted:	false
SSDEEP:	384:TYP6mQksaDwMGOhPZ6rK8cSp4hWQAWs6sCzsascz93sIsXh7Ws4sNwrsUsPruG3y:szxzEzrE
MD5:	64C08EF1DFBA7A10C5A7565BEC2C777B
SHA1:	FE2CC03C3541A70E80CD6A6BB6D94543C9C95DFE
SHA-256:	BAF3417510951A463FF503FD341FC4F2229A01ABD5FDECC376D0668E5D4F77AA
SHA-512:	CAD6CD64C72BFE9EB877FA2AD8450874E813DCBA747866A6130CAA158DABCFE01E70D242D23BF6EC94669E7BB6D3FC357E6EEF3D62FA55883106D3190BE7282D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/rss/ctvnews-ca-covid-all-news-tag-driven-1.4866013
Preview:	<?xml version="1.0" encoding="UTF-8"?>.<rss version="2.0" xmlns:ctv="http://www.ctv.ca/rss/" xmlns:dc="http://purl.org/dc/elements/1.1/">. <channel>. <title><![CDATA[CTVNews.ca COVID - all news tag driven </title>.<link>https://www.ctvnews.ca/rss/ctvnews-ca-covid-all-news-tag-driven-1.4866013</link>.<description>. . </description>.<lastBuildDate>Fri, 19 Mar 2021 02:10:30 -0400</lastBuildDate>. <language>en</language>.<copyright>Copyright Bellmedia</copyright> <item>. <title><![CDATA[China concludes espionage trial of Michael Spavor behind closed doors </title>. <link>https://www.ctvnews.ca/politics/china-concludes-espionage-trial-of-michael-spavor-behind-closed-doors-1.5353506</link>. <description><![CDATA[The trial of Canadian citizen Michael Spavor, detained by China since late 2018 on suspicion of espionage, ended on Friday after closed-court hearing of around two hours, in a case embroiled in a wider diplomatic spat between Washington and Beijing.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ctvnews_layout[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	25553
Entropy (8bit):	5.017684821634576
Encrypted:	false
SSDEEP:	192:JoCPEfkaR4pwxYKlxteI1DUZnVH2ycMVDiAwkrqXkvncmXIS/NY/NYdNoNLNBsc3:o8hpSxSyUZtwAwfENPlgh4Lcf/WPXYZ
MD5:	1EBDAA8DAB74EE42C97723B7A453328F
SHA1:	0D1275BE2051E0EEDB8B3EA8EE461B1DA6A52E06
SHA-256:	9A7C1A8BC484838154756622BF741DFB49852673AE8577CF8641210B73FC5F65
SHA-512:	10DABD9B2AD20829DD9039C3DFDD4808ED5DD051629254AC62D032C6F14927EC793E924D46D684E56EB5CAF7905B19F6FDA291E942A2B3D36C8B348FFFFB7ED6
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/css/ctvnews_layout.css
Preview:	body{background:#fff}.breakingnewsTag h2.TagText,.topstorybn .teaser-image-top .bn-headline h2,.topstorybn .teaser-image-top .bn-headline .tag,.list h3,.columnsplitter h3,.content-secondary .list h3,.BNNVideoFeedContainer h3,.bookmarks h3,.BeforeAfterWrap h3,.articleHeadline,.videonav .videoPlayListContainer h4,.vhBrowse,.videoContainer h4,.videoPortalLeft dl,.videoPortalLeft .local,.videoPortalLeft .vhLive,.videoPortalLeft .vhWatch,.galleryTitles{font-family:"Flama-Medium",arial,sans-serif;font-weight:normal}.content,.banner .boxAd.secondClass{background-color:#FFF}.banner .content-wrapper .advert{padding:10px 0;text-align:center}.banner .content-wrapper{background:#FFF url('../img/970_national_header.jpg') no-repeat 50% 0}.topAd .boxAd.secondClass,.topAd .advert{background:url("../img/ad-bar-bkg.gif") repeat-x scroll 0 0 #2d2d2d;width:970px;margin:0 auto;padding:10px 0 5px 0}.topAd .advert{padding:10px 0}.topAd .boxAd.secondClass .advert{display:block;padding:0}.topAd .boxAd p{paddin

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\dnserror[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	2997
Entropy (8bit):	4.4885437940628465
Encrypted:	false
SSDEEP:	48:u7u5V4VyhhV2lFUW29vj0RkpNc7KpAP8Rra:vIlJ6G7Ao8Ra
MD5:	2DC61EB461DA1436F5D22BCE51425660
SHA1:	E1B79BCAB0F073868079D807FAEC669596DC46C1
SHA-256:	ACDEB4966289B6CE46ECC879531F85E9C6F94B718AAB521D38E2E00F7F7F7993
SHA-512:	A88BECB4FBDDC5AFC55E4DC0135AF714A3EEC4A63810AE5A989F2CECB824A686165D3CEDB8CBD8F35C7E5B9F4136C29DEA32736AABB451FE8088B978B493AC6D
Malicious:	false
Reputation:	low
Preview:	.<!DOCTYPE HTML>..<html>.. <head>.. <link rel="stylesheet" type="text/css" href="NewErrorPageTemplate.css" >.. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <title>Can’t reach this page</title>.. <script src="errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="getInfo(); initMoreInfo('infoBlockID');">.. <div id="contentContainer" class="mainContent">.. <div id="mainTitle" class="title">Can’t reach this page</div>.. <div class="taskSection" id="taskSection">.. <ul id="cantDisplayTasks" class="tasks">.. <li id="task1-1">Make sure the web address <span id="webpage" class="webpageURL"></span>is correct</li>.. <li id="task1-2">Search for this site on Bing</li>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\down[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	748
Entropy (8bit):	7.249606135668305
Encrypted:	false
SSDEEP:	12:6v/7/2QeZ7HVJ6o6yiq1p4tSQfAVFcm6R2HkZuU4fB4CsY4NJlrvMezoW2uONroc:GeZ6oLiqkbDuU4fqzTrvMeBBlE
MD5:	C4F558C4C8B56858F15C09037CD6625A
SHA1:	EE497CC061D6A7A59BB66DEFEA65F9A8145BA240
SHA-256:	39E7DE847C9F731EAA72338AD9053217B957859DE27B50B6474EC42971530781
SHA-512:	D60353D3FBEA2992D96795BA30B20727B022B9164B2094B922921D33CA7CE1634713693AC191F8F5708954544F7648F4840BCD5B62CB6A032EF292A8B0E52A44
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............ex....PLTE....W..W..W..W..W..W..W..W..W..W..W..W..W.U..............W..W.!Y.#Z.$\.'].<r.=s.P..Q..Q..U..o..p..r..x..z..~.............................................b.............................................................................................................................................................................................................$..s...7tRNS.a.o(,.s....e......q*...................................F.Z....IDATx^%.S..@.C..jm.mTk...m.?\|;.y..S....F.t...,.......D.>..LpX=f.M...H4........=...=..xy.[h..7....7.....<.q.kH....#+....I..z.....'.ksC...X<.+..J>....%3BmqaV...h..Z._.:<.Y_jG...vN^.<>.Nu.u@.....M....?...1D.m~)s8..&....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\election-client[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	26259
Entropy (8bit):	5.179144213846928
Encrypted:	false
SSDEEP:	192:4yzwlLNWwTCf3GtmfanYjTFInmnGIWUOV6FiwG3+BXx021xpnIF:/zYpJTSl8IWjYXPIF
MD5:	C2FF1C3858AC17E0FFA3374CBFFD8065
SHA1:	0166662533BD8E014A473E177494703F545B17F7
SHA-256:	820354527496A80F202B15F6C22DA1AF4C1CAD160BDF8670C8E341E45FAA07A0
SHA-512:	33792ACC59E662F00AEF44BE32AFB3A0704665F005CE9F3A5D0B9CF849F2B8362F2B998955AF3C388C37933E4699F6527C9D380E194E12F6944B71AB3473A546
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/elections/federal2019/election-client.css
Preview:	svg{overflow:hidden}*,body,svg,path,polygon,rectangle{-webkit-tap-highlight-color:rgba(0,0,0,0)!important;-webkit-tap-highlight-color:transparent!important}path{fill-rule:evenodd}button,.clickable{cursor:pointer}.no-clicks{pointer-events:none}img.checkmark{height:16px;width:16px;padding:0 8px}.phone img.checkmark{height:12px;width:12px;padding:0 4px}div.vmid{position:relative;top:50%;-webkit-transform:translateY(-50%);-moz-transform:translateY(-50%);-ms-transform:translateY(-50%);-o-transform:translateY(-50%);transform:translateY(-50%)}div.vbot{position:absolute;bottom:0}div#CTVECConfig{font-family:"CTVSans-Bold","CTVSans","Arial",sans-serif}div#CTVECmap{position:relative;z-index:5}pre.debug{overflow:auto;background-color:black;color:green}div.liveres{width:100%}div.liveres svg{padding-bottom:10px}div.liveres svg{border:1px solid #e0e0e0;padding-bottom:0;width:99.8%;height:25px}div.liveres .pts{height:35px}.NODATA{fill:#fff}div.liveres svg .BQ{fill:#009cb4}div.liveres svg .GRN{fill:#12

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\election-fixes-2019-elected-and-leading-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	2196
Entropy (8bit):	4.6457595382390116
Encrypted:	false
SSDEEP:	24:JUaFfNEHM80HA/HPlvXMCMaMLcMTFTiMmELuPoMaM6AvoMxMCqMWgMEcEZx8y9gH:JUaJN6KQHPBR5UeWLrQA2uzzbnck
MD5:	6A79F24E64874771AB795B6E5F5ED50F
SHA1:	D16144D4AD5778BD6A9EFFF770AFD7965FF3F48B
SHA-256:	B12713411F690E60562A9896E4892415378C789B6588BB56EE5B6B78B8105676
SHA-512:	87409D48C52DC2244C7E807DA53F4C1090130D16F12CBF017D0FB22A3533B1198977A0A746ED3A6A112408113EC1F177D174B283BBADCB690FC4DB2C69344E49
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/election-fixes-2019-elected-and-leading-7.736920
Preview:	#CTVECdeviceIndicator:after{.. visibility: hidden;.. }.... .elected-leading-link{.. text-decoration: none;.. }.. .. .elected-leading-link.ctv-news {.. margin-bottom: 20px;.. display: block;.. }.... div.liveres div.elhead{.. font-size: 1.1em;.. color: #4a4a4a;.. }.... @media only screen and (min-width: 992px){.. .shows-player .grey-background, .playa .grey-background {.. top: 0;.. }.. }.... .elected-leading-link.ctv-news div.liveres div.elhead {.. font-family: "Flama-Medium",arial,sans-serif;.. color: #000;..}.... div.liveres div.elhead,.. div.liveres .pts .pty .nm, div.liveres .pts .pty .el {.. font-weight: normal;.. }.... div.liveres .pts .pty .el{.. color: #4a4a4a;.. }.... div.liveres .pts .pty .nm.IND{.. color: #323232;.. }.. .. @media only screen and (min-width: 577px) and (max-width: 812px){.. div.liveres .pts .pty .nm, div.liveres .pts .pty .el {.. width: 100%;.. padding: 0.4em 0;.. font-size:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\errorPageStrings[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	9440
Entropy (8bit):	5.164796203267696
Encrypted:	false
SSDEEP:	192:JsUOG1yNlX6ZzWpHOWLia16Cb7b4sUOG1yNlX6ZzWpHOWLia16Cb7bk:JsDhpNOWLiIb7b4sDhpNOWLiIb7bk
MD5:	9FDEE838E7C036092E81A4E7CC949643
SHA1:	364FC6C36972FFD803E5999AD501F3D7A2216FDF
SHA-256:	C6BF586821E13F7F6D6EF75AA82E69BD5E3E1336615C85AE513C70704F5C0787
SHA-512:	622BC3BD9F0615C191B03F2E8D018867C9D9ADCF1015DA5FB4D3462D71512B72558B32CA9F74A925C150B57FD232ABD48AFFC8D32128C50540DF02FCA8ECBB2B
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/errorPageStrings.js
Preview:	.//Split out for localization...var L_GOBACK_TEXT = "Go back to the previous page.";..var L_REFRESH_TEXT = "Refresh the page.";..var L_MOREINFO_TEXT = "More information";..var L_OFFLINE_USERS_TEXT = "For offline users";..var L_RELOAD_TEXT = "Retype the address.";..var L_HIDE_HOTKEYS_TEXT = "Hide tab shortcuts";..var L_SHOW_HOTKEYS_TEXT = "Show more tab shortcuts";..var L_CONNECTION_OFF_TEXT = "You are not connected to the Internet. Check your Internet connection.";..var L_CONNECTION_ON_TEXT = "It appears you are connected to the Internet, but you might want to try to reconnect to the Internet.";....//used by invalidcert.js and hstscerterror.js..var L_CertUnknownCA_TEXT = "Your PC doesn\u2019t trust this website\u2019s security certificate.";..var L_CertExpired_TEXT = "The website\u2019s security certificate is not yet valid or has expired.";..var L_CertCNMismatch_TEXT = "The hostname in the website\u2019s security certificate differs from the website you are trying to visit.";..var L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\f[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2213
Entropy (8bit):	5.4055823551793205
Encrypted:	false
SSDEEP:	48:ax0tF7QWGf8HFwiMPHAHF+lbPxOTbMnuNUofvof0:nsWGEHaHAHFPbMnuTO0
MD5:	8C97D8788EE127BD9111AC41A443DC09
SHA1:	BA87D83CB7A061EAAB7E37E5DCF962543490DB78
SHA-256:	23C061E7D440B7804C374DAE567E47162A04CACC44E35B5C35065629D8F2B3CE
SHA-512:	6DC3FF56C59B202CE869FB845C648E46DF29321C172A6704A203212E834EAABCFA107DF15B810AA514F223F1D6223235288102F95F2F6112EED9B6B74DA6963E
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/pagead/js/r20210316/r20110914/client/window_focus.js
Preview:	(function(){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function e(a,b,d){a.addEventListener&&a.addEventListener(b,d,!1)};function g(a,b,d){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),d);else null!=b&&d.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function h(a,b){a.google_image_requests\|\|(a.google_image_requests=[]);var d=a.document.createElement("img");d.src=b;a.google_image_requests.push(d)};function k(){var a=document.currentScript;return(a=void 0===a?null:a)&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var l=document,m=window;function n(){var a=p["gws-id"],b=p["qem-id"];this.l=p.url;this.m=a;this.o=b;this.i=!1;a=q(l.hidden)?{g:"hidden",h:"visibilitychange"}:q(l.mozHidden)?{g:"mozHidden",h:"mozvisibilitychange"}:q(l.msHidden)?{g:"msHidden",h:"msvisibilitychange"}:q(l.webkitHidden)?{g:"webkitHidden",h:"webkitvisibilitychange"}:{g:"hidden",h:"visibilitychange"};this.g=a.g;this.h

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\f[2].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	34974
Entropy (8bit):	5.473475146437628
Encrypted:	false
SSDEEP:	768:+KlfTJM/E2aAdQBZkESvHy8ZkqTQ+LP+PXqR:+Klras2a0ESvSJ2
MD5:	880D21EEEC4A2E28B52EC1AE6774BCAC
SHA1:	E9D2776CBB2C5E721C744003915A47A68A913CD5
SHA-256:	891A63DB6B5BC009B545255EC056437CE70CA924EFC4AF92E42AC42AE22D0382
SHA-512:	D38C587422210CA89A3A81D4B6B7DB9DF96E3CE2F29F48F00BC214E56413C7805D5CDAD194723EC7A80149CF463F74CFD9BA0F76C4041791727A9ADD07978554
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/pagead/js/r20210316/r20110914/client/one_click_handler_one_afma.js
Preview:	(function(){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var q;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var r=ca(this);function t(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var f=a[d];if(!(f in c))break a;c=c[f]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .t("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c("jscomp_symbol_"+(f\|\|"")+"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\g[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\gpt[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	59205
Entropy (8bit):	5.596196252033274
Encrypted:	false
SSDEEP:	768:cjDmMynN8qUK3cYIoSt0CyWKFWTpzqyQrE1JahLrcHjTnLbZCKtLj:mDmMyN8XoStRtqFE1khLrcv/ZCKtLj
MD5:	63E3EB4219AAF90A1F852FFB5D8AE06A
SHA1:	B725AC3644A30734FE6690E62FE327A085C71E69
SHA-256:	EC1CC15840EF2AACA7C9115C9FC435363FA809D8996DF79E5952A8778A9CDF52
SHA-512:	016167C18E9B840DEB6E95C60EF03F30C042382E7704E139533962EBE8BF81ABC2821AC73DDB0870D7544E1499A34FD35B7C36719ED760F162E5775EDF7EC2BE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagservices.com/tag/js/gpt.js
Preview:	(function(E){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),fa="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),m={},ha={},n=function(a,b){var c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]},q=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in m

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\gpt[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	59205
Entropy (8bit):	5.596105853976462
Encrypted:	false
SSDEEP:	768:cjDmMynN8qUK3cYIoSt0CyWKFWTpzqyQrE1JahLrcHj/sLbZCKtLj:mDmMyN8XoStRtqFE1khLrcI/ZCKtLj
MD5:	B46928E9196855D52B3B92670364CA7C
SHA1:	1F96B36BC4BD7C432B7C84725932298CB35AC52A
SHA-256:	13017036851276BDE25CF2542BE45E4C8F0C95963B4A025694ABD1CD56918010
SHA-512:	D47252FA96E9A939043A42E8AEF70F796B41E61FD93E9CFB888CB0FC6C82B19D5A2BD86BE75E236AA7288D8477D52E1E97ED9FDC3488438AA29D05E15C218CCD
Malicious:	false
Reputation:	low
IE Cache URL:	https://securepubads.g.doubleclick.net/tag/js/gpt.js
Preview:	(function(E){var window=this;if(window.googletag&&googletag.evalScripts){googletag.evalScripts();}if(window.googletag&&googletag._loaded_)return;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");},da=ca(this),fa="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),m={},ha={},n=function(a,b){var c=ha[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]},q=function(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in m

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\hide-g-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	218
Entropy (8bit):	4.5708633899072675
Encrypted:	false
SSDEEP:	6:I3E6OVJiEhTCcEBYFk373EPEBYFkBa73EwWVlIQ:wEiE1CcwlLEPwlSEjVv
MD5:	6D4B14199571B9CD78946095E6805AD5
SHA1:	DC42655B8C1AF98A350B007B153E547E80CEF918
SHA-256:	00495DD51A002EB2DB182674246C5D1B3881705F544FC8FB9BB88F4183015E34
SHA-512:	3B0A9ED2A05235C7DC57DBA777D14E41ADA41F181AEA156D1A5F49A1E0D2478BB39B7D5E04F196636440719580FD522860505325F31042E57BAFDAC3B221A2B2
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/hide-g-7.725977
Preview:	.gig-button-container-googleplus {display: none!important}...gigya-space #componentDiv div.gig-button-container-print, .gigya-space #componentBottomDiv div.gig-button-container-print {margin-left: 230px!important}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\httpErrorPagesScripts[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	12105
Entropy (8bit):	5.451485481468043
Encrypted:	false
SSDEEP:	192:x20iniOciwd1BtvjrG8tAGGGVWnvyJVUrUiki3ayimi5ezLCvJG1gwm3z:xPini/i+1Btvjy815ZVUwiki3ayimi5f
MD5:	9234071287E637F85D721463C488704C
SHA1:	CCA09B1E0FBA38BA29D3972ED8DCECEFDEF8C152
SHA-256:	65CC039890C7CEB927CE40F6F199D74E49B8058C3F8A6E22E8F916AD90EA8649
SHA-512:	87D691987E7A2F69AD8605F35F94241AB7E68AD4F55AD384F1F0D40DC59FFD1432C758123661EE39443D624C881B01DCD228A67AFB8700FE5E66FC794A6C0384
Malicious:	false
Reputation:	low
Preview:	...function isExternalUrlSafeForNavigation(urlStr)..{..var regEx = new RegExp("^(http(s?)\|ftp\|file)://", "i");..return regEx.exec(urlStr);..}..function clickRefresh()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..window.location.replace(location.substring(poundIndex+1));..}..}..function navCancelInit()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..var bElement = document.createElement("A");..bElement.innerText = L_REFRESH_TEXT;..bElement.href = 'javascript:clickRefresh()';..navCancelContainer.appendChild(bElement);..}..else..{..var textNode = document.createTextNode(L_RELOAD_TEXT);..navCancelContainer.appendChild(textNode);..}..}..function getDisplayValue(elem

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image15120KHR.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	9799
Entropy (8bit):	7.933069726620046
Encrypted:	false
SSDEEP:	192:37YL8OrFwHoLq05nEiiNhVWjoM+M6JRVQfhHWaBlhXz1cUuphO:37YdrFwH+qDiYCoL7JsfflZKLO
MD5:	E67038FCEDE0D707349372B1F932C061
SHA1:	53AD7BFC4998A799F93C915C15D5968D47E17E0C
SHA-256:	0D0A41B4176DBD32DFE0883E60E23519EAFE681C74D738D1CC95E251F631882A
SHA-512:	69A07E106549D5C264AD6CD02C7F344DD044EF327DB82170A9BEC6039789D99150AD1CE2B5DB860D0A541C32CB881A22CC792781BD7B6EA746B1EFE73215F2C9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5103715.1609268089!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...s.f.V....!.t.V..m...Pk.....5;={S.....G:o..'=H.....=F..J.xZP..'..O.....IV9Cj.....................;.n-.W~.>.....um.i.5.A.h"..q._..S[:...w"..K......w.K[X\|9....[0...+..H..9RvjC?/.u..u..kZU....c...8h(.....v....."`..]9...."9....~.Z...6......Zz*...\|.Vy...W4O...i.......s...p.......%..Y.......g.z....C=%<~5.f....j....E..l.^G'...?....9...L2....)X...}....N=h..t.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image1S454PSM.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	17277
Entropy (8bit):	7.953650087488212
Encrypted:	false
SSDEEP:	384:3hQpq3Raw3WTC/ncdHj71FkJFCCP59l1Xap1Nuahxi/cXY19kc:3epq3RtKOc/1yL/Xatuah0/3rB
MD5:	9FD6F4A4A64B2DE42D5A3D16462CF86A
SHA1:	E782698F85392BD8DC97AC2912F363B8621C8BAF
SHA-256:	00A0669232C6FD20E8D0DE6F187BEBE2A39ED3D381611BC694AEA7F0D26DDDEB
SHA-512:	8A570268725344BDF56FC8050F24B85CA743B45F2AEEF995AA5E9CAB65350DE8E127F3A43AFF1390B8AD80356176379DF75DF376BBEB1977B6098CE1E7F7E29D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4821090.1582242646!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..1.ZX...Kh.m1.".....^..K.he.v..s.y.!I.gq8.px5".bm...Xc@SvGQ....w........8..O.......q..M.\|....?.c....=........B.H6.8c.p.....L..4.F$...ch\...}G.b....wyMq!G./..........s...c...V..<O(c.RI%......Zr.k.........H..uB.C2..jm..8...{...i..x...i.H.1.c<p:.l.ku)..X..!p#.....GC.t......i.]...y...&s....s.......B..I=O...D.....@N...&..d)63.v>c.....ip\N..+.-..`...i.y.e.r.G-.'<...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image1W8BQ2AQ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	7294
Entropy (8bit):	7.91155138033747
Encrypted:	false
SSDEEP:	192:UFANsug3INQZsctRBhJ9vbwQqcoJOwbCUW:USNI3INQR97vsSos8xW
MD5:	996A729D6FC544CE9279704011E27254
SHA1:	7E3F4EAA21E6457A1595782DEA6F200B7428C75B
SHA-256:	FBD2538522C04F34FFD49111A4F74505483D189FCD55892AA6523F0654D01794
SHA-512:	8AFA25CD69AA221B5180E0F7C55ADC12911A2F9CF0A7C2798A19743598E4C76C4D25A45425300E7942172385BFFC0EDB9E0EFA11E1C8D4DDCDF11B7DD8279CF1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352503.1616083591!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...4.O].7Xh._._...I..b..T...............v.....=....J...$.s.'..o.x..?.~...[.x".S...m...[...y..w7...$..+-.{.R..\|.......x/...u.....<W6.{.....i..w.(.y#...o....(.@...6.+...SK..4.-...%.S.D.O..+?...]...q.5.x..:..4m*.V..U.Emo.S.6.hJ....1........g............>"j...m..i....#. .-.....E....h=.}_.+..o.....w?....O..~.......K..-.-$.HL..lp...z.........U.R.4..[...\|_&.n..jZ..C.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image2HYTGY14.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	108610
Entropy (8bit):	7.9619599775345415
Encrypted:	false
SSDEEP:	3072:99XuVYRFxwCKI1CDS7WdlDh9UK5/yzhNQh7sSDDIzPnx:0YR7wCXCxlDh995KzQmSGnx
MD5:	73F3E55854658E9DE27B679C5036A3D9
SHA1:	472C4846E2E12633C26D3E601E2B71D9924B11B7
SHA-256:	9261E4BACA0F0B9E7E6F30D5473F2683663433271FA5B5DFFF17FE38837CCC67
SHA-512:	7D1C3C18957C0733060189D907C45960055378C1FF7C8B43488DBE4BBE3C2AF15EC7E662C129BE41D4D33586E0CCFEAF50BDDE6BD389EB9D1998483C9F85645D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353576.1616123416!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...N{.>..c.p}i8..( .....p.............!.8.RI,z..4. 9.?..dz...<t..._\....pN)......a.1...g......%....8..t'.M.O..;.L.o....TR.q..p)...A@..r:..H.\|.T.....A.s.{..}9O#..c<..U ...Gq@.f ..).'i....n1..T..``.@.@@.i.(>........d....`..;.0i.d..ZJ..........Q...8..I.q..N.z.....Q....rwc......d..S.p...L.q..R..={.eq6..H*.....Q.....@$.S..BQK.....pNG..s$.%&08.)..~T...\.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image4FC09V1P.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	16408
Entropy (8bit):	7.934114280570825
Encrypted:	false
SSDEEP:	384:3cznn7+hoM3YVYjJfUq4tScbKW+VPVcT5AnKMI6CyADGd:3cT7iUCT4tScgSofbADGd
MD5:	84CE3F8478839371CA81AB38453AB480
SHA1:	FE25E93BC2FA00BA3ABBA05469B517C38C428B7C
SHA-256:	7CDF3DB3083064B1FA272BDDED42CE80F4D9B160518F22171D4F4B2B01D9388A
SHA-512:	A199B9F4700718C7064615F96F13069A29F9327CFC409EAD0620AE435719C5FCC1FBC9A784ACDE85A28550B5A18999A95BF95D7428FEF4023E44D72A818011F5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4362527.1554229726!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....i..K........u..ZG...x.iq.G.I..x.H.V.......P.C..(.c.Sx...G./.....<O...m/.'.t..t.s.7....JP..In..-f.....Id....._.Q...<. .\|O..{.]A..".F.Q.../ ..x....v@b...H..p............g_.S..........g.DU.W..h.[.3..?.3....h.f......\|].Q..p..ITR.i.;{.K.r..$...z~..9b.s......mw7/.W.T\|......._....[.Z...?.\|2....cY..v.."O.i:..VX....5.1.'......C....5.oO.\|t..?..5..A....6_..=.i..b

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image4X4S17FI.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	134267
Entropy (8bit):	7.9652231970562895
Encrypted:	false
SSDEEP:	3072:wGeycjdkos3+tZ+V9TblTRi95EVAst9D0KW:d6eBBMrcW
MD5:	0167AB4BDD72731B252DB3A7C49FCFCA
SHA1:	BDA4371E3797F7CF4B17468C4CA00199343DF34A
SHA-256:	C84B171D1F203B7DE38F8BE363124A2DD83E3040DE932D00AC3CC967DE69D05F
SHA-512:	1FB032E28AC63169705F9D5C1BEBAA0B3DF9370CC8DB69BF4855C974F4FBEA7306D68ECBC9848727F9677EC1112DFECFB4EC72A9E19C20F8968D4AB321385D86
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5301282.1612871177!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...6.YU.2@['.......]r..q..Olz..j..................}...aCu.N?J...6.v_...K.....v..d.X.a........F...B.}O......!".3....N...'..U..Rr.%....w...p......b..SpfV.Hs...V..9..?..l..++...K..o.=.....N....=...5.8;...&H..O..8 ......%..2.r...GN...Y..A..d.. .................Ti..J..e....8U-.S....0........g....v.Wh.0.v...E....@A..y.B.In..]..p..I....J...J..2.1..`....p?.]....Hb

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image509LCZLJ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	9350
Entropy (8bit):	7.913762366020084
Encrypted:	false
SSDEEP:	192:R93RFljrPyOpI/+I+DyTeuX1gRQEoao8z6BZybdHh983I0l8RuID:R9fljTHI2IkrS1AyudBiY0lc
MD5:	8F57FE658825007F0415E21054ACB19F
SHA1:	53DF5F863FBBD52F120DD3ED4DCE93AD82360305
SHA-256:	DFF10A5094268759E5F42A79339AC8379961D00D910C85544E1D11F347F6BAF3
SHA-512:	B3881FE9620104E768C7E4B4349B9BF1360D17123EADC349193FAFE6AB84FC224EEB8671D02770947D0B5180CFFAA5EC3DCD900BD3934D48BD71CFC7AC590CDC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5292462.1612290133!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..nI!..K+..8 .j.H..g*..%.O.5..$...7..j9$....Z'.k}3E..s.7...Ged....iz...7M6...s.S].5....<5......c....p^..l_7,...W..".,.C.u...Z..Q..xn\|........w..~.$P7..d.4..c...+.N...R.......$g'w......_...)..~.^.g...\|j.5...b:...2.._G_..1..('.(...W>...^.b.....J._.kG..x..-...=7./.......^<..Y.o#..c.o...W;Xdv.5.\x.&d.........uY...:....^.&..3^.>,.u.....W....@.....$s..~.....~.kP

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image5BFJGLL4.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	10819
Entropy (8bit):	7.931949092217268
Encrypted:	false
SSDEEP:	192:3iQVy0uZJCWWJSgrVWewR5LMD8wqjmOVS8w2PQPVRMakn:3iQVzu1WJSc8TLqhqjmOP0R6
MD5:	5A8ECB7725344A37EBB616DE2BB079CB
SHA1:	EF0740B885F765848B7B66D70055FB0BF1D769DB
SHA-256:	1E88C09159794C62861755F689BA917DCA8F4EDAF01892D8EE20F41AECE644FC
SHA-512:	25A7E1C1EFA2E8D9D3B5B179E86B07A2650391FC1D34C5334711E6F773C11A0BF2AE73A7917A3A8722D5073D501FE953A4AB0C06AAC996400B288FF7600CF8D8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5316144.1613758971!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......n.8@....y..qb......ql.~U...9...,..f@.........[.......g..R.........<n..h...W?._.1y>?....Ln...I..}k.....G.^...B.C..7g......\.T.Q.q..3_.Q.......,lt./......:t:...R.n6q.~.._\|M...;G.+.7....E.Y[H.;kH..}..g_...H...+..]..C.8. .es.R........K.I...?Z.*...E1 ,v.._..?.#...b,2.."..4.....[?f.....v.....O...\.:x.....H...................9<.RZ)[.?X...h.7..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image5NNJ7H71.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	6602
Entropy (8bit):	7.914163225187366
Encrypted:	false
SSDEEP:	192:U9gOrLWQd9XG8bqT1mK857eu79Pygl7uxTW:U9gOfWU92FTd857euhPjlihW
MD5:	DC0D11D65AAF8E3A3C916AC3C3E08CDB
SHA1:	1C9FDF7616A65D86296405F4359773660A7F4B21
SHA-256:	AD1AF63EC178364FAA2FE2C7F2ED9DE5D815788020A8AFD5F15615F88256B4DD
SHA-512:	F567D7A8CF344611FEC071D08CDCE69E0E6CE6CE2971130D3055ACA8EDC265049416A4D60CC120631E85E27E656DEDB2C0CD1C697C76D12C6ECB73F6A666309F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352777.1616092577!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..^t....k.4.w..k....zW.h..W=..5.=ud~....S..u..........#.5E.!n.K......:..Y.X.X\..s.6.Jn..\|...^..@.u..Y..j[4..I....`G.H2..s.+.[...:MCH.H....m..C...Q.p...Xl..S....%.......^0....o....G....H.UTrY.....)....r...%.(U.f58V8'.....v...&.....X..;...\.6.@..!.Gq.L..<-J..K...C...3.7...k.i..N#?.e.Q..~.mKPfF...NHN.....\=.....8,.....;G..n..e{........j....?c?.$.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image7TUK29GZ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x79, frames 3
Category:	downloaded
Size (bytes):	7794
Entropy (8bit):	7.910354317791981
Encrypted:	false
SSDEEP:	192:7Ok929xTa6HZ7CM/yQBclpiOWm1Ygcw9ew5e4or:7OQ+CMKxpileUw5+
MD5:	288F1C4B0C0D941503C28A24D9F682FD
SHA1:	5FE820EFD0166A590E5410B536D8C04EFDFDE21D
SHA-256:	67FB21F85A085D56012A082F1C1B9319E2411945F114C051BAF14477D3F616A6
SHA-512:	920DB4C4E2B85F179D763977A360AA9763282ABB2464E154941803347E59A31BADFD8934E12A25CA064BE1BA3FD725B9D32155A3B020ED5C0438F1A6A3AB896F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353391.1616112670!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................O...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...O..CX.7eP...w...V....a4.{m....9..?._ij^..w.R4fBC....y...x>}..s.W....W.O....G..\|....I_.g.[.n..lZ.2da....................%..p...........#.......).u..g.Yw..GJ..0........!....k6<.-.@.3U.t..h.5..Z...+`.xc.B..esslGO&f_.U..\|U.C5..n"....g.M.@...b..R...J...s.....c..^.^..b..n.km......~..._.s\G.........i.`:g.k.?...f.G..O.....vN..N..0>^;W.zF....^.......F..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image83AJV3S1.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	120225
Entropy (8bit):	7.956866751452376
Encrypted:	false
SSDEEP:	3072:gkAp01xjwxobBXTuKcjwvU7R4DKCy4ZasmotreEhWcITY:gku0PcwjcjZfCyW/tre3TY
MD5:	FAFE8FE72FBAF96A88263D060A2F1BA4
SHA1:	9F6377C066621488736C702A05A22AB94BCD880F
SHA-256:	DC80B8A81A6E4221E38C845CD4909646AE44F4353AEABE8880E6AE1592DADC8D
SHA-512:	1488B55718675F58116CCB513B748B2524115969645221B2D8F86B06397D8BB2710F293FBADB8563AAE931F77FC42341872D73CA7607DBCDBC6104C2E709E91E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5318415.1613960245!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..4.`.0Xtc..B.Kryc....1.l.9-...&.0y...GA...I#..4.`..0I.W..T....9..})P+\|..O'n..!e...sLJh..06.w..(..q..l....T....=.RF.0# .F...L..gS./).s.z...+.4.T..N.I=k..T0C.@'..^...YT.n..q..#zn.=?G.6.9# ...OI..d.......1....q.`{....L..G.V-Y.i.....;C..21...#....G...~.k.t..W$cp..}>..:F1.....b..N.F.~...d.L.Ez.....S.6.....9B.Pc*O.k.4..Uq..`....P....P.T...`'.k.4Q.i....lW.....C...c9.z.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image8FXRZXW9.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	11291
Entropy (8bit):	7.914970098278885
Encrypted:	false
SSDEEP:	192:RKmlqbmYrY4IDumvpPFx4qHmDqsIs3svbkMQZ9tBzN4fPRwLyIIEx:RKvmYr6uQppG+sISHL4umIh
MD5:	9DB9668C86A5CC8414C5C7464B91249C
SHA1:	DBEBDA9ECD803595A2D71C18F678839CC7CBCD27
SHA-256:	201E53100A420A94FF64C7D48C9760C5D27065CAE48B7D64A7B458752EF83552
SHA-512:	94364E21C403D91E11CB4D1B2FA27196FE1DF18C700C6F2086FF635AF66C6404B396A8D3C192C6264B550957A30D7EA5801653C63A0E8C0C10B59BF2BD15C898
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5300974.1612832312!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K.=B..RKI.[{.....p3.R.V].X.s..u.'.6...u/...^.I.0K..s....\d.x.r.3..._[.?.?.>.\|H.o5.:........%.{R.......4?{.N1V.%\|H......M.#.v.md....hd.....nm..E<.0i......2..F.:...}.k.J.]....8..u..m..h.V....k...X.?...Y....h#r.b.s$........5.......g.S......t.y#F.u..u...U..9....85....ol.E.#ys..Q.s.M.hqYMmw...T.c8*c...n;..=O.w..w..S..(.-...~......]O..8HU.F(3,S<I.....N+..5...Fub

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image8HNBJK40.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	16881
Entropy (8bit):	7.916501874869762
Encrypted:	false
SSDEEP:	384:3Hf7FKIorak3HRLbI2G8KmWNImHwJFOY7rNq3L5B6Y7Gp3rZu:3/Rr+3xLZvWNzHwOY7rNIze3rc
MD5:	E63EFEE55E9FC97C3AD4D1C8E3FE3C78
SHA1:	E96FC857A7389CB28F356976A58B0A3428DBA2D1
SHA-256:	D36D2C016FDB0979BD423EF81A8200B43D911ED3A1B5AAE3428695D7D77F3676
SHA-512:	C7CAFC1B25F2783EAAAE37EFB80DB694083979796690C21E4128BC7B5A9A32672673F493A99A2A26474DF9D8C45B685A7343AD2C874F13FFCDA710B371B91934
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5202530.1608057610!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..j.%...)?h..5......8rc.......I.....fb}:g...\|....R]#./..U.BFao..t9m..uh..,....=..n./.M........2....S....^.u..sK..M&.v..c.ZDW...G.Edn..W.U.,<........O.Y....)..}W.?....4...}}k..7./...o.P.s....x..I.M7..Iq`d#......F..I..?.._.........+.7!....n.=4...J..zq.........#.n...1.F..u......Z..t.L.~.`...r..U...d`C..\|..,N.W.t~...w..<.*O..&....h............Q.7..;....~...V^

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image902QXPDL.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	10329
Entropy (8bit):	7.9196531219364426
Encrypted:	false
SSDEEP:	192:UvbxAw348qlbeL+iGpcNDltyaZYE5NwM9UisaDNs5jAZjlIRkm:Uvbp3xtGpspZUHWVlIR5
MD5:	244305140AF1846FD8D4C5CCA20F2294
SHA1:	B850498E810571217B5B0FC2F3CDE22450ACC2BC
SHA-256:	9EC57930D8B7701F86137F2BC17BF14456D3BEDC325572A853A0702E23CD3771
SHA-512:	F640D41A552879C884B41BAFDB89B010D038854ECBBF7044BF2D06B585F4A0705F9833BC8BC93D23464CBDFF6E3AF066EDFF5C8648C9CD3718D2C978E68D3413
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5200373.1616109211!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..E...p~.-qcw.O.......wj....l... .U.A.y..>........._.<.........4.Am.]9..K;.&...Y...(.R5...u4=f.[.f..\........:.........@..~.....P.O.=.W..?.\|N.7.]j......]J.#......&.K..]...!......C...W..f....SPMr...{?......V............._..K..].n..mR....C.o...K[[..dGVt...XY..$d!....#........w..&.\|q....v.&.y..O...H..T..'........q.*...k.'...~.?..E.mo...Ms[.4..'.......qm,."[..P.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image9L2M8F7Y.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	9615
Entropy (8bit):	7.917135966865192
Encrypted:	false
SSDEEP:	192:UE7GlJxxNfQZu3VnCx3id2L5yy2LpAAzHntP/2pi6aj+Sra:UrdxNfQZu3VCZ6Q2a2ntPepi6We
MD5:	32129F32D674D2F216D3458D3A3FC348
SHA1:	500C92A9513DA38F89F118D3C977E272B8820ADB
SHA-256:	5EEBF6122FC245CF1D987B94DA5C6EB2818C1BB46AEDE5158779DAD6F8FE0E48
SHA-512:	100547E240FD42F1F76378B74DAE50279CB6404B8A5355911A80D037B2335078A69B5750E79163712B3E857926BAAE59230C26A992B49E51B113CD714CA7CD43
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353126.1616104746!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......!o...;Y.[.bxg......;..>....4...zE.Ww...\ZX.<.P.g0....o8......G.1...?..~..N..x~.~/x.P..u......./1?....)...?.?......."..w...d..i.k^.......:...ms.Imi5. ....J.N.B...?..7.....~'.~....3ka......<!?.....Lx..$rDj64-.vv.q.....qL3..F6.y)B5#(sJ.r.\.....~J...g..NUS.....y.u..~"....l/._....b.....[.....^7.-.h..4.Q...mc.E......C\|.....<....@...k...?...;.7..&..N.g.....%..w ...8.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageAU1MERFO.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x451, frames 3
Category:	downloaded
Size (bytes):	225303
Entropy (8bit):	7.959772631709822
Encrypted:	false
SSDEEP:	6144:k/OvmsDREPzJG95HjxWO/8w2n2lbgkufQUhnU:Vm7KrkBQ94hU
MD5:	4FBF3AE12ADA65200A5AF090F15156BC
SHA1:	7E241E6181A88790927D268D9AA402D823867BB2
SHA-256:	4365DEC1B6B2675413A6E12C9704297BA10A51E5A6AA8E27D3C933B1A9958232
SHA-512:	A841B97F9334676B06B97084BC87A60AC59B8EE90087B6C7381267630C66C675394ABE72986AB6CCC6D4F415B20877F14FDE05C7D6B9FA466778170B8AFCB3D0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5277841.1611323626!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..#._..j.7..ZG...x.L..~*.]..I..Ot \....I.w....i....\|...O.\|7.......E.j.4..%.....IL.H.&\|.,[i$.p9....a...../HO.\|#.E_.=z.B.}.k#;Z.....z......+.;......Dx...O......xG.tz...k.&....Kq.u.....m....p:...2.Py.a]%Ow.......\'F.T......n..uK.Z.;[..[..+.4N_.`..NW......l.,&O....K......w...r...q.8...f.c.....7._f..v..u.%..!.OhT....I..G.5.?...x./.......7.4.>3..(H........d.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageAU5RKQT4.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	16204
Entropy (8bit):	7.9119469137615805
Encrypted:	false
SSDEEP:	384:3BDzhfPxJkYJzLBa5T/XtCWlyvl5fFkyeO:37xJz4h/9CQqdneO
MD5:	2FE7557E9B0CF2E48E7833D9B2353DBA
SHA1:	C109E96A6CCD1C6B7959AF9F6EF68002F8D781A9
SHA-256:	866062CA6A14753AE411CEB14DCE6BAD7247ACD49DBEAE43ECA8DBA5B231F6DF
SHA-512:	0311634E4F2940C71B713ADC69A1A81A65B981AB3AD0539FC59B7B0B51FE8B4F2F15F122FC6279D70C26E3EFFE330655EDA376870A8C14D7B1017F7BFE60AE9E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5266626.1610636082!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......Ku....?..0..>..V....M..(]......B.;aD.H..n1]>..\....c_.6.....xzo]z....<3llo.SZE'...k.........,.!..x.....S..'....w.5..+X.....,.yS24....C?.6...?......'._.\|c.....W..F."x.J.<9..L..........>.......U..5._....1m.x..v..."..... .p=.1.z2.,V1.k..z/...Q.r.S....^........Q.=...x........O.x.&..uMF'....8.ey.>c.aTlrC.u..7.....Z..~....7.....?h.N.W.6....x....i.&..jrO.}n}f..'.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageCEGZ9YMZ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	9630
Entropy (8bit):	7.919220442046574
Encrypted:	false
SSDEEP:	192:3p6gJT/hsizbjhBMzjXEsVj2j0qZzy8YeUiMO5UrYnAUlDWJM2hMZ/A/NEVM:3pjJDhR80FnfYrs5JAUp9eEVM
MD5:	EE22200A279D73C56AA9661338E21F8C
SHA1:	44A5E419D36428B9B2391AB98484D8BF0D3A806C
SHA-256:	D15F8A0D7214209F62CB3A03160832C8C79883A27351C847C594DE4CFD71A855
SHA-512:	3F4DD0F6774B178A54BFAEA6ED2F9F502C3FEE3E837BE50D81EDE97F4F77289939954740C140959BA5E5D3A30438E8DBB456E1F6EB8A0EBD27739ABCF346FF38
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352809.1616093584!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..\.H...L."..O^.W..+au.#6... _?G.....E.O^............)9.&..5XhZ#..t.r{..R...z.k!.;.4./.@....:....E...C....'O.ML5.d...R...........]yp.g;...r~..t..\.....wc9.;.....k..`.~I9yr.<\|..xm.....v....@.=xZ..b...\...03...h....9[p...XnD8?O.S..........%...lH-.5...}J5e...DJ..==e>Wv.m.x.....<...u......=.U..z....X..V..."..w............Z.....M<R..\..$L....\.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageD5BW834D.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	9103
Entropy (8bit):	7.915481413780032
Encrypted:	false
SSDEEP:	192:UrW5/c535/Gi/zn9/UkPHi2NWh2H1YX60hCeiIk6XbiFmUgVDP:U4/yIi/j9sk/VH1YX6mCeixyiFmlV7
MD5:	558A57BB744B92207DA0801178BCF93F
SHA1:	EC225B1CD6A56C97946EA3DC89B5C70C6DB2FD25
SHA-256:	00C81199511CBF97D36E9E98B43517EE4D5C1C41E9B086F78788D7AD87CB2CA5
SHA-512:	D5E0409F98FED04422079F6CF178EDEF002FC2B138B4BF56AABFA987787C13CD120EE303E24BECBE8C6525EE08E15E378F735595D4DCAC99A105180AAB6E031B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352423.1616080969!/httpImage/image.jpeg_gen/derivatives/landscape_135/image.jpeg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...................@.......2Q.88._.?.u/..~._.l^...6..q..B.Z...d.X..m.$. ;..\.-....'Y...K-3N...v....6VV.....TD......1.M.Q.._...Ei.2A.i"6i99...3.H..._.J.W.._.O.w?z.i.W&..M}./..}..=j..,\|..2.kB.c...T.?9.3..9...5....;J.>.\|[..o..w..u_....~(..%.Z..D.D..*B...A.W.^.)....z....H,.b..,.....^..G...-.:....1..@.....yF....N.IR.R..=.Vw9.rJ.'}c.....j.k...x4...X.......<

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageE7RML5CQ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	7828
Entropy (8bit):	7.92113413336265
Encrypted:	false
SSDEEP:	192:U+2aMbT4Ex7rwtKJexghIKyeIStnVRIw6HLqS//:U+7I8ENrwFgKV+I7Lh
MD5:	9B0B32738D64EB5BDB8378ED1AA931BE
SHA1:	5FC005FFE26B02F559CB5F1E601DC2164A0E2A53
SHA-256:	240C5F23050ADAD82A224B32A87939910A81B4E9A0C0F50BF968940427C94D77
SHA-512:	77C379FBF9C8DDC330406A0B962C6BF9A3445C979FB6EE209A8779182F58EEABF5F86A7FB32951E8F9CB6CDEF72E624EB254EACBB22133FDF6C1D6B70371CF81
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4170608.1541787176!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..s.u}.Gzum).:lr.[....>Y......pp......X.K.../.r..mnn.+n....`yU">@...........G....(.. yy.. .g.......`..wa<..I4z...r..R.....;...T.s.+.t)..n.......t.+.{..\|.ew..j...i..j4_...N-U.aD.@bXg'r..`.....S.....h...S.z?.j.....x./.m#..wfd.\s....5..J.>.xc.~....J...{.hV....Y........3..W....._...............4;/.i.q.G.umt".J...Y#`K(.n.._.qvy...F.9.-.9s4..QI4......B...,\.+..1

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageGallery[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3213
Entropy (8bit):	5.086382346107058
Encrypted:	false
SSDEEP:	48:/MUsXyBh1PLAsccvL7EAC+ATmOW/3AgT+cDZPb9UX:/ZsXyL1ssLL7EAC++mOWT2
MD5:	3A973A3CFD522BC6A8487FFD1048D1A4
SHA1:	97007367CF27093767BC0C9B8747F34DE67DAB02
SHA-256:	E70DF481DF820D5F04A23ABB1C4F24B96250E96DEC42ADA56E415BC65F60F33F
SHA-512:	EF31D6FBED129D006F11A456467DC2F0E68D6DCD3C52F882392F5EE8C1A23CEF4D3F7B8DD92D59535A839AA1639B634EDBFA176A7217CA7C2A0E8C496E56ABFB
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/ctvnews/css/imageGallery.css
Preview:	.bgCover{background-color:#000;position:absolute;left:0;top:0;display:none;overflow:hidden;z-index:9999}.galleryGalleria{max-width:690px;width:100%}.overlayBox{border:0;position:absolute;display:none;background-color:transparent;z-index:9999;padding:5px 5px 5px 5px}.galleryLink{background-color:#3c3c3c;color:#b1b1b1;font-size:.8em;font-weight:bold;margin-right:.7em;padding:.5em 1em;text-transform:uppercase;cursor:pointer}a.galleryLink:hover{color:#fff;text-decoration:none}.overlayContent{background-color:#1f1f1f;color:#fff;display:table;width:100%;min-width:1100px}.galleriaBoxHeader{height:22%;width:100%}.galleriaBox{width:60%;float:left;margin-top:1em;min-width:700px}.galleriaBox p{color:#8c8c8c;font-size:.8em;font-weight:bold;line-height:1.3}.galleriaBox .galleryTitles{padding-top:1em}.galleria-container{clear:both}.galleryLogo{background:transparent url('../img/photogallery/ctvnews-logo.png') no-repeat 0 0;display:inline;float:left;height:65px;margin:0 1.5em .5em 2.5em;width:143px}h

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageJZSBJTQB.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	8038
Entropy (8bit):	7.910578395622127
Encrypted:	false
SSDEEP:	192:UCE3lFwVKaS5llf1aA+VFuytAvuQSNUVXCmP32GgaPtR:UX3lFwUa+/T+7ugbUVXCmv20Pv
MD5:	56345D111E7BFD00DC6E761A2A52BD1E
SHA1:	0EE5975277E1AFDE1DA6CA1769126112ECE3CE77
SHA-256:	7C817FAF4EB37945CFC0E61B4CD5A4A361002286C4F3E32BC1AAB123C33726C6
SHA-512:	75D6D4469E461D52503AFC63632C95FD51679D5FCCF55D426D3362B27D5DA87E8AA6951D0D1DFA65C8A83F814853112BF1EEBA8FD8465525CE74054056B4CED2
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5329564.1614648452!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...<m.i...6.."..)..X.@..\W..&1.G=.....~.....~'.n.....5..x..._TW.o..q..c.....p..u>.F.r.......Sw.E`X....k.<U.!..2...F....._?..L...;4....>\...9.Z...x.u....kh]..-Q.....k..tw.T.'.ww..&..D..A'.f.0......7;..B..mK...B#.F.......y..j..RUR>..,]\L.........\|..Tx..H.....fi..s.s......V.~.ps......)x._...G.3..Go..i....9$...Z.k.vF..u.B.C.O.......V..X.;W2.4..F.I'..~..g

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageLCA0MLS2.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	11199
Entropy (8bit):	7.944715260498059
Encrypted:	false
SSDEEP:	192:3tdg8GzF+M9ewIXKFJtjKoidr8vED/gyyjT7EdWt575:3tdjGIuMXKhaAEbzyjT7EdWL5
MD5:	51B67B1F6A39E3F8294D22EBD2140E77
SHA1:	DD56D370792F794246658BECB8A26DE2A26CC2CD
SHA-256:	2729ABE46C8C63AA8CAFBA3641BE5D3B4DFF8B8BCCEF62412C75E9EFB990F8EC
SHA-512:	5DE1FCC4D3B983A512CBFF6AE62E410490D1BD3F33875750F7A0E453D876C5B3A0716EC02C084D45477888B920C0E3C5B8EFC4754F1BCAB8F95608351916CF4A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5245417.1609004000!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..#..,@U...Ye.....z.Vll>......3.;..m.....O..- ....V...n.J.;D..&.......3.....Y.G...}....\..x..,........;..2...z.../.......`.$M.d....V.,q..v20.m#.p.p.5.~....x.G._..\|;.....C....."..W...eI]T..N.d.....u..[.B............h.......4..RA.4....[....(.....V&8l..e&....V........s..eR..UMG...~...hZ.\|+......w.Z....E.uin.I..`..9..n..O..}+X.u...xy,.5.?....s...rDng.L.1f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageNZC41Z3X.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	9122
Entropy (8bit):	7.91188254390524
Encrypted:	false
SSDEEP:	192:UonseoI6OAn3BTbGzQ6HdZlbaiJQCmS5PV23nzG1Ux4JVojjkwUbkJ:Uon/oI6vROEydTuiJ3VyqU0ajjlJ
MD5:	CF41C620F584A34ABBE3BF32A7B37D40
SHA1:	400EB76EEF60CF7798D49B92902E8A5ADA30E8B1
SHA-256:	0990DC4E41EEAFC00C4CC6F9A5219CA44670F320F011B97A8026087165C4E893
SHA-512:	865E4BB5C9113B6DDC38EFE774D5E925B540C10F8909ECB7AF78FB9BD223F378CDF0F5F3E6FE859D1057CF0C722FBB35425D176EA5C7AA407719CE205017A6F3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353441.1616114342!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...t...V...6..N.]$...F....6r.1k[.0eQ*..#z`...b.9...#..../...!..U..3....2...b4W.eV...O.\|....m..%.s....ZQ....SS....G.v...kb.w.3.eN....D...O...[B....x.n...D..7.~....].1}g7.}h.v.@..!.9.<Q.G.+.J.....(._....g..z&..E....~.}.[h..d...P...i,......2....?w.Z....k~9..b..Xh.Q.y....cE..[.#...v.P...#...,.4.g...3XZ..C.<..5.>...#$.'.(....WJ.......%K....7..5.J.....7..m....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imagePAYUVP3S.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	115714
Entropy (8bit):	7.968045207172484
Encrypted:	false
SSDEEP:	1536:LqUu21pzt3drkCahe73jaxNDS85G1tSCO2NKzvQt7aR1s/Ey9Mg68ThN88Czwjc:3XldrkCXavS85G1tPDde1s/EQ6A6wA
MD5:	E38496A57A46677315CB4D55EF31A348
SHA1:	AAE620D2CB2A8FE6BC4DD66EBF33195FEDD98229
SHA-256:	EB364F12A05C6BAAD92630C74B5E7C09DADB30451FA6805D5D33326E298DD9C4
SHA-512:	331C29D865DFCF1E4C7E13D498291B3E45D27E69067490F5E4B26E620C191088781D889EB79331AAF19372971B4772EFA7D2B8A38C5C15C302A36052B293E7BE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4864366.1584979003!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......a...q..i..F.}.........m.DF.....ZQh 6.(...Ew..>{..<<xc....:n......l...A........A..L}.\.o.;.9..Q.Z..5D.......'..../.Vo.y....@.8._A...8.bl..S..Gc.&A.P3J.......\|...sd.le....+.<(.H....'.g.t..m.C@.....{I...N.M.0B...V...:..aK.L.4.f"<"..95.Y[&r.&q..4ch...^../zvqZ.I.J...er.DKt.u...\|..I...`....`....<..B.=y..I.o....c.....j.V.H....O.).8...J.......s...-.I....>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageQ3TKLX6G.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	11341
Entropy (8bit):	7.9205333195360055
Encrypted:	false
SSDEEP:	192:RfbQh1oTFZyHnks/GzMoszlZlnGX/pNkS21r//Y6U07pXJNEAbW:RfMh1kZyHks/GzMoKHmep3dLbW
MD5:	F62D362EAE671132EE39307B303EED02
SHA1:	F010582E06BB49CE0361C4701850F7B643EF2FE8
SHA-256:	A07B4693536636FFDC7AA063BFE7BB11A8ABD202792F34288597CC906435B84C
SHA-512:	B5ACC52D6A6168714BACAFD1F3264B6D272358CC69F7DBDF7DC9CD29658214256CF3EA66C391E1FEFB38B4A6F4E934BDCBBAA146C3C3F5508FD4B636AF6828D4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5282060.1611635827!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..O..j..mS.^.....x.e{..UYa$.{..W....q..5/.]x....D.5.,..aT...\|.bq......o.x..?.\|Yk.....[.I{...hD...6.......{\.6.. .+........j.>-....h........Tc......1..\|.O..4...W....G.X\....i'.*OF.."...+]t>....="..:'.....M..C...>..WX..V..5..2.DD.`.F.@ ...i.G.....~.jZq.-.#.J_.xg...`.....%..{R.mg.9..!Rs...q......7V..:o.u.#m.ey.n.Tm.'o............?gO...@........v.qgl...[...h.#

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageQN61W521.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	95321
Entropy (8bit):	7.97033767660847
Encrypted:	false
SSDEEP:	1536:L9nt3lR7OmrJViWhc1OcJeXt7xEY1pFky72T8R73Tt88cDfHsRjecaGQSkxaqR:xRRiWrXFxLF5yT8RrT3cDDWkpR
MD5:	8CC6696DDDBB195CB56E97CB84A54D61
SHA1:	BF3FBF6B9B1877E07564385FA374039659148651
SHA-256:	B86A91D55753621891CE4DCD5BDE55D0EC741E8BC7A4C4E54B5E3527ABF10EC3
SHA-512:	5DFA0B01CAE6B8004C1D40F6DC1203114B4BA2FCF3030B69AC55DE183E0A07E2F73D6589C0EFD34D5D0B9249CAB4F7D9F14749849AE355C0C6AFBA64C26BC679
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5347194.1615779644!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..q.8..`..x...e......GU.)$pJ.&fT;..<..W..ZR?c\|.G).7.H.zW%pT...w .S~.`n.".... ....s.8...9....!......H.C..9.Eo....Tc..9.j......;f.cN.S...3%.7..MS2`.........ea.Q.R.0.H.....y.2...c...r3....3.n!Ns..20........[...!.L.V...YH7v..k.4........yn....nJ.y.U......9>..Z\.:..JvGya...~.....rrA=.e.N....N9.}......h.^d...]+!.....v..........)..f.v...^....f.+..B.O.....k..vpW.,x..t

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageR2KBTTQJ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	168621
Entropy (8bit):	7.95470568166358
Encrypted:	false
SSDEEP:	3072:L4crpy1xeuDfoxN59q5U2kTryWMTNhuDmI0QTgHot9:L4c9e17MHTrPITHoX
MD5:	13AB018F94EA61631D1BA4D78A213ABD
SHA1:	8A05B8582F552CC6FA1FE6B150C3928D892EBDF9
SHA-256:	4F193D0FAA527BE5E14364E9AFDFAB4B863B6E86F8B07BA4435FAF15D204BF86
SHA-512:	DE664B236639C8A17318A19421E92C3947A2B8B8721CE32E2F1E8A17CD99F755C7F86D453CF8446CD344A24765DF30E23F406980219EF27167BCF02CC00E4F44
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5348632.1615864213!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?........5\|.\|d..L.r.C.f2?.+.5..&.t.i<;.j..NcV.......=....:u.S..Y.>kt#.R..yV......v!o......W\|?!.1.]q....]...!..+n.........)...G.i.N..`...._..e.;..l..+".......H.s.0x......ThJ..?z..h.9..P...T..t=D.......r6..u.a.?.3.1..x3...~.KI.H...'....?f?.j..........x...`.......-.al3\x.....i..Q...G..RO...E..vr_..{g...b.a.......R.?ui..\|......[2...&......<..v.#....~-_R......$.L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageS6WQNVN0.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	6584
Entropy (8bit):	7.9135779838082225
Encrypted:	false
SSDEEP:	192:RTsuabX8QsEutQF/I9aq97xQYhe/QE9nI5Q8eKMD:RQuabX8Q7uOFwaqLQBowSHwD
MD5:	CFAC84F1ED3E5D9A1833825724086594
SHA1:	6742CFC6D81A8E39B3C22B5E11BFF46569445E76
SHA-256:	267A6751E015BC570D999434545D2EDCE8EA6ED9F434174061CF61D14DBCD9B4
SHA-512:	2448F00C5B95A875C61F849D78686A09502839DE736EC08FF38285C8EC44C745D8A9C59BD4120DC9AF85A0A6906C476FCF6162AF464735F1165087A3C8914EE6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353576.1616123416!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......T.N.+....jepq.{.\.^....[C.}s.e...3X...M....ar$.M.D`.{...Z.V...v.eS....p+.O.i'.7..1......m#I.w......>k...t....F..p[...#c...3..$.%..J...d..MR....$w..c#.j...g5./.6..s..G.X..?.@j*."...F..X[j..%..h.c.-u?..V.$a.A.\|~7..S.MN.")=...H.\....gQ.&2k]/..{.......H..#.}..W.7.._..>..O.....ol.d...O.J.9Q..0=. ....../..B.[M.._..C.\FR.J......\..Z....X..R{W.P....V68jY..V..TT.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageSA03A9SQ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	8359
Entropy (8bit):	7.910423119620865
Encrypted:	false
SSDEEP:	192:R1OYS6YOaqzOerXFFwoakeQtmagc445bZBntuASdMYGCsALM17XGFFzXM/:R4nJOd6erAo3JT445bZRoAVCsAQ9uY
MD5:	7FCECAC84E9CA180C2433E128D81D354
SHA1:	261889804F5D527F089F579FE9914147FF8F95EA
SHA-256:	D9779851E3B935C5CF91DBF110CDF1DCE9070DFFF769EB82C0FEA7F7F3B61348
SHA-512:	4D22518A8124B8C612ED257604EC7C5E396D6D1DF608D173E185E6FD7B02157FE1156A848F98E59C17946D15311D68B4224802122D9F1E31DCCC0683A55B9A74
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5351418.1616017386!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..G.<...>.>..'...O._..v+'.o...u...=xB.K..4R.q.g&...U...'.6RM...>Y.\|....<E.o...l..T.oq..q...jz..bS...0.P....AR...[]..Z......z...bi. .c<..z...U..sP.7...t....j...[RZdf.@$`.kp.a..5...2............u.........u-CL..\x...O..(.d..`.Q..Z..............{..e..5.U....#..J.~..cxs..xc..?&..S.J2....._.....$..../.h..G.....v.-..e..H.5...;.y^x.A...k.{..k...x{.)._....l[.j

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageUZVIVC07.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	4713
Entropy (8bit):	7.840726285074243
Encrypted:	false
SSDEEP:	96:d6ESvObKlekexzKc0YcPhpC5maOE4HI8ex:U/mKWq3UmaOEp8i
MD5:	47A273C6CD05962A86E5DA1D52422834
SHA1:	B8D3B15813C9CB9A74A471AE5FFEEA06A1BA6127
SHA-256:	2DD1878FAB4DB0F1FABDF75C502E5FFEB34789B59C961A293741AF30B6EF0FDA
SHA-512:	F143BB29D40CA725A7FBFD2D32F7349BB0B1A17E7B8AA1703C58830791A9BACC8DC6D9EE7FB8C42E48F9ECC5C803CE656E739C495FBC5D7F883C07600D16CD24
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352725.1616090619!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...f.Qv.......H70R..?.9?.$qJ......\.V.pFB..2.~u....@.#.P.'.i...v....0jD.r.. ....L...DL.....B..p.'.=.I"..b.G.......z.......M.U.#..2N:s.T.orA....Z....#.j......%.E........_..aa..Y_..jZ.....O+gdJ.dvUf...)"..M...^......>..y....A......l..Ij...iDK{.'..L....J.a..)J....G.i..*...........Fk...d........~........Q>0.;..\|.u$....?.m..7l.]y...2....G......I.+.%.BM=.3Z..I.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageVQJQVRB9.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	116458
Entropy (8bit):	7.960245771484991
Encrypted:	false
SSDEEP:	3072:Xt33PsNL4esaXcZPN5BO5G+FzPNnKf8Boj:X54hXclNDsFzNKf8o
MD5:	06D5F70DCB302E97CD8BA7A04E884B7E
SHA1:	0483656F26759CFF8D6082AAF63C6520E78D7280
SHA-256:	D961FD56D6651BF994807CD932AEC2FEB756B0A0BB1528744EC9F61D2598AB8F
SHA-512:	D53B3FA3EF290C31A0118BE242B77B96A9938E91849C41EA69384D88D9E96BD6C5AD35A9709089BAFC9D8366F47B08CBA17246578EAD68EED04EE7381C198FE5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.1174352.1612035015!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....c....pO~..q...z..q..C..{.i=.=.8..........:.L.^.q.Z\u...K.3...Lc....V......N..T.....9..m'..8-.iY.. '...<..Y...N".@d......\8........w....Z+N.x_.:..";..[..gL.=..}.......!X...].d..z~..u.H.F..A..8#..}..k.m6&.YQ.......k.1Y.\|uV..z$}..*.`....b.N.(..............d...U.x$......w....]....?.qR....f'+.?..~...&2N.:[.Mav1.'' .'.#.\......d...'.Up.HC..n..~...aC2..wg .a

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageW5PDW4HS.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	11944
Entropy (8bit):	7.919806844543447
Encrypted:	false
SSDEEP:	192:RqNCqESVvPHByAp4hRTEOoqtEpL0Knj33euKiKCcNTTAHBdMVlXfPO:RL70PHBzWhRTTEjneuKiKvTTCKlnO
MD5:	BF66C641043DD3387F86A8A7F2978DB7
SHA1:	82CA87DB99AE0F310489ECB0B112118EE3828661
SHA-256:	FC334B1725C7D69E8950649C4E7E69CFE02EEA5FA2DB112F90E23B268CBDDD81
SHA-512:	EDADF9D1838E45651AEA285C7B246F9BAF7785F2CAC7C0ADEAA71015B633D99A90B49E26AC046028C463918106928C6C2C5F8261DB1F479A1D5554F1CE0CA3C6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353156.1616105860!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..../....%..!....$.._..4.....x.<Ck.......... &.s..Kn$q.z.+.....4.W...R..t.6.C6..8H T.2....&.4.E.......j.$..?....].......6....f.........%q.g.\.%...tj.....O..XexuQO.W..../....f...gM.E.<.#F.....z..s..W.s(..g#<....A..N...zJ@....r7..7....z.}+......'...mn;.o.+.9.....w...^o.$.%..]...:.a.~.[...'.iY...}.@..<'...WHX..5i.i..7..H.i.....dV...#...{.....JP.y..+........7

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\imageWD0UBTKO.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	11243
Entropy (8bit):	7.923452457830309
Encrypted:	false
SSDEEP:	192:RvZ/OdM9FL3aEiH09PkhJS9h39QG/Y1VTgJcmHsHSQPXwykmXWB/350JHdCI/C2:RvZ/eM9FskMMZr/YHMsHSQPg+Mh0JHdh
MD5:	63782A0A423B2F49F4CF625900D20CB5
SHA1:	ABC899B4693AE917B8F3C7C3A912C84CA0D57027
SHA-256:	6A3577BD077356657C3CE300CBC6DDE6CA6BD0F0D7BFDD805E12B90AFC7C8072
SHA-512:	288EE572C8178CB94E93058CBC373779CD76C4B911B17BE3C41FC511928E0E7E111D96DAA0A9569E449ADB587754B95B7E0D1BBA5D073330B766C511D0274CA5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5299029.1612672433!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...W...?....k.......Cusoa4O0D.1.*.%.R>..{....Y..O...K-..R....,.:.,...<......5....D.G.$\|:L.G...'...........Y.0.q.c...Auc.r.R.5....s;[...;........j8..<7.....u...o.;o.#...Yx.......~.t.....Z\|.u.2.b...5."./.......Z].u..d..AA.H...<.X..O.....=;..y.....l<..xK....m;.$h....`4.#......\..=B....).V..j..../.ZG.F.... u..k.......g._.k:..?...O.U.......,..l...H...4.\..r:....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image[10].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	8636
Entropy (8bit):	7.913590769105295
Encrypted:	false
SSDEEP:	192:ULNOIFhZYqxA7TAyioqT5g13dYCNkaOBeXyka6RCUa:UL3Fhbx/5TaNYCNoeymCUa
MD5:	9339C2C388E6AC4F618CEBFACB1E6AD8
SHA1:	CE478C3F2632DD4522DBAD3DA2344ECEFC9D4327
SHA-256:	B2D6F945B700E19041C3097BC7E7B06D0B3933322390DC36C581CDA139AD49BB
SHA-512:	960413CA507FC0C87124A920D1EC794D94B7EF0807E0C71C95BBBA76056CDAC09A1A83C20B19D9EA59110CD62D599D4F1E16F38B7CB74FCD56C544E76A9221B2
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352557.1616085216!/httpImage/image.jpeg_gen/derivatives/landscape_135/image.jpeg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....:l..[.r...\|P..........r+.......xu(,a.-..-m.oxb...[..j..WQ.4.{in...n.`.B..<.O...K....\|Y.=.+.W.f. K........9<..j.J..p.N.W...$.>...>+..M....Gooo....u..)..u.3.D...9<..(.L..e.........4...k.P.-.f.=...z...zF........y.].<... .{d.......i.\|..\|4..lu.t.Im..z\.}/..:=.$.G.x(%.....\u.p.w....oS....i.(.y=....I-.<C.........xK../.v......ie.h~.......e.....N..I.*.-.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	8780
Entropy (8bit):	7.920278604655236
Encrypted:	false
SSDEEP:	192:RQF3PFyu9OrzPcs5CqDunVqAV6yfZMCjw8X74JyKa:RQF3PFyGOPP5NuVl/L4Ta
MD5:	B1FB623B9F8AC926F472077B426E5B01
SHA1:	9FC46447124AC9699C6EB7084445D862891099FB
SHA-256:	F86B90F284D3E914D0438F2FE65448FAA6B69B1EACBFE1555ECC855F55E3E3E0
SHA-512:	38FBF61BCC3FB889DFE7B19E5A411C8B3D2EDF52BDF90BEDC64C4C687C86B4CBBF1C6F67080154EA760B6A8F2E024B0BFE98700A2D681FEE1B2BC467C9F015F4
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5219351.1607281575!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..b....J....-f...O_.^.O... .Y,e.._<.i.'8.l...W..Y.W.`fa{l..u.....8y=S..G.<un../...O\|4........}q..>.}s.]..X.....e..RM.7..I#+_C......>+\i.....<[.....aB.].28.9....~.......k...xw.6..xR..:.[m.f..+......k.q.....e...6......2.f....x#..5.....omw.....L~.'...%[.p+...e.1\...........T.(..[-...V\\|Z.h.......0..r:..\|G.I.E1.w..^...K]..9.JV7...6........~cjp .......L..`..c.8..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 135 x 76, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	18826
Entropy (8bit):	7.9860476611641085
Encrypted:	false
SSDEEP:	384:U2UyTniJBVAB9tSs00VNiA0aMJ4iZsvR9TlVxFn7qrcoAmGWoVaVk:U2UyTiK50GKHJ3svR9Tljdlg7oVAk
MD5:	E8422C359D5C81879ECAD27486BC8AA0
SHA1:	CF499DBAB7F140AA568FEACD978F757DCB0A1289
SHA-256:	CD20AE8236663AC8972766531A5E5B3640313C17336E6A7DABE7022666897641
SHA-512:	E6C830808AF383514B54955488825C74676CA05D2E0104AD79CB739C16E74B2034D5C531C84E263A4D81BB092294161A1162370876583519125776DD996E6780
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5350904.1615999369!/httpImage/image.png_gen/derivatives/landscape_135/image.png
Preview:	.PNG........IHDR.......L......3..IQIDATx.e..W[Y.-.o.lrt.8.s.9g.@. ..s.$...$!2.....VW.t.U....~..q.c...k.#.~......,..k.....u{.......vz.v...v9..p9.N..a...,v..j5.0..n.SN...\6...v;.....p....x-^h.YMV..b6....Ag.....Z......[e........-..[..77.kn............=.hoF.:Z;em]]2.\..#S......^i4h.f....v..a3.?..f5[.f..l2........:.F...p....CO..\|...z.^........G...b.{.M&... .F..6.._....tb@\.a....z9<>..........s.<........=.....!...H0.N@B.8$HxX.V..C/.a`0.6...v......v.6....c.....d2..z.F.Ui.J..[.h..l..:....>lm.......Q...:.-...6yW...T..x.}...6.....N...3...0.8.lV...r..6..%l.:.F....F.@G..F......6r......l20<".>.N.........l\.Z.0p.=. ...c.!........7.C..^..H..4......p.j.VV......2.......qP...x<v..FG...B......+..1.y#.....V.Q+.=..yGw'x.$.x......a>.V.L.,...].....EG..K...vz..\.....4v.I..o.v81....c..xvt8.....<}::..%FG....}.Q....$zF..P..x@...1Ita...4,\|b........Y...n.....Lw./I...!,..........`.........n.~9.;...oI.m.y!.3....\|a.@...<$^>.].+6..&.-E.!.->.....54D..U.D......j. r.B.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image[2].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	9425
Entropy (8bit):	7.92742894391262
Encrypted:	false
SSDEEP:	192:RwB0QWcdvKs9KGS4j6+mQkeJXlnnnI2ve9zwSGCsvEB218HuvnL90tL:RwB0QWcdys9K94jbxNhlnu9zw/ZvP1oB
MD5:	39E12612BA692478BA2F0E2F124BAEA6
SHA1:	616810942B6A7BEB4ABD1C3B57FEBBAE2BD2C7FE
SHA-256:	A320235150F3BA629E1D9254AB7A7F3D3091F9A14D52248449197D49F3EDBF73
SHA-512:	E13A3036EE32927C077B50EB1B5116A0F3CFDDC2DD23A7619D4ECBDD6C60672C4560675A5FF4691933417630E5D9949423B3441D73B6EAE4AD548C4A6A9A957F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5209372.1606675845!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..F/.A.ee..@n..e.].z...4mB.bk.(.Bq...M. .9.W......C._.}./...Qjz.....Z..ws.ir.wJ'h.'gS..$c.._.W.Y......W.2...../../.;...O.].z......[.......%.G.q.9.7dY.e,,hT..+JI%..[..m..?.....^(.*5!.R7Qm.S..}m.t.!V....E.0`[....kr_@....q.5...g...S..6t..w>&....j?..J.-......L..WT....5.d.H0H......?..>.....?c..~ ..?H../._.Z.5.[.yV..j.%..G2..eZ.x[...q..RR.'....i...Iu...8....\9..&

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image[2].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 190 x 106, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	54656
Entropy (8bit):	7.988504495508105
Encrypted:	false
SSDEEP:	1536:k0QffVqhHtO5Fml6LtfAqYct1XiEJZX4uxh4dy0M:k0KfVgHtKml6Lh0baV404dyL
MD5:	1ED841EF73BEEFAE49F0C2F25AD87C22
SHA1:	C87118EC7EBB836A838A1FB0C93851180ACFD1C0
SHA-256:	7EAC898AB0343B6362FF217CB5CC3D462F7DDCC7558F058CFCE3F873D8B78CA4
SHA-512:	4AE936471E89238EC617CA9B56DB1C6B6E5E91E0EBDE314145EB5322ECDA76B4CCE35BC4DA8B17934D30B79847E5828ED706535B5A4DBD7E26446CE5AB8703CA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5317730.1613870806!/httpImage/image.png_gen/derivatives/box_190/image.png
Preview:	.PNG........IHDR.......j............IDATx..u{TY.=._..i....n.i.qw...........H.......$Hp.~_`.k.J.-3.<...:.E.9..{.k..h..U.m......;ai....'..4'.....-L@]Q"..P.....y..&.....O@un<.c...@Ws8[...L..v&..s..Z.y..f.._.....g.........Gc.w.,.Ncx...5.(.IDaZ4.bB....gG.9.#..qv@..=..m..h#.+.l..W;...#..An.......s...{9"..E"..p.....\.......f.6....\m..om..i/... ..9.z_.+.8[....w....Z"...!^V.....#.....J.....?B............0_......8......D ..a..wK..Y.\..Cx;.....=.M.ao.7;......F...p......V........Ih.G8.u..9.CW.......<..#y.........h.w{C^3=8.k......-...&.....G..A.I.Ei~.jKRQW.....<........@[i...Y..,..$......M.CF\|...=..j.3GB...j.qs...F......s.....x95..w...kxx..&.....).8....4.f.$=..!.qq...%.LM.jl.W.c...I8......f&p".l-x.6r.ha.5....>lMt`e..K.9....&...`c..[3..../...#...R..k...da.8....$.......o....\|.....\|>.........Dl.5......PoD..#....p@d.3..\%..\...X.........#:X.o....,.'.....;(.`.v....4W.<f?W...1.. .'I%..>K~A.g...ZO./.mIj.s....;8ZhK...;.W.Av....v...$.(:Q.r\...q:...cq}.e.*.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image[3].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	9343
Entropy (8bit):	7.916171727702385
Encrypted:	false
SSDEEP:	192:RW2jim3Q9gZd+ikH1RKrAyv++0hfzBuJ983D+V/594daOkAfw7BVOF:RW2X3NczRcqZEkaHOKOF
MD5:	DB190A1613821A87D8615C1D7F618C9B
SHA1:	E6700096A5CFD7174E799F3EC39B6D25E0922877
SHA-256:	B24910175FD48251D6110EA36B0D55B0AC523C019EC88C0B72657168539CE9B9
SHA-512:	FD10B34C6893B33DCBFC491D18019DBB828705CF6E0B97AF9350E240B6A64FC56947E297D203562828D7D0818716EEC864C040838CC5A1C1D750EFC98567288C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5148449.1602873568!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...~4.>..U'".,.=r?.~yx2':..@.\|..=.+.7....F.H.\C......b..q..q..S_.Y..NwG.<9..Z.;...i>......i.>".1..H...o..._..5.-.Ok.......Tz..`.. .D.@... ..p..@\|~.(H..s......E..k..#.....Z.[.f.em.X..s%.U.6e!].....s.].=...U...=.L...~#.~..\|!..F.....g.k..K.i......;dY..;...T..M~..u...y...g.M...%.\|A.w...^.........S]?...\...P.xn...xgT..y..u.........^#H.o....Im..B..!..T.....O5...T.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image[3].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 800 x 450, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	656261
Entropy (8bit):	7.975398849727435
Encrypted:	false
SSDEEP:	12288:Zwetyn9gUM61P7LRClIRlcvYw4aLcOWh5Ccrkjwvw7UF1bSQgSM6doFvlLVrf4:5tsgU7PXkKRlcvuxXlxM6CxD4
MD5:	8A12240F239E86DF02D15A624144C22A
SHA1:	EEE08FC01C3A995046843F1F41CB862B623AD7F0
SHA-256:	7979980306F42E814B433F49FD474B57937575065C6E5F6817A4182ABB6FD1F8
SHA-512:	0AC2D9114614DE5DBF7947EC216793DA3095798C337038E053EE6D291D8C586CAD34E18866F45625B5FF6FCEA6D5FB510F20700179C63CAA0C73F80D38A80E0F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5317730.1613870806!/httpImage/image.png_gen/derivatives/landscape_800/image.png
Preview:	.PNG........IHDR... ..........c......IDATx..g.#.u...q.....e[..i.hr...s.A... ..$.s.......G.....`.~..]k.B........!...P..Zk..7...m<r..x......'...O=\|..~.><...x.......`.S.b.3.a..`...s....qdm.>.s6.\..vS...<x.......EGS.=....b......L.6cj..3#m.#.G.o....6..........,M&98...2.:.z.3.#.-........8..Q.>A..F.17....wE0.^.....y..v.#h...3{i6.{P....y.NT.....BuI.l..pT..i....ns.....k=.ho.....]^.k.O.W..7_....}.&~.....O.....g.......R.O....#.............._~.......O..._..C...w..O..O>z.?..5...W.CzO_..">...>}..>}..>!>~..>z.".....}...z./.;..'...9.<0....,M.c.x7..h....p.`f...m..h.T_+&..1........[_..p.......O...d.h..i......W.E3..z..p...B..D....!.z.k.mG.....".%\|V......;bA......T.u".b\.....v..$..D\|..zIk.O...c.ho...R.Y..:.Uj.....\GD.......;....s...5.u.......9..........n......q.............N..lCq.V.gmA...(..r..\..{E.....y........ao5..Z.;.~M....K.....u...r..5.d..T.H....../3........qV.{b......AX..[.:..>...G...[.A...,...!+m..t...l.....^..6A....K}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image[4].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	7162
Entropy (8bit):	7.913707648338436
Encrypted:	false
SSDEEP:	192:RV2yiAFKAsSHjZ012hnFXqXNgL4Nq6boEyhop:RV2yiAtL1NRYXWEoEySp
MD5:	B3D336354DB4896A81EB745D5336C42D
SHA1:	5F2A78926FF5D1C0BF1D7356204940412E5B0157
SHA-256:	94B850C06B5DB58C76F0808A5F6DA7F23BF29775B5E38ADA5AB5A46F67D28E2A
SHA-512:	FEC7FE225848271654D446B324BAEB2F454A3892C9F9EC94F61C8DA8D630952B8BEA01EFD278138020DB787ED3FB313EEDF734ADEBA2CEE4C471000EED3B3E93
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5174826.1604516325!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..&.#{c8.....FR.rFr7..5...q.RkG@...abH..y..l...gT.~...F6...J>G.....8-.=k.C..c.Z>)..;u.R+?D8.n...&6jy..H.,:q.=YSW$I....-.).-M...j..........sVa.....x.N%.....G..<....4}.v.w..N.9#........Zko...v.+.jW.z.6v....y.......Al.....~....iB.k..q...r....e'...q_.....F.E.......x.......Q..._5.G....LA..!b.r.P.b>?._...(.hC..8)+..M.yY.}...{.M.W.. ...%.B.k..j..K[]_.GG......~...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image[5].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	10008
Entropy (8bit):	7.931296643609031
Encrypted:	false
SSDEEP:	192:RIKrmQnmPsyYCSN4zYYqf2Oca0tFMTsE06F8R4t9oFek+:RImmPsNDNUYjfDcJuNXFG8oEk+
MD5:	63E03BAE1F1874AF24F4C7E4EBACD9E0
SHA1:	0B6DB44DF52D728630993BBC997B71A14A225E61
SHA-256:	3641A9072587D163FCA2B4F461AA0AE1DF4D33F96154D1DE53D57AAA41F9C442
SHA-512:	3F8DDABC1A50DA877E92E9578BCFFBCD6B51E569B516C32795E7D782BF2770862B7F11ABB8C2F98CDF77FBE462CE63DB8BE5CA687695EDCD33525646BD24E22C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5211981.1606843675!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..#....)...GI[S.;Z2TfQ.#... .....=...w..^...W..u.LG.T..T....9-[@.S...s[.jZq.J.`...2;-`.W..t..~.Z...1o.,.e...-..Y.....R.S...^....y^.......}..S...,`8m6`....s_z~...~...L...`....o\..q..cC.].9d._......C.d.&....._.......[.#U_.V.3...<._..0Glt..(s..%.a.D.;..C<.{.....U....c.Gh..?....\..k*!^U.=....lW.K..O..=.o.]4Qkrx.Kc..A..J..=..).Q........-..]%....(..B.\|X\...C^7.o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image[6].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	8701
Entropy (8bit):	7.930376728655328
Encrypted:	false
SSDEEP:	192:RGeLBvXYCIJdiBmVEF4Uu3MGU+UHQ2NCFne2/zKHXUPxjT/Jy:RGMB/YDYmte/+UHQMCeAz+kPRJy
MD5:	3038AD0C152AFF18095317BE739E058F
SHA1:	3446E4328F003C60E813694BF0D4F31D8BD62154
SHA-256:	068F8641C012061CAC652C86F0BF6D53E30B8EF46D60CC423CC26BC6D5994E48
SHA-512:	812F282FD78968104B19429304E66A17A223B3F11D11A536CEB069E68212D2FD9897A9E663ECDC2B367E528BF17232F1D4718F6C92C38D7B387AA053CBD84971
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4282970.1549368709!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......{..PW....H ..T...gmP]~._./3.3.z.1.v.!......./.b.XN.....:L.v.....K.Z.u...xn`.OP....\..........Uc..x.n.g...~........x3.......-h.^.X.:3js...\._...0...T...[...5.i.(......'.u....[..k_6...\,.G.IpX.#.......5....8....N..]..:.....J^4.e.n .p#....../.&.X../....P.b.......Au.w.x.....^...YM+7....y..cp.._.F.....Y....3.o.5....v....&.*Y...^..le.o...H?.{g..3...o...K....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image[7].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	6955
Entropy (8bit):	7.910270502071061
Encrypted:	false
SSDEEP:	192:RlHOlFCsi26vZS3WFeXRwPp65B/Jj+WeS6B:RlHiFCsXKe0eXRwPY4WiB
MD5:	5D05DF8E719B3C2F1E2606D66CB69D63
SHA1:	823DAB6E1DC3BA21A425F92E07C30854013312E1
SHA-256:	2306B22F6EAF1FE1502D6CB2ED89997AFB50397712763E9E51324229E1290A13
SHA-512:	F6D10F7BA5F82FFBEEBDADC80D000C71898AD2CAFE60BE568CC6C7334AFF4B73933821A12C82F4D1AFFBB14521D633662EB3688D680B1435777A566BEF5BD0DC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.3964874.1528428723!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..>.%..=..=..._Px;..\I..H.v.[>..Na+.I..._w\|1.`...o....\...C.._g..~..?$.....c9J..._.....l.A........~...v.=.+...~....wB.....9.qY..Rr.u<..T...~U.?..,hZ....WC'..@9.#..u........1...:.z...-.#..8.........'.rg..\|.e'.O..y...)@y.............~.0...W....}.....E.$.*he.e.t81u..4G....mj$.nB......\|Y.2.Q.m#8......P..[q.@.W..<.2....~\.1.p...e..Z:..^#..._.g.H...\|..........F

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image[8].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	10889
Entropy (8bit):	7.916225266989465
Encrypted:	false
SSDEEP:	192:R3NmUDzIMdQkLHutHC7D8dno7jjE2LlzwcJ/VppbKa7+BFulif:R3R6A8dnoPJF/JtppbKA+eYf
MD5:	0FA1E0B6926275FCFA102C95D63D64A9
SHA1:	AFF8F11C4F4DD786F24FF8EA64B33AF01F105C7F
SHA-256:	92B8989AD302BA46C967BF8786D70BCF6E2F1822466CDF0DCBACDEF3B971558D
SHA-512:	8E25FAB55E2F576C061CA19BFBC1D5FAB005AB42B1C67D569D1CF75CCC3AFCB1A36DFEC5028A8EA8ED59970EE952CF21AC8BD3C3139443921A98074AF11650DC
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5202769.1606249175!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.. ...........t...@x9.+..P.m..\.z....K.yu.ute..............!...w..9n..c...h.;X.. ..+......s9%...k..g0F\...A....89.../..[I........x...u.\|..Bv.m.R.[....J.....SR.a.Y.K.Z7p.x..!.K;..p...I..I...../.d.jMj.T.qb.B.Q..Zk.~I'...\|W..CT.F..O.k.Z..`...Km-.1..#Y.f'..I.Z.{j.y.....aL......-.!N..:.F...^.. `.........TA......^i.x..!.m.}......#5...F.-.P.II..a.FA...}...~..8..m

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\image[9].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	10392
Entropy (8bit):	7.916518197989732
Encrypted:	false
SSDEEP:	192:Rs5Mt0fVSpi9zmRMVtj/EiQhqjT9uQHQ74ewi0DKV2vYSiVkmuLX6:R/8Api9i+IiQsk6IOFDKgKSmur6
MD5:	986E745AE710948A2BBF537FCE14DBDA
SHA1:	75EF076386B0C63ACE8D9E03A8CCB8F67F6CAEAD
SHA-256:	76D63D5A55268084DBEA518D9775E5D48EC7157F381033A4FB9EA91F34ED117A
SHA-512:	BA1B2827B532BAF4AC7298072574FF41EC8E69559D8943A924E7C576D32CEB71B90550EE65FE478764BAFA110D55B02F15154D7F57EA1B17382493892BAD6C4D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5205126.1606363805!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....<..~._....g..m?@..C...Kj1o...>.bq...~^.9...........B\|S...f.g.._...:...Ky.2,.H...._....>&..?.T..Rxn.R.....R.<3....6H">g.X..fEb.s1.6..~/.a....\|\....k........R.s*..j..'....k..&.y...Fe^.:..rBS....R.t......................A?.#........z..(....\|...k....\W...5.....u..\|..5..8...5.....l..?.4..B1.....1......?..^....6.......w..u.Ve......l.lSnC.8..\...,6.\|.V1.8 ..(6H.zE.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\img[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUkwltxlHh/:P/
MD5:	325472601571F31E1BF00674C368D335
SHA1:	2DAEAA8B5F19F0BC209D976C02BD6ACB51B00B0A
SHA-256:	B1442E85B03BDCAF66DC58C7ABB98745DD2687D86350BE9A298A1D9382AC849B
SHA-512:	717EA0FF7F3F624C268ECCB244E24EC1305AB21557ABB3D6F1A7E183FF68A2D28F13D1D2AF926C9EF6D1FB16DD8CBE34CD98CACF79091DDDC7874DCEE21ECFDC
Malicious:	false
Reputation:	low
IE Cache URL:	https://pixel.mathtag.com/sync/img/?mt_exid=10009&mt_exuid=164920303730000176112
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\includeAuth3[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	30773
Entropy (8bit):	4.348914910522012
Encrypted:	false
SSDEEP:	192:4RukCkZ4ljxoU3UcvCkDU2rvfvF9bN3hScfZX6YaPoouPoM3y10OKVNNXK9oCbaZ:5bvzvBRdLmoTuQcSJ0LPQFXfFpb
MD5:	905B4551AF88BD708341474BAE295D96
SHA1:	273411B9C2DF5E54B38AF0996673549247515716
SHA-256:	7D84C419BB39B3EF7EE04CCE175B7B79FF638616976AAB07BA909377BCC773B4
SHA-512:	F536EB138EF3736A41AF9D00C34FD3824C7FC73569F4AECD44C0DEFA0BADC4DC9F6709CC1B6D1BE1297A2A5EB6DA04A437FD64F87A26B7C7DB14F4C833FF160F
Malicious:	false
Reputation:	low
IE Cache URL:	https://beta.ctvnews.ca/content/dam/static-resources/includeAuth3.js
Preview:	window.Tracking = function(auth) {. "use strict";. /* private vars/. var pVersion = "3.4.0";. var pSetupAuthTracking = true;. var pTrackedPage = false;. var pTrackedAuth = false;. var pValidPageTypes = ["errorPage"];. var pScreenDoorBdu = null;. var pInitialTrackCompleted = false;. var pGaAccount;. var pGaDomain;. var pGigyaLogin = "Site";. var pTrackedGigya = false;. let inDebugMode = false;.. / digitalData methods*/. const debugConsole = (message) => {. if (inDebugMode) {. console.log(message);. }. };.. const toggleDebugMode = () => {. if (inDebugMode) {. inDebugMode = false;. } else {. inDebugMode = true;. }. };.. const digitalDataInit = () => {. if (!window.digitalData) {. window.digitalData = {};. }. };.. const digitalDataTypeInit = (type) => {. if (!window.digitalData[type]) {. window.digitalData[type] =

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\jquery.form[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8365
Entropy (8bit):	5.184252803436042
Encrypted:	false
SSDEEP:	192:WKTcNV65AjrXn7kbhJzsyIm183Ph5N94GltebXXKl7jiR9YDbSa4dKBPbM:WKTNC3MhJzs5m18fh5/TzaqVvV0KBPo
MD5:	EA3214871358154DB862DD1B621DE297
SHA1:	7D4B418B8AC81BDA8AAB5AABDB1237766037F8A0
SHA-256:	DA132F0D48D5BEE6B796BC87F23CC95BF00A75B2DB0F8E797EC8DC20F8FD25BD
SHA-512:	E03CA40B4994AAA57A256F90BF89139CE322C6552882655E5319A2381FEC488BF98463C921F482893FDB9040A1A79B2E60DF045EB2037B4C2D90632E3F069308
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/jquery.form.js
Preview:	(function($){$.fn.ajaxSubmit=function(options){if(typeof options=='function')options={success:options};options=$.extend({url:this.attr('action')\|\|window.location.toString(),type:this.attr('method')\|\|'GET'},options\|\|{});var veto={};$.event.trigger('form.pre.serialize',[this,options,veto]);if(veto.veto)return this;var a=this.formToArray(options.semantic);if(options.data){for(var n in options.data)a.push({name:n,value:options.data[n]})}if(options.beforeSubmit&&options.beforeSubmit(a,this,options)===false)return this;$.event.trigger('form.submit.validate',[a,this,options,veto]);if(veto.veto)return this;var q=$.param(a);if(options.type.toUpperCase()=='GET'){options.url+=(options.url.indexOf('?')>=0?'&':'?')+q;options.data=null}else options.data=q;var $form=this,callbacks=[];if(options.resetForm)callbacks.push(function(){$form.resetForm()});if(options.clearForm)callbacks.push(function(){$form.clearForm()});if(!options.dataType&&options.target){var oldSuccess=options.success\|\|function(){};cal

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\line-divider-and-spacing-issues-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	349
Entropy (8bit):	4.6608635642238525
Encrypted:	false
SSDEEP:	6:+r8mLYPJmmhJGsO/d99gq6hTJiqdduhAvq5LGirLJiqx3kzA+:g8mEPJLhJGsOj9eVJpuhxyifJz6T
MD5:	6CF7CE0240D0C4F4CB0DEB5A79923CD9
SHA1:	80C6FA1C4045A7ED49E039F45CC0DC5C49A15007
SHA-256:	8857741D9A4954C8DA6BD56126376748FF78D3BB8814079F72EF02E85EDB07BF
SHA-512:	A2705232866A977A5E1F5B0DFDD8DA1BA187C2886776F90D3DAA6B9093078CBFA54711950566DAF1436EA53058206ACBDD9140BA882C270AF18DDE04B21C8C9C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/line-divider-and-spacing-issues-7.583409
Preview:	.li-divider .vertical .comment-video a.smallCount {padding-right: 0}...li-divider .linklist li .comment-video {margin-left: -2px}...listHorizontal .list h3 {padding-bottom: 0}...listHorizontal .connect h3 {padding-bottom: 0.4em}...listHorizontal .linklist.vertical li {margin: 0}...listHorizontal .linklist li {background-position: 0 0.54em}...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\main[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	199491
Entropy (8bit):	5.398978857151432
Encrypted:	false
SSDEEP:	3072:StxV7TeURWz51HjuqyJIsE4z8b9o15CpY4gQi802xr:Stx1eUR851HjlyiNm8b+rCC4gQi8jxr
MD5:	F954E744FD27540DBF8EB714F254998B
SHA1:	64D6DF87DB8AD0015C08CD2CE1BE20CEC67CC668
SHA-256:	85F221F40551269FF0011C811F4ACF258C760F6DEABFA5A51A05C3797A02C79D
SHA-512:	8AF537F6983636650DB826FAC7EC68A7E958923579CDF0255FC9F49BD111EA47ABAC0869C1AB59E6F277EA43C261E92F0BDC4C3E2FA581B7C9C128D5AF5DB4F3
Malicious:	false
Reputation:	low
IE Cache URL:	https://auth.9c9media.ca/auth/main.js
Preview:	/.GIT TAG: 2.2.0-build13.GIT REVISION: e437c386./..!function(){"use strict";Array.prototype.forEach\|\|(Array.prototype.forEach=function(r,t){var o,n;if(null==this)throw new TypeError("this is null or not defined");var i=Object(this),e=i.length>>>0;if("[object Function]"!={}.toString.call(r))throw new TypeError(r+" is not a function");for(t&&(o=t),n=0;n<e;){var c;n in i&&(c=i[n],r.call(o,c,n,i)),n++}})}();.!function(){"use strict";Array.prototype.indexOf\|\|(Array.prototype.indexOf=function(r){for(var t=0,n=this.length;t<n;t+=1)if(this[t]===r)return t;return-1}),Array.prototype.lastIndexOf\|\|(Array.prototype.lastIndexOf=function(r){for(var t=this.length-1;0<=t;t-=1)if(this[t]===r)return t;return-1})}();.window.console&&void 0===window.console.time&&(console.time=function(e,o){if(e){var n=(new Date).getTime();console.timeCounters\|\|(console.timeCounters={});var t="KEY"+e.toString();!o&&console.timeCounters[t]\|\|(console.timeCounters[t]=n)}},console.timeEnd=function(e){var o=(new Date).getT

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\mdetect[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	12141
Entropy (8bit):	5.0280493078643795
Encrypted:	false
SSDEEP:	96:bFOZZ3m2XA/qKwsFtGA443JiqasD0pZeFqZIA:EZZ22XAzPtGA4UiqhLMR
MD5:	F072BA5573D31E4EF1AE54CAD08147D4
SHA1:	E2482E8E0804768CFF773829599EBB4F476328C9
SHA-256:	ABA292BA314FA61418C9677AAABDA0B773293416C17CD05DECACDF1BEE5393CB
SHA-512:	EA8DD2B809A13E6D62DF0C47B4F2B44AD869657D8F81A2F1F48F8315BF9F422CF6EEF17208D7AE2F73396AB9FA9DDF8EC649729597D91C8FE4A37B4B42135E4D
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/mdetect.js
Preview:	var MobileEsp={InitCompleted:false,IsWebkit:false,IsMobilePhone:false,IsIphone:false,IsAndroid:false,IsAndroidPhone:false,IsTierTablet:false,IsTierIphone:false,IsTierRichCss:false,IsTierGenericMobile:false,engineWebKit:"webkit",deviceIphone:"iphone",deviceIpod:"ipod",deviceIpad:"ipad",deviceMacPpc:"macintosh",deviceAndroid:"android",deviceGoogleTV:"googletv",deviceXoom:"xoom",deviceHtcFlyer:"htc_flyer",deviceNuvifone:"nuvifone",deviceSymbian:"symbian",deviceSymbos:"symbos",deviceS60:"series60",deviceS70:"series70",deviceS80:"series80",deviceS90:"series90",deviceWinPhone7:"windows phone os 7",deviceWinMob:"windows ce",deviceWindows:"windows",deviceIeMob:"iemobile",devicePpc:"ppc",enginePie:"wm5 pie",deviceBB:"blackberry",vndRIM:"vnd.rim",deviceBBStorm:"blackberry95",deviceBBBold:"blackberry97",deviceBBBoldTouch:"blackberry 99",deviceBBTour:"blackberry96",deviceBBCurve:"blackberry89",deviceBBCurveTouch:"blackberry 938",deviceBBTorch:"blackberry 98",deviceBBPlaybook:"playbook",devicePalm:

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\my-health-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	512
Entropy (8bit):	5.116408907879584
Encrypted:	false
SSDEEP:	12:AODD8VIO4KDU852WLRabZtaL52WLRVm/sZR6NzEjQNKCBn:AODD8+la5pLRaFML5pLR8/sZKE0vBn
MD5:	4DA749A0CAF05B7ACD6B66EABE9027E2
SHA1:	DF9CA21352700538615AAFD944C3DC13CE93F5C2
SHA-256:	192D96A33B9A30F28D745B89723B1C71C9908C3705830454331EB803632DDD6F
SHA-512:	820912C91B74612E6962E206AD4392E1B24AB5C1E51F4DA745B5A903C9C799360B9687D95083995A84891EE409AB63DC0DAF5068F4246E97A50D137D610C810E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/my-health-7.417142
Preview:	.topAd {padding: 0px; text-align: inherit}...thinnav {padding-left: 30px; background-position: 0 0}...thinnav .links-search {right: 70px}...banner .content-wrapper {background-image: url(https://www.ctvnews.ca/polopoly_fs/7.417143!/httpImage/image.jpg?v2)}..a.logo_ctvnews {background-image: url(https://www.ctvnews.ca/polopoly_fs/7.417150!/httpImage/image.png?v4); height: 41px; width: 161px; margin: 40px 0 41px 35px}...banner .content-wrapper{height: 121px}...content .content-wrapper {padding-top: 0px;}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\n[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	4.786495760962363
Encrypted:	false
SSDEEP:	3:XlMNLV3xQAWN2XpOdQQ/TbEeR+W/NcJHfF7SfYn:1AdxVWeOSQPRfGt7Sgn
MD5:	64888CCA094EE8B3C7CE9D2572A3A128
SHA1:	D22CCE8E167DC9C7A643F9C0AD0879C96D540650
SHA-256:	845BE52FCDD24EF869EDF67FC0281D7C68CD4FDC54F998D368BE38BAB1BBF999
SHA-512:	160C651390B5E4BD8837F2143DA9AE2EA11ECC3964B939E3503638D3A2E995CBAD3E8A56FAFBE307CD6461EEA1726174A32321D758D52AE5DAF30350FBB81B1D
Malicious:	false
Reputation:	low
IE Cache URL:	https://geo.moatads.com/n.js?e=35&ol=0&qn=(%2BIb%7Cj8o%3FJjDkk%7Bj12%3Ev%3EhhX%2FIX%5EpB1I%3Cq.bWol5%7D9%250m9%3FAd%5E8YDMt7%5EYa%5Dee%24%26X%258bNJqI011%5Dln13%2C(%3DN%7BqD%3D_11%5D2%24%3Cvmu!9%3FHa8h%3EdL7F%24%26FXJ9lrct2W.P%60n1%25y%5ETm_h(GJ25%3Dq%24%3BEtB8.%3AIO7v%3Ch%2Cqk%3BRk3Z.apc%3D%5EXa%5DLzXuI2mFjrRPP%3CV%3Cye%7Bzb%26mxjr%40%3F%3BggqhB3U4(%5BrU%24J)%2C4i8od%23pw%40%40bRS%3FIDzbPTR21KC&th=2077627710&tf=nMzjG----CHewJ-1rCAqD-P72zg-Id8O-&vi=444444&rc=0%2C2%2C2%2C1%2C1001431019%2C1%2C2%2C0%2Cprobably%2Cprobably&rb=1-6E1t5j9Bn5qpsX%2FUFigeERQLTlBk9lmd1Ss78ABRGBCPEpCfxlXpQB8EOC0dEk1CVCWz&sc=2&os=&qp=00001&is=&iv=8&qt=0&gz=0&hh=0&hn=0&tw=null&qc=36&qd=36&qf=784&qe=554&qh=800&qg=640&qm=420&qa=1280&qb=1024&qi=1280&qj=984&to=000&po=1-0220002012002220&vy=ot%24b%5Bh%40%22oDPRHj%5BG%2B1ck9L%22%251xbqddcBX%5EOC%2CNKxnD%2CYooX%25%24(%3DNqU%60WNCNmL5%25GF.pB&qr=0&url=https%3A%2F%2Ftoronto.ctvnews.ca%2Fontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784&pcode=bellmediaprebidheader755367530455&ql=7%5BLy)rXXRG%3A%3AJMhSA%5DB&qo=0&i=BELLMEDIA_PREBID_HEADER1&hp=1&wf=1&pxm=&vb=-1&kq=1&hq=0&hs=1&hu=0&hr=0&ht=0&dnt=0&bq=11&f=0&j=&t=1616166110325&de=376329500474&rx=68687393960&m=0&ar=e85cdf4-clean&iw=e718bb3&q=1&cb=0&cu=1616166110325&ll=1&lm=0&ln=0&em=0&en=0&d=undefined%3Aundefined%3Aundefined%3Aundefined&zGSRC=1&gu=https%3A%2F%2Ftoronto.ctvnews.ca%2Fontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784&id=1&ii=4&bo=undefined&bd=undefined&gw=bellmediaprebidheader755367530455&fd=1&ac=1&it=500&pe=1%3A-%3A-%3A0%3A0&fs=189893&na=2122877574&cs=0&callback=MoatDataJsonpRequest_12865239
Preview:	MoatDataJsonpRequest_12865239({"dc": 985876, "n": 110705, "nu": 284745, "oh": 759063, "nm": 487667})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\n[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	99
Entropy (8bit):	4.7595904342397555
Encrypted:	false
SSDEEP:	3:XlMNLV3xQAWP63WMDyRzW/sK+fnMTR/pjpI/Fd9h:1AdxVWK9WFW/sK+kdVpINdn
MD5:	918599A813959A612DE8569BF44CDBA8
SHA1:	5608C57FB995B7FAB828DC7A618FD184C5C751FB
SHA-256:	E3C007DC0C35118BC341D19163542DD4688B9098AC99664943AA797510E0DB29
SHA-512:	E223D097B5187FA785B25B60547371023DD86B9F0040D479F8EFBD944C6F00C398DD5893A3558F07A8519E4743DA04C07A01B80FB8FB4B150ED9559C0F2275E6
Malicious:	false
Reputation:	low
IE Cache URL:	https://geo.moatads.com/n.js?e=35&ol=0&qn=(%2BIb%7Cj8o%3FJjDkk%7Bj12%3Ev%3EhhX%2FIX%5EpB1I%3Cq.bWol5%7D9%250m9%3FAd%5E8YDMt7%5EYa%5Dee%24%26X%258bNJqI011%5Dln13%2C(%3DN%7BqD%3D_11%5D2%24%3Cvmu!9%3FHa8h%3EdL7F%24%26FXJ9lrct2W.P%60n1%25y%5ETm_h(GJ25%3Dq%24%3BEtB8.%3AIO7v%3Ch%2Cqk%3BRk3Z.apc%3D%5EXa%5DLzXuI2mFjrRPP%3CV%3Cye%7Bzb%26mxjr%40%3F%3BggqhB3U4(%5BrU%24J)%2C4i8od%23pw%40%40bRS%3FIDzbPTR21KC&th=2077627710&tf=nMzjG----CHewJ-1rCAqD-P72zg-Id8O-&vi=444444&rc=0%2C2%2C2%2C1%2C1001431019%2C1%2C2%2C0%2Cprobably%2Cprobably&rb=1-qZ6yRFd4%2F1SF%2Fo1qYb7aadb%2B%2FIKBUGUSV3C%2FvEJM65hND7UVt69nIRrqyNQFcZFf7egP&sc=2&os=&qp=00001&is=&iv=8&qt=0&gz=0&hh=0&hn=0&tw=null&qc=-8&qd=-8&qf=1280&qe=906&qh=1296&qg=1000&qm=420&qa=1280&qb=1024&qi=1280&qj=984&to=000&po=1-0220002012002220&vy=ot%24b%5Bh%40%22oDPRHj%5BG%2B1ck9L%22%251xbqddcBX%5EOC%2CNKxnD%2CYooX%25%24(%3DNqU%60WNCNmL5%25GF.pB&qr=0&url=https%3A%2F%2Ftoronto.ctvnews.ca%2Fmore%2Fbios%2Fsean-davidson-1.4670847%3FcontactForm%3Dtrue&pcode=bellmediaprebidheader755367530455&ql=7%5BLy)rXXRG%3A%3AJMhSA%5DB&qo=0&i=BELLMEDIA_PREBID_HEADER1&hp=1&wf=1&pxm=&vb=-1&kq=1&hq=0&hs=1&hu=0&hr=0&ht=0&dnt=0&bq=11&f=0&j=&t=1616166167877&de=196688343811&rx=450243202397&m=0&ar=e85cdf4-clean&iw=e718bb3&q=1&cb=0&cu=1616166167877&ll=12&lm=0&ln=0&em=0&en=0&d=undefined%3Aundefined%3Aundefined%3Aundefined&zGSRC=1&gu=https%3A%2F%2Ftoronto.ctvnews.ca%2Fmore%2Fbios%2Fsean-davidson-1.4670847%3FcontactForm%3Dtrue&id=1&ii=4&bo=undefined&bd=undefined&gw=bellmediaprebidheader755367530455&fd=1&ac=1&it=500&pe=1%3A-%3A-%3A0%3A0&fs=189893&na=1151503642&cs=0&callback=MoatDataJsonpRequest_10490839
Preview:	MoatDataJsonpRequest_10490839({"nu": 44504, "oh": 527398, "dc": 867664, "n": 604130, "nm": 643472})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\n[3].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	4.7691423860272675
Encrypted:	false
SSDEEP:	3:XlMNLV3xQAWMV3ecHtjQ69kCVdURdJ9Afzei+ucRRUQrHXmn:1AdxVWMEcHtjTlYdJ96Z/cRRhrH2
MD5:	65C3E3D64561C04E9D2B51903BC6D3A1
SHA1:	9A840FF8EE8F9C0A8A556B74FEB24DA087665740
SHA-256:	A6A27D1B7D7A00E7986465B6EE109D003790625B433C3E96B415AE97C2FC9A9D
SHA-512:	2CFC7CBC652853A3BF09DBF8DE7028BEBC46EEA71CC443651C68BC34A295D50C2F93EF2A1696C5996782561C5383F1EF1D253467AEBC5C7DFF4DB708CAD7CB0F
Malicious:	false
Reputation:	low
IE Cache URL:	https://geo.moatads.com/n.js?e=35&ol=0&qn=(%2BIb%7Cj8o%3FJjDkk%7Bj12%3Ev%3EhhX%2FIX%5EpB1I%3Cq.bWol5%7D9%250m9%3FAd%5E8YDMt7%5EYa%5Dee%24%26X%258bNJqI011%5Dln13%2C(%3DN%7BqD%3D_11%5D2%24%3Cvmu!9%3FHa8h%3EdL7F%24%26FXJ9lrct2W.P%60n1%25y%5ETm_h(GJ25%3Dq%24%3BEtB8.%3AIO7v%3Ch%2Cqk%3BRk3Z.apc%3D%5EXa%5DLzXuI2mFjrRPP%3CV%3Cye%7Bzb%26mxjr%40%3F%3BggqhB3U4(%5BrU%24J)%2C4i8od%23pw%40%40bRS%3FIDzbPTR21KC&th=2077627710&tf=nMzjG----CHewJ-1rCAqD-P72zg-Id8O-&vi=444444&rc=0%2C2%2C2%2C1%2C1001431019%2C1%2C2%2C0%2Cprobably%2Cprobably&rb=1-fsovPrh6hhsj2wAIuY7sH0xj4dy8ZWK4aztFOewYCG7c8eOm5Kk0%2FX%2FtDJ5WspFf7egP&sc=2&os=&qp=00001&is=&iv=8&qt=0&gz=0&hh=0&hn=0&tw=null&qc=-8&qd=-8&qf=1280&qe=906&qh=1296&qg=1000&qm=420&qa=1280&qb=1024&qi=1280&qj=984&to=000&po=1-0220002012002220&vy=ot%24b%5Bh%40%22oDPRHj%5BG%2B1ck9L%22%251xbqddcBX%5EOC%2CNKxnD%2CYooX%25%24(%3DNqU%60WNCNmL5%25GF.pB&qr=0&url=https%3A%2F%2Fwww.ctvnews.ca%2Fhealth%2Fcoronavirus%2Fcanada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1.5352524&pcode=bellmediaprebidheader755367530455&ql=7%5BLy)rXXRG%3A%3AJMhSA%5DB&qo=0&i=BELLMEDIA_PREBID_HEADER1&hp=1&wf=0&pxm=&vb=-1&kq=1&hq=0&hs=1&hu=0&hr=0&ht=0&dnt=0&bq=11&f=0&j=https%3A%2F%2Fwww.ctvnews.ca&t=1616166180996&de=618763349436&rx=442681158797&m=0&ar=e85cdf4-clean&iw=e718bb3&q=1&cb=0&cu=1616166180996&ll=19&lm=0&ln=0&em=0&en=0&d=undefined%3Aundefined%3Aundefined%3Aundefined&zGSRC=1&gu=https%3A%2F%2Fwww.ctvnews.ca%2Fhealth%2Fcoronavirus%2Fcanada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1.5352524&id=1&ii=4&bo=undefined&bd=undefined&gw=bellmediaprebidheader755367530455&fd=1&ac=1&it=500&pe=1%3A-%3A-%3A0%3A0&fs=189893&na=1915814322&cs=0&callback=MoatDataJsonpRequest_45380567
Preview:	MoatDataJsonpRequest_45380567({"nm": 378657, "nu": 508148, "oh": 378949, "dc": 194411, "n": 772166})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\newmynews-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	84
Entropy (8bit):	4.694467763670056
Encrypted:	false
SSDEEP:	3:Nxrwcs5DRfU1wvLdmAdRFN0NfGTcJ5DRfjv:4cANZk4Rb0NGUNrv
MD5:	AE50CB56D9CBACF3D0DE7C788552AB10
SHA1:	1485235B915B4D40E4B5942C8073F6A5BBD19BAE
SHA-256:	488083E80C28FC2D01F5C4028AE51168DD2C6421557E0474FB9064ECA89909E7
SHA-512:	CF7353982AF4F800711549CC0EA6470CF16491627BBA241FD382E6BE57E4AD1EA5D97CDDB5AD99624014543C93A7844CD1292D4A69FFFA78147D4E28FB61FC96
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/newmynews-7.701063
Preview:	.newmynews {padding-left:100px}.....mynewstext {width:235px; padding-left:30px}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\no-myhealth-mobile-background-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	161
Entropy (8bit):	4.579317330061268
Encrypted:	false
SSDEEP:	3:NxCudASN+YEZcP5CrFKDFEjF6Lhge94f0FmMosEJuaOqgvtKA6JM9Yn:GudUY55CrFKZc6LRcMoqFK1W9Yn
MD5:	15190415D3DD2AA7F9F29F3F8EF88285
SHA1:	FCD4D4B089666628C40541E8D93F9DCE26008EF1
SHA-256:	58428DD18436D91F8C67A043D0B8DD78A04C25570810DB874899A0D2011C4E4F
SHA-512:	765A482FF9E267C15BD4E49CF68C5B7CB83B6A4C2A073CCC325D8E9FEE747A736BABD8425898E29F68E6D792FA0771F08EA36D3DB3CF57BF7FB64D49C863CD1E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/no-myhealth-mobile-background-7.741286
Preview:	.banner .content-wrapper {background-image: none; height: auto}..a.name {display: none !important;}..a.name.articleLabel {display: inline-block!important}...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\omniture[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2994
Entropy (8bit):	4.609361257450997
Encrypted:	false
SSDEEP:	48:0mfjW2vmsaYCBm0iQR1B3vmepyabjkGpXlZHWyimTnb8gEYaasJ:0g62+xYyhvB/meAmjp1uyimDQg5U
MD5:	77921D48DA011A82D194361FC0946382
SHA1:	47CED46BDA5A4DEF26DF719DE79E2B4EF73792C0
SHA-256:	B470F8FC968EF7DAA3D0BBB738D89796559A7015B6F46ADB3D6E0CD213F88049
SHA-512:	B68F763E722D76C62E9C45C44B854BF982AC7EF7BFDE403F558199F6E4EFFB0A0802DDDC574B318CBCA73776F17A027612DF7ABE70C654748D3A7BA5BFBA16F6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/content/dam/static-resources/omniture.js
Preview:	function setupOmnitureTracking(omnitureAccount, omniturePrefix, omnitureCategory, sectionName, pageType, siteName, trackingSite, globalSuite) {. Tracking.setGlobalSuite(globalSuite);. var pathname = window.location.pathname;. var pagename = omniturePrefix;. var subsections = [null, null, null];.. pagename += ":" + siteName;. Tracking.setValue(69, siteName.toLowerCase());. if (pathname.length > 0) {.. if (siteName.length > 0) {. pathname = pathname.replace("/" + siteName.toLowerCase() + "/", "/");. }. pathname = pathname.replace(/\//g, ":");. if (pathname.length === 1) {. pathname = "";. }. if (pageType === "home") {. pagename += pathname;. pagename += ":" + pageType;. } else {. var index = pathname.lastIndexOf(":");. if (index > 0) {. pagename += pathname.substr(0, index);. if (pageType !== "" && pagename.substr(-1) !== ":

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\optout_check[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	82
Entropy (8bit):	4.956407455964654
Encrypted:	false
SSDEEP:	3:DLMNNNB3mXHWiBdVJX/YcHfH+FuH1M:8NYDBdVBAcHfZm
MD5:	6A2B99D5F18BFF33AC253C2B4558FC32
SHA1:	74FD84C5E92E3527CF029C60AD9886C3ED7DAB59
SHA-256:	CBCCDED655DB5E0A42239FB8DAFD699D35DE3A81EDF9993467CEBED65A833371
SHA-512:	9C8364AB9ABF0BB2E4EDCFCC7A44FCF1116DFC65499EFB3B4708DDAC8FFF6751DC25289081D6716612B00B893F3AA3A0DC599250F82F4CF2C940AF0D7F8EFCEE
Malicious:	false
Reputation:	low
Preview:	Krux.ns.bellmedia.kxjsonp_optOutCheck({"status":200,"body":{"_kuid_":"OAo8OofK"}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\p[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\proxy.3d2100fd7107262ecb55ce6847f01fa5[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	805
Entropy (8bit):	5.378799844322224
Encrypted:	false
SSDEEP:	24:0p6S3iXKFerXhhhHShuSoo3U8zwRGcGuHOiCaYviRWZFlB4N+:0ASykeZSDo6y3CaYviwYN+
MD5:	3D2100FD7107262ECB55CE6847F01FA5
SHA1:	C08E97F9A028F6BE91721683358E18E251764D7D
SHA-256:	3BCFA04DBC2DB44AF54BD72A0F7B98912368F16F525729A1B9B673F62CA7E5C9
SHA-512:	1465EE0B05B41C99AA283D6873BD2DE85DF3E04CBA27B7EB39040223AEFA5C861E116FEB5141D3C5586D512F70D4EE441F696D44C6DBFBA2D0F0A3F383BED976
Malicious:	false
Reputation:	low
IE Cache URL:	https://cdn.krxd.net/partnerjs/xdi/proxy.3d2100fd7107262ecb55ce6847f01fa5.html
Preview:	<!doctype html>.<html>.<head>. <title>Proxy</title>. <script data-version="2">. window.Krux\|\|((Krux=function(){Krux.q.push(arguments)}).q=[]),Krux("proxy"),function(){var t=function(t){for(var r=t.split("&"),e={},n=0,c=r.length;c>n;++n){var i=r[n].split("=");e[i[0]]=i[1]}return e},r=/^[a-z0-9_-]+$/i,e=window.location.hash,n=t(e.slice(e.indexOf("!")+1));if(!n.kxcid\|\|!r.test(n.kxcid))throw new Error("Invalid confid passed to proxy");n.kxcl&&r.test(n.kxcl)\|\|(n.kxcl="cdn"),n.kxp&&/^[0-9]{1,5}$/.test(n.kxp)\|\|(n.kxp="");var c=document.createElement("script");c.type="text/javascript",c.async=!0,c.src="//"+n.kxcl+".krxd.net"+(n.kxp?":"+n.kxp:"")+"/controltag/"+n.kxcid+".js";var i=document.getElementsByTagName("script")[0];i.parentNode.insertBefore(c,i)}();. </script>.</head><body></body>.</html>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\pubads_impl_2021031701[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	291787
Entropy (8bit):	5.486154886433462
Encrypted:	false
SSDEEP:	3072:o0mLR/sQ1SMByI7kQ2mmc11UgfMraTuK3E2e9sGkNGjhvkg9XYjO7C2ufM:4LnF1tgd1SgFYjOGjM
MD5:	FD5B8F063D44602D3EC360BD74D3C010
SHA1:	42BBB2A81BC3E0A9FD26DC5CDEC87802D3FE27F2
SHA-256:	CBBDA5FAC6618DA4BE9F03098DC394E81F435C51622E306605849C2AC2942FD3
SHA-512:	A2B1A162444DE7A80145983E6027719E3DE835F22A819873F144E1356DF71507BAB111A5CAB8B9B1D671ADB28582586586DB9D65108AC9E7BD544B16AA44762D
Malicious:	false
Reputation:	low
IE Cache URL:	https://securepubads.g.doubleclick.net/gpt/pubads_impl_2021031701.js?31060521
Preview:	(function(_){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var ba,aa,da,ea,fa,ja,la,na,ka,oa,pa,qa,ta,va,ya,za,Ba,Da,Fa,Ia,Ka,Ja,Na,Pa,Oa,x,v,ab,bb,cb,eb,fb,hb,ib,tb,vb,Cb,Db,Nb,Pb,Vb,Yb,Zb,$b,bc,dc,gc,lc,nc,oc,xc,zc,Bc,Cc,Fc,Gc,Hc,Ic,Kc,Lc,Mc,Oc,Pc,Rc,Tc,Xc,Yc,cd,ed,fd,hd,id,jd,kd,ld,nd,md,qd,rd,ud,yd,Ad,Bd,Cd,Fd,Kd,Md,Pd,Td,K,Ud,Vd,Wd,Xd,Yd,A,Zd,$d,ae,$c,be,ce,ge,he,ie,xe,ye,we,ve,ze,Ae,Be,ia,Ce,De,Ee,Fe,Wc,N;ba=function(a,b){b=aa(a,b);return 0>b?null:"string"===typeof a?a.charAt(b):a[b]};aa=function(a,b){for(var c=a.length,d="string"===typeof a?a.split(""):a,e=0;e<c;e++)if(e in d&&b.call(void 0,d[e],e,a))return e;return-1};_.ca=function(a,b){return 0<=Array.prototype.indexOf.call(a,b,void 0)};da=function(a,b){b=Array.prototype.indexOf.call(a,b,void 0);0<=b&&Array.prototype.splice.call(a,b,1)};ea=function(a){var b=a.length;if(0<b){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};fa=function(a,b,c){return 2>=arguments.length?Array.proto

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\reddit-icon[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 57 x 57, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1993
Entropy (8bit):	7.886380946383427
Encrypted:	false
SSDEEP:	48:4RKajVf/TMofhvwOiWEPzqBqUjZyM7R7fG4GGMjFXeQ3V9:4bVf/T3hvwOinPmzjZyC1GQMjxeQ33
MD5:	449916AF73E938CE9544C06EECB6FE37
SHA1:	DC0F01112D12D4B838E2BD197F281542FF57C8A4
SHA-256:	C4C693923F90D5E2E58221A70EB1964AFC8415FA331C2FBEF5F2BCFD6ED58710
SHA-512:	3D5C79A6CB0BE7CF549937148AF0E6B371D7AB831D3223D3838C84836EB1AAAC16D6C4354F7DE475EACE1AACE7FC0EFA618791A7C047AA6CD8EC1B1D8777B0EC
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/reddit-icon.png
Preview:	.PNG........IHDR...9...9.............IDATx....$.....wl...ck...;..=.m.m....n...L..3s.r...\|.?#...H.5....PWh%..v..d!K.?'..........c.#RD.....CX'\...<.c_.N.).....B.0_..A.../T.._..2..J!].G...S....Y@..0QH...I.&.....%...pX ....Q<."+.I.G$..8..."%..0..[F.la.P.~EV..;......B..:.`...Y...Bw_...f.b....m..Z..P;....v....i...^>..Sx......u.n....C..P..0m................{..73.g_.D......99.............x...2RaxW.&8..a..N"..._.........G...p.2de......vr?<.].......D>.k&c..J...p..$...c@.B.p5x.7...a.w..S..s.....'......A.....c.k54+.sft/..VA.~..S.M..Il.U.&2^H.].[.....?.j...........^.t......V ....E........k..-".@0.e]. <....94-.E..z..4C.A_c.!...mk9..y..hPE.2...=.b.....ep.8<..[..t...vOe...c.Gj....e.4.m....4..v....4-kP.ZT......A....OD.R.S...e...U...:b9jP.....n.4-[;..lVOy...N.U.j*..D3.W..M...F.Jie...E....Y...zE.....>pl.d...rs..l^..#..^........c..%.L..~..[....C....&.....ix9u..v...74....%..Q.uY....D.s....#;.....53tP.5..{-L...[.{...c.....B.Y"...jP. .....\|..d......... .

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\rid[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	109
Entropy (8bit):	4.713043412607084
Encrypted:	false
SSDEEP:	3:YxhArynyjgPAADMC3MuHACNN7kYCiNQDxP/VWIUcA+4U4:Ync1jMMtuHAEkYCiNQtPdPUW4
MD5:	D4C360D3DD4CBD7EFBEF04B72F3D42A4
SHA1:	14BAB9A7C8579A13806C58D9414910070DE330B6
SHA-256:	6E0562420D84224102C161917BACB402AE8D33B594CEA74C4BC2AC663C027C37
SHA-512:	2A9B995FAF9CEBB5771377B657BAED538FAD61A09ABDCE7F83A4112136AEA9BACF4053AF2C1A5F936734E34280BE0FE523A98EF99CBDC1B8CD992E32CB4F6D23
Malicious:	false
Reputation:	low
Preview:	{"TDID":"598e2931-1afd-48a0-a193-eeff58e08299","TDID_LOOKUP":"FALSE","TDID_CREATED_AT":"2021-03-19T07:01:51"}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\scribble-mynews-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	38
Entropy (8bit):	4.083067973799102
Encrypted:	false
SSDEEP:	3:NxrwBEDtvPOAIP:4yZvPvIP
MD5:	4ABF74544DDB84021157C037D6899E72
SHA1:	36CB8A37E3BF53EDAE9477C6F8BD095C76D0C039
SHA-256:	6B68CAB0FED0744FDDEDCC3BEE94B77B79DFB9A169842731228D2D06A996B1E4
SHA-512:	FEA20E3318072E7CDC6348A879FF6CAA81EBC99CBB09F8BEE0A2047517CE05F4566B13DFE49B9A6246F3391338598EF7E4BC9B6DA040576417E1C30857A6FE00
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/scribble-mynews-7.700231
Preview:	.newmynews {margin: 0 auto .2em;}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\sean-davidson-1[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	95710
Entropy (8bit):	4.407406453750757
Encrypted:	false
SSDEEP:	1536:cvNvWv6urj62kCZAMYFsf5Rv9+DyQ8kAkC/PpPg4Vu5dm/ZQVcARZzkPhwn62xCS:c1+Sd8kyRI4Vu5rVclhu
MD5:	6D7C971666517EACB5E51132B7B830AC
SHA1:	EC6B972D2C46EA3527E19A9F154A04892CFD3196
SHA-256:	F3E10034DCF9869E2A2361139940CA3AC07054E7BF95D1F39CFF9C0795DF3C5E
SHA-512:	F57E7FDCE1195391C1E0C12363DC270EF233D01E24DC28CF054A2820EE97270C6997EBB5D0E319863A89536B8058821AD841201A32770B4BAC22ECC0EBE727EB
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/more/bios/sean-davidson-1.4670847?contactForm=true
Preview:	<!DOCTYPE html>.<html lang="en" xmlns:og="http://ogp.me/ns#" xmlns:fb="https://www.facebook.com/2008/fbml" >.<head>.<meta http-equiv="content-type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="text/html, charset=UTF-8, IE=edge, chrome=1">....<link rel="canonical" href="https://toronto.ctvnews.ca/more/bios/sean-davidson-1.4670847" />.......<script type="text/javascript">.var videoPageUrl = "https://toronto.ctvnews.ca/video";.</script>.<script type="text/javascript" src="https://static.ctvnews.ca/bellmedia/common/js/jquery-1.7.js"></script>.<script type="text/javascript" src="https://static.ctvnews.ca/bellmedia/common/js/jquery.cookie.js"></script>.<script type="text/javascript" src="https://static.ctvnews.ca/bellmedia/common/js/requireDependency.js"></script>.<script type="text/javascript">. var kruxID = "ImoeZsch";.</script>. END Krux Controltag -->..<meta name="viewport" content="width=1024" />..<style>...@font-face {font-family: 'Flama-Medi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\search-button[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 14 x 14, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	343
Entropy (8bit):	6.863590826790991
Encrypted:	false
SSDEEP:	6:6v/lhP6IcRnDspsVQlZ0CBJ8fnQWE/Rlb7DtgIiVgNpWVSV0PCWxU+dxpWFVp:6v/7iIr24JVRlPqIy5A+CgdW
MD5:	D71B79471093555572BA86D607C3C331
SHA1:	5C8F79918F23423345538D202DAB7FB99ADD6438
SHA-256:	6C336DEF046A096EF6FF9EDC77EB1BFF3E39EB37D2153B4FC520341A36711A8C
SHA-512:	F6E70F17052422AB7665AAA123754E2EEB13D02A2CE2D7069F1E95D10D77D442164017E9461C66D36CBC79EAC8C6DA144E22BE2209190AE3C1EA93BFBBF41FC2
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/search-button.png
Preview:	.PNG........IHDR..............H-.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b...?....q,.....@...=...I.....@\|.?v.....id..gPE..X........B...1#..D...tI..a...5..J.`....A.......d. ...vp.J."..4...qh..QD..@.r..Y.)..O..7......o..... ..B.....x..........._k ..b. ~......OC.\|.bm ~.#..&.. g+......~C5?Bv*1@..W..r.....x..s.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\shares[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	131
Entropy (8bit):	4.673616867376997
Encrypted:	false
SSDEEP:	3:kXQRVWhEl2UTFZ7fKChBW5TipEoL4TTaAjM2V/XIn:UQzkiFZ7fKC/IQE/WAtVA
MD5:	B748808B9945169345EED16D0D339C35
SHA1:	E97A87F3CE6933DBC1E85EF858C0919D31DDC711
SHA-256:	C7BE1450761ADADEFAEDF706FA43A7F0315DF0A6D46B8E33015471104894E6C9
SHA-512:	956AF3D3792E0F36744F5A88F18B67A5E11349FCA9B2177289935F4B20A348ACF752A7F86D2E46F3DD8D6A5A947AFE13B70B8FE9D50342A211DB36730360CED6
Malicious:	false
Reputation:	low
IE Cache URL:	https://api-public.addthis.com/url/shares.json?url=https%3A%2F%2Fwww.ctvnews.ca%2Fhealth%2Fcoronavirus%2Fcanada-finalizing-deal-with-u-s-for-1-5m-doses-of-the-astrazeneca-vaccine-1.5352524&callback=_ate.cbs.sc_httpswwwctvnewscahealthcoronaviruscanadafinalizingdealwithusfor15mdosesoftheastrazenecavaccine153525240
Preview:	_ate.cbs.sc_httpswwwctvnewscahealthcoronaviruscanadafinalizingdealwithusfor15mdosesoftheastrazenecavaccine153525240({"shares":12});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\site-style-improvements-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	6096
Entropy (8bit):	5.09218429614892
Encrypted:	false
SSDEEP:	96:f2vAJwXR+pHf+EIz44Mz8nBFkUzT1HsSPXsRHNcuZHEIZHzzaf1OquK8jfxuJQhf:fNoE9+jnBFdTFsSPXsBd7zuf1Oqqj5gK
MD5:	85A4D3E0BDDE68CCE4C34717BB395AAD
SHA1:	A7FC46EA9F94BF33F281F65DA17CD195D8DB0C5F
SHA-256:	C1087AA3D471E22DE1798497922B5274FEFEE805E3074C693C27B80597BFC6A1
SHA-512:	70E9A3A423C171D7007C0CB848C8650E1BCA282C4ACAAC249696CD67FA43DE1AA6D0EBB5815003E452B7EC67675E48B0DF2939924441DF908CC97A423C75977F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/site-style-improvements-7.695789?v3
Preview:	.tvListings div.bottom-links .da, .tvListings .element span.da {.. background-position: 0 55%!important;..}.....covid19__articleList .bottom-links, .covid19__topStoryGroup .li-divider .bottom-links {display: none}...covid19__articleList .double-top {border-top: 1px solid #cdcdcd}.....covid19__col .list.element {.. padding-bottom: 0;.. }.....covid19__col hr {margin-top: 0; padding-top:0}.....covid19__threeCol .teaserTitle {.. font-size: 13px;.. font-weight: bold;.. line-height: 1.2;.. color: #006699;..}...covid19__threeCol .dc {margin-top: -1px}.....covid19__threeCol .teaserLead {padding-top: 3px}.....covid19__topStoryGroup .mvr-list{.. padding-bottom: 0;..}.....covid19__topStoryGroup .linklist li.dc.mvr-teaser {padding-left: 0.6em}.....covid19__topStoryGroup .mvr-list {border-top: 0}.....covid19__topStoryGroup .mvr-list ul.linklist li.dc .teaserText.smallVersion {.. width: 44.5%;..}.....covid19__colS--TR {margin-top: 5px}.....covid19__col .linklist li.mvr-teaser { ..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\site.min.11f4cf0040610a5ac59278fe7157727e[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5161
Entropy (8bit):	5.245355878635554
Encrypted:	false
SSDEEP:	96:S4anSVLelC4qxWVN2SX3H0DRclyZ3ydSKLPk8qZSjONKyacHoRJ9g9A9FcoDJy/g:S4anSVLelC4qxWDJ0DRclGWSKLPk8Xjt
MD5:	11F4CF0040610A5AC59278FE7157727E
SHA1:	34B86E401BDCDC3313BB6C84D916F92D876BB658
SHA-256:	C223459F084B475EA4E9AD57463D46E60697E6A6A7D2D31E7470E5C6E9E635B1
SHA-512:	341DCD619DC0C21453ACD4C1F53762A65F58CF5B2E9C09B64F0A07D03F60B4B48CB21F86EE76976511C341F581B863E69EF17DBD00B066384057C6EA6EF816FD
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/core/wcm/components/accordion/v1/accordion/clientlibs/site.min.11f4cf0040610a5ac59278fe7157727e.js
Preview:	Element.prototype.matches\|\|(Element.prototype.matches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector);Element.prototype.closest\|\|(Element.prototype.closest=function(l){var g=this;if(!document.documentElement.contains(g))return null;do{if(g.matches(l))return g;g=g.parentElement\|\|g.parentNode}while(null!==g&&1===g.nodeType);return null});.(function(){function l(d){function g(a){a.element.removeAttribute("data-cmp-is");k(a.options);m(a.element);b._elements.item&&(b._elements.item=Array.isArray(b._elements.item)?b._elements.item:[b._elements.item],b._elements.button=Array.isArray(b._elements.button)?b._elements.button:[b._elements.button],b._elements.panel=Array.isArray(b._elements.panel)?b._elements.panel:[b._elements.panel],b._properties.singleExpansion&&(a=x(),0===a.length&&q(0),1<a.length&&q(a.length-1)),v(),y(),window.Granite&&.window.Granite.author&&window.Granite.author.MessageChannel&&(new window.Granite.author.MessageChannel("cqauthor",window)).subscr

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\site.min.374f7e3bc9e2090bf176e339c992611f[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2146
Entropy (8bit):	5.17426453583246
Encrypted:	false
SSDEEP:	48:Tufq/MCCtMCoPb6y+2M1kSbtxrFjRCMsMNMp0+MxX/qZuU:KfqEPuFP1QkSb/x13tOpsxX/qZ3
MD5:	374F7E3BC9E2090BF176E339C992611F
SHA1:	C15491DBADA3ED400C0D37FF70AC0EB89BCB6E15
SHA-256:	976B0A7A53869D4BED1B4B6852CB0A724B11F8F408685F31D80030F804E6F837
SHA-512:	0EF533974B0EB89B207E29396BB373DB0A0AD3AABB151707A92804EA3E8D4BA5BCB5BB5C86ED7C7CCD2D20AF7D4E57E84E4008D86A502A9E26F43EA5016EDECA
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/core/wcm/components/form/text/v2/text/clientlibs/site.min.374f7e3bc9e2090bf176e339c992611f.js
Preview:	(function(){function g(a){a=a.dataset;var b=[],d="formText";d=d.charAt(0).toUpperCase()+d.slice(1);d=["is","hook"+d];for(var c in a)if(a.hasOwnProperty(c)){var e=a[c];0===c.indexOf("cmp")&&(c=c.slice(3),c=c.charAt(0).toLowerCase()+c.substring(1),-1===d.indexOf(c)&&(b[c]=e))}return b}function e(a){a.element&&a.element.removeAttribute("data-cmp-is");this._cacheElements(a.element);this._setupProperties(a.options);this._elements.input.addEventListener("invalid",this._onInvalid.bind(this));this._elements.input.addEventListener("input",.this._onInput.bind(this))}function h(){for(var a=document.querySelectorAll(k.self),b=0;b<a.length;b++)new e({element:a[b],options:g(a[b])});a=window.MutationObserver\|\|window.WebKitMutationObserver\|\|window.MozMutationObserver;b=document.querySelector("body");(new a(function(a){a.forEach(function(a){a=[].slice.call(a.addedNodes);0<a.length&&a.forEach(function(a){a.querySelectorAll&&[].slice.call(a.querySelectorAll(k.self)).forEach(function(a){new e({element:a,o

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\site.min.59c0d61dcf5eacb237a83816c6996ebd[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	559
Entropy (8bit):	4.877871848826073
Encrypted:	false
SSDEEP:	12:bMb5rQIaR4j1ibGehSUn1wB+XvYAjl0+Y:bKSIPk1wAZfY
MD5:	59C0D61DCF5EACB237A83816C6996EBD
SHA1:	184C89970472C1D1A6078495E4F7B126C36A67DC
SHA-256:	406B7BD6BD4965007CC2021AE02A1FA3773924CA7416BF1CDDACF95BC8D3793B
SHA-512:	57AD21261FAE7DFBC4EBDEEC54D2FFB9A185EB39AECC4A9CFC93B085B7BF1109DBB387A49A1976430C3BFE34DFC8437FBDB7544DA93ADE4465495A25ED9E5AA6
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/core/wcm/components/carousel/v1/carousel/clientlibs/site.min.59c0d61dcf5eacb237a83816c6996ebd.css
Preview:	.cmp-carousel__content{position:relative}..cmp-carousel__item{display:none}..cmp-carousel__item--active{display:block}..cmp-carousel__action{-webkit-appearance:none;-moz-appearance:none;appearance:none}..cmp-carousel__indicators{display:flex;flex-wrap:wrap;justify-content:center;margin:0;padding:0;list-style:none}..cmp-carousel__indicator{position:relative;flex:0 1 auto;width:10px;height:10px;margin:0 7px;border-radius:50%;font-size:0;text-indent:-3000px;background-color:rgba(0,0,0,0.5)}..cmp-carousel__indicator--active{background-color:rgba(0,0,0,0.8)}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\site.min.ac23637ac0bc2074acc2be13e062f0b9[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	7054
Entropy (8bit):	5.165768412449991
Encrypted:	false
SSDEEP:	192:N58yDu9OjaqsmwU+ig6CkSiCgdSsi8kii6WCaqEW5My/pTioU0WG4twzVQqOMdRf:N58yDu92aqsmwU+igeSsi8kii6WCaqEk
MD5:	AC23637AC0BC2074ACC2BE13E062F0B9
SHA1:	39093076CB6F683185565A46192FBACC1CC34A1A
SHA-256:	336F445182FC079CD462EA65289DD1C02DF443607F51810FDC6F1D696AE78F0E
SHA-512:	D8EF1406910A821E456AB75CDA54CE5530803329BB31095AAE91374FC2671F8E33DADB054C82C694FBA1341F5D3EAF78A99910A1B1AD86D6DDD21604473C859D
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/core/wcm/components/search/v1/search/clientlibs/site.min.ac23637ac0bc2074acc2be13e062f0b9.js
Preview:	(function(){function k(a){a=a.dataset;var b=[],c="search";c=c.charAt(0).toUpperCase()+c.slice(1);c=["is","hook"+c];for(var d in a)if(a.hasOwnProperty(d)){var e=a[d];0===d.indexOf("cmp")&&(d=d.slice(3),d=d.charAt(0).toLowerCase()+d.substring(1),-1===c.indexOf(d)&&(b[d]=e))}return b}function g(a,b){a&&(!1!==b?(a.style.display="block",a.setAttribute("aria-hidden",!1)):(a.style.display="none",a.setAttribute("aria-hidden",!0)))}function p(a){var b=[];if(a&&a.elements)for(var c=0;c<a.elements.length;c++){var d=.a.elements[c];!d.disabled&&d.name&&(d=[d.name,encodeURIComponent(d.value)],b.push(d.join("\x3d")))}return b.join("\x26")}function l(a,b){if(a&&b)if(3===a.nodeType){var c=a.nodeValue;b=b.exec(c);if(c&&b){c=document.createElement("mark");c.className="cmp-search__item-mark";c.appendChild(document.createTextNode(b[0]));var d=a.splitText(b.index);d.nodeValue=d.nodeValue.substring(b[0].length);a.parentNode.insertBefore(c,d)}}else if(a.hasChildNodes())for(c=0;c<a.childNodes.length;c++)l(a.ch

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\sponsored-articles-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	507
Entropy (8bit):	4.594276999301015
Encrypted:	false
SSDEEP:	6:dM15cVEhbB62M15KOWEDpM1J3IUYyyW2M15xWKGAALAKM159jh32M15KO2H2M1MK:xutB6HWbYUYa/RA2j1HCYIP7/9Ky
MD5:	9420E3DEEB2FC2E90BE90FB236F463CA
SHA1:	617740BCCB8778904F0D27D71E3DE2C201AE4154
SHA-256:	3086C562555667DDD7325912DB2CF3579EFB6344F41BF4BCEFA5FCAA211A900C
SHA-512:	04A1B6EC71D649BCBEFA9CDF02A892D9A69CFF005F2F65C233F70BCE67E2050A2692F6F39DEAEAC88A0857397C3437338C984D2E34D501B8157D1AA6922F39B6
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/sponsored-articles-7.688114
Preview:	footer .sponsorList .list {float: none!important; height: 170px;}....footer .sponsorList .linklist {display: block}.....content footer .sponsorList .list.element .bottom-links {display: none}....footer .sponsorList .list.videoPromoList {height: 95px}.....content-footer .sponsorList .list.element {padding-bottom: 0}....footer .sponsorList .linklist {padding: 0!important}....footer .sponsorList {float: left!important; display: inline!important}....footer .list, footer .sponsorList {height: 236px}...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\sponsored-articles-7[2].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	507
Entropy (8bit):	4.594276999301015
Encrypted:	false
SSDEEP:	6:dM15cVEhbB62M15KOWEDpM1J3IUYyyW2M15xWKGAALAKM159jh32M15KO2H2M1MK:xutB6HWbYUYa/RA2j1HCYIP7/9Ky
MD5:	9420E3DEEB2FC2E90BE90FB236F463CA
SHA1:	617740BCCB8778904F0D27D71E3DE2C201AE4154
SHA-256:	3086C562555667DDD7325912DB2CF3579EFB6344F41BF4BCEFA5FCAA211A900C
SHA-512:	04A1B6EC71D649BCBEFA9CDF02A892D9A69CFF005F2F65C233F70BCE67E2050A2692F6F39DEAEAC88A0857397C3437338C984D2E34D501B8157D1AA6922F39B6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/sponsored-articles-7.688114
Preview:	footer .sponsorList .list {float: none!important; height: 170px;}....footer .sponsorList .linklist {display: block}.....content footer .sponsorList .list.element .bottom-links {display: none}....footer .sponsorList .list.videoPromoList {height: 95px}.....content-footer .sponsorList .list.element {padding-bottom: 0}....footer .sponsorList .linklist {padding: 0!important}....footer .sponsorList {float: left!important; display: inline!important}....footer .list, footer .sponsorList {height: 236px}...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\ta-pagesocial-sdk[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	27827
Entropy (8bit):	5.2841513869198575
Encrypted:	false
SSDEEP:	384:TwDvRd77jm2vuWko9JKiLoMxCuQKqGy0UobFZcd/UsrhEux51yhuRA7/JKw4lYKq:TiZuWk2KLM8IPoJXx51yhuRA7/JKZXRg
MD5:	02AF10AA928EF75DE8412A60D0B87A4C
SHA1:	A0A2FBE583AE1F3155290BF18D5E56953FDC8E8D
SHA-256:	8DBC3F1A033B6733E96A5AF1BC89D6F8AB68A5D533DCAD72D56BD019E3B5B6B5
SHA-512:	4D3FE348859D69BEF9F42C076EB6DE6C1F4C69D1ADD1D9646B70F805990E2C4D80874136D047BEB019F209BC0ECB82782B3EC980BBA2EF116212EEBF1DCD4094
Malicious:	false
Reputation:	low
IE Cache URL:	https://tru.am/scripts/ta-pagesocial-sdk.js
Preview:	/! For license information please see ta-pagesocial-sdk.js.LICENSE.txt /.(()=>{var t={531:(t,e,r)=>{"use strict";var n,o,i,s,a,c,u=r(362),h=r(293),f=r(472),l=r(57),p=[],d=window.document;function y(){}function m(){var t;return"string"==typeof n&&n.length>0?t=encodeURIComponent(n):"function"==typeof n?t="string"==typeof(t=n())&&t.length>0?encodeURIComponent(t):void 0:Array.isArray(n)&&n.length>0&&0===(t=n.filter((function(t){return"string"==typeof t&&t.length>0})).map((function(t){return encodeURIComponent(t)}))).length&&(t=void 0),t}function g(t){t.scripts&&t.scripts.forEach(l.loadScript),p.push("responded "+JSON.stringify(t))}function v(){var t=new URL(ia_document.shareURL),e=[t.protocol,"//",t.host,t.pathname].join(""),r=ia_document.title,n=ia_document.referrer,o=encodeURIComponent(t.href),i=m();i&&e&&h.simplePageView(i,e,e,n,o,r)}function b(t,e,r){var n,l,d,v,b,w=window!==window.top,_=window.location,A=c\|\|_.search;f.isBot()?p.push("is a bot page load"):f.is404NotFound()?p.push("is

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\tooltipster[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	7148
Entropy (8bit):	4.825675354037696
Encrypted:	false
SSDEEP:	192:ARTXbkLhxpkbNLTAgL6opPJ/Wd3zMtYRrW:ARTXQLhxqbNLTAgL6opPJYQtYRrW
MD5:	D2147DF986D9B0020D3D16BA945B7297
SHA1:	9E65A4B48960ACFFC7F7B786AEE8EC4A0D30F771
SHA-256:	4D31F949877C582A7D673189B540A5E5A024C75E7819F0734423463B16A9F1EF
SHA-512:	D34AD3DE4911C43F494CC1C9E33522729678F3E2195BF4DF84044F10D8604DECFD889BFCACADC7B9BBC0BA2784C6F672ECFE88ADAFE542A5F7274FD94851077F
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/css/tooltipster.css
Preview:	.tooltipster-default{border:1px solid #c1c1c1;background:#f3f3f3;filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#F3F3F3',endColorstr='#F4F4F4');background:-webkit-gradient(linear,left top,left bottom,from(#f3f3f3),to(#f4f4f4));background:-moz-linear-gradient(top,#f3f3f3,#f4f4f4);color:#000}.tooltipster-default .tooltipster-content{font-family:Arial,sans-serif;font-size:14px;line-height:16px;padding:8px 10px;overflow:hidden}.tooltipster-icon{cursor:help;margin-left:4px}.tooltipster-base{padding:0;font-size:0;line-height:0;position:absolute;z-index:9999999;pointer-events:none;width:auto;overflow:visible}.tooltipster-base .tooltipster-content{overflow:hidden}.tooltipster-arrow{display:block;text-align:center;width:100%;height:100%;position:absolute;top:0;left:0;z-index:-1}.tooltipster-arrow span,.tooltipster-arrow-border{display:block;width:0;height:0;position:absolute}.tooltipster-arrow-top span,.tooltipster-arrow-top-right span,.tooltipster-arrow-top-left span{border-l

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\v2[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	272
Entropy (8bit):	5.006950513946683
Encrypted:	false
SSDEEP:	3:X4sz3xQAWN2Xp/NtUcZxTLSgfNc3+mW9r7CPKgNVhm2XShJ4MWcFHIK4m2uWeX9T:p3xVWe/NtFP/5m3WR0eiX+D2g0JyU+
MD5:	5C8D2A0D279216F64C4E15C2F4BE7515
SHA1:	E3E8893A83550E1C4BE0F37D5AEFDBE9603B5BC4
SHA-256:	F38F5CCC5BB883E04D7F1301A01830AD4DE2C76ECB631F0B1ABF6EDD567C42A5
SHA-512:	ACF9A6656E0DD44EA174712304413F23596CFF772E65E941CB84CA9ADFBC4AAAB52BD0B8BF977F874E3F7B70DB02D475E8102C69CF2AE7C6B9BC2D915A1A0C1C
Malicious:	false
Reputation:	low
IE Cache URL:	https://mb.moatads.com/yi/v2?ol=0&qn=(%2BIb%7Cj8o%3FJjDkk%7Bj12%3Ev%3EhhX%2FIX%5EpB1I%3Cq.bWol5%7D9%250m9%3FAd%5E8YDMt7%5EYa%5Dee%24%26X%258bNJqI011%5Dln13%2C(%3DN%7BqD%3D_11%5D2%24%3Cvmu!9%3FHa8h%3EdL7F%24%26FXJ9lrct2W.P%60n1%25y%5ETm_h(GJ25%3Dq%24%3BEtB8.%3AIO7v%3Ch%2Cqk%3BRk3Z.apc%3D%5EXa%5DLzXuI2mFjrRPP%3CV%3Cye%7Bzb%26mxjr%40%3F%3BggqhB3U4(%5BrU%24J)%2C4i8od%23pw%40%40bRS%3FIDzbPTR21KC&th=2077627710&tf=nMzjG----CHewJ-1rCAqD-P72zg-Id8O-&vi=444444&rc=0%2C2%2C2%2C1%2C1001431019%2C1%2C2%2C0%2Cprobably%2Cprobably&rb=1-6E1t5j9Bn5qpsX%2FUFigeERQLTlBk9lmd1Ss78ABRGBCPEpCfxlXpQB8EOC0dEk1CVCWz&sc=2&os=&qp=00001&is=&iv=8&qt=0&gz=0&hh=0&hn=0&tw=null&qc=36&qd=36&qf=784&qe=554&qh=800&qg=640&qm=420&qa=1280&qb=1024&qi=1280&qj=984&to=000&po=1-0220002012002220&vy=ot%24b%5Bh%40%22oDPRHj%5BG%2B1ck9L%22%251xbqddcBX%5EOC%2CNKxnD%2CYooX%25%24(%3DNqU%60WNCNmL5%25GF.pB&qr=0&url=https%3A%2F%2Ftoronto.ctvnews.ca%2Fontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784&pcode=bellmediaprebidheader755367530455&callback=MoatNadoAllJsonpRequest_12865239
Preview:	MoatNadoAllJsonpRequest_12865239({"nm": 192192, "nu": 361778, "oh": 759905, "dc": 931935, "n": 373457, "s": true, "pcode": "bellmediaprebidheader755367530455", "c": ["gs_health_misc", "moat_safe", "gs_covid19"], "ct": 0, "g": 0.0017635822296142578, "yi": {"_pbd": false}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\v2[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	267
Entropy (8bit):	4.973217366953223
Encrypted:	false
SSDEEP:	3:X4sz3xQAWUl/MrIHtGSQ/qctr/7MFHLQPBAfrbdH6y2KgNVhm2XShJ4MWcFHCPIh:p3xVWUlxt+Ccy97VHd8eiX+EQW4MqGGb
MD5:	2DA74BFF53C8AE2BE2E5EBEE8C0E48F8
SHA1:	40A079C01F4EBB5A4A51934981ABE3D709A086FD
SHA-256:	EC522EB9DD6E9E161B36061AEC297A1D175956E11B37BB52DC3A2AED728C02D9
SHA-512:	872919E8B4750B23236F1C62E55AAC3743F2506A3C101BCE27A1C201AEDD6299FCA87D65457FB246E7EF75F3FC4EDD89DEABE16657D45D80B7E747CB5142C3ED
Malicious:	false
Reputation:	low
IE Cache URL:	https://mb.moatads.com/yi/v2?ol=0&qn=(%2BIb%7Cj8o%3FJjDkk%7Bj12%3Ev%3EhhX%2FIX%5EpB1I%3Cq.bWol5%7D9%250m9%3FAd%5E8YDMt7%5EYa%5Dee%24%26X%258bNJqI011%5Dln13%2C(%3DN%7BqD%3D_11%5D2%24%3Cvmu!9%3FHa8h%3EdL7F%24%26FXJ9lrct2W.P%60n1%25y%5ETm_h(GJ25%3Dq%24%3BEtB8.%3AIO7v%3Ch%2Cqk%3BRk3Z.apc%3D%5EXa%5DLzXuI2mFjrRPP%3CV%3Cye%7Bzb%26mxjr%40%3F%3BggqhB3U4(%5BrU%24J)%2C4i8od%23pw%40%40bRS%3FIDzbPTR21KC&th=2859508757&tf=nMzjG----CHewJ-1rCAqD-P72zg-Id8O-&vi=444444&rc=0%2C2%2C2%2C1%2C1001431019%2C1%2C2%2C0%2Cprobably%2Cprobably&rb=1-vUphrZVsFcUVxxPYS2zXGycd%2FIKBUGUSV3C%2FvEJM65hND7UVt69nIRrqyNQFcZFf7egP&sc=2&os=&qp=00001&is=&iv=8&qt=0&gz=0&hh=0&hn=0&tw=null&qc=-8&qd=-8&qf=1280&qe=906&qh=1296&qg=1000&qm=420&qa=1280&qb=1024&qi=1280&qj=984&to=000&po=1-0220002012002220&vy=ot%24b%5Bh%40%22oDPRHj%5BG%2B1ck9L%22%251xbqddcBX%5EOC%2CNKxnD%2CYooX%25%24(%3DNqU%60WNCNmL5%25GF.pB&qr=0&url=https%3A%2F%2Ftoronto.ctvnews.ca%2F&pcode=bellmediaprebidheader755367530455&callback=MoatNadoAllJsonpRequest_31735942
Preview:	MoatNadoAllJsonpRequest_31735942({"nm": 237796, "dc": 594486, "n": 848085, "nu": 871901, "oh": 444394, "s": false, "pcode": "bellmediaprebidheader755367530455", "c": ["gs_health_misc", "gs_covid19", "moat_unsafe", "gv_crime"], "ct": 1, "g": 0, "yi": {"_pbd": false}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\v2[3].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	297
Entropy (8bit):	5.065602888181572
Encrypted:	false
SSDEEP:	3:X4sz3xQAWMUShzPt5oZRLHK1CgnR/s7a2KgNVhm2XShJEbEcIagWeIVXK2X/wI6q:p3xVWMLBtQF6Cp7a8e2EciuHw4x
MD5:	A25E96E10B0B427AF2AE1497DCB27ACC
SHA1:	CE2BF7C16E46EE52E23A33F0432FBCDEF33756A5
SHA-256:	6FA67429C8B53AA88591A8F6CB0F6BF109A582680CA2E5D616869D3E813AFF55
SHA-512:	DD501033802F727548B83987DF13F0210F75BBBB71D9B0FEEF7284E166A8B25A8DE3975727F1839309D38693BB870265C00C2DC3F8DAA9ADEC269813CC1ED02D
Malicious:	false
Reputation:	low
IE Cache URL:	https://mb.moatads.com/yi/v2?ol=0&qn=(%2BIb%7Cj8o%3FJjDkk%7Bj12%3Ev%3EhhX%2FIX%5EpB1I%3Cq.bWol5%7D9%250m9%3FAd%5E8YDMt7%5EYa%5Dee%24%26X%258bNJqI011%5Dln13%2C(%3DN%7BqD%3D_11%5D2%24%3Cvmu!9%3FHa8h%3EdL7F%24%26FXJ9lrct2W.P%60n1%25y%5ETm_h(GJ25%3Dq%24%3BEtB8.%3AIO7v%3Ch%2Cqk%3BRk3Z.apc%3D%5EXa%5DLzXuI2mFjrRPP%3CV%3Cye%7Bzb%26mxjr%40%3F%3BggqhB3U4(%5BrU%24J)%2C4i8od%23pw%40%40bRS%3FIDzbPTR21KC&th=2077627710&tf=nMzjG----CHewJ-1rCAqD-P72zg-Id8O-&vi=444444&rc=0%2C2%2C2%2C1%2C1001431019%2C1%2C2%2C0%2Cprobably%2Cprobably&rb=1-HQLfcc6yZ18Qbso8rTYhadb%2B%2FIKBUGUSV3C%2FvEJM65hND7UVt69nIRrqyNQFcZFf7egP&sc=2&os=&qp=00001&is=&iv=8&qt=0&gz=0&hh=0&hn=0&tw=null&qc=-8&qd=-8&qf=1280&qe=906&qh=1296&qg=1000&qm=420&qa=1280&qb=1024&qi=1280&qj=984&to=000&po=1-0220002012002220&vy=ot%24b%5Bh%40%22oDPRHj%5BG%2B1ck9L%22%251xbqddcBX%5EOC%2CNKxnD%2CYooX%25%24(%3DNqU%60WNCNmL5%25GF.pB&qr=0&url=https%3A%2F%2Ftoronto.ctvnews.ca%2Fmore%2Fbios%2Fsean-davidson-1.4670847&pcode=bellmediaprebidheader755367530455&callback=MoatNadoAllJsonpRequest_13177760
Preview:	MoatNadoAllJsonpRequest_13177760({"nm": 517654, "nu": 899934, "oh": 8692, "dc": 800206, "n": 521701, "s": false, "pcode": "bellmediaprebidheader755367530455", "c": ["gs_news_and_weather", "moat_unsafe", "gs_covid19", "gv_death_injury"], "ct": 0, "g": 0.0014498233795166016, "yi": {"_pbd": false}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\video-bin-column-css-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	troff or preprocessor input, ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	462
Entropy (8bit):	4.84860448307251
Encrypted:	false
SSDEEP:	12:21Ae7asVTnXOYTbn0KQYqvDjzHYJ6uQtiNvyvDjzHYJ6uQtWn:qpasFXjEYqvDjfBU0vDjfB8
MD5:	92C643ED7E90D436D5D5CC234FBD1D9F
SHA1:	9A6738EB5CB88909567C07D931F7402F15BA913F
SHA-256:	ABD735FE1F6EADDA8F61FD9C58D8FE815F4B15876BF5815B08278D3CB0F7E9E2
SHA-512:	8FE0BD4C291A0691D76F65126B8A0961124278B54EF2FB8064C48571FE5378FBEFE58E1B008793F91A67803EC68CAA175BFDA752CFE73989FFF0A85D2E054F1A
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/video-bin-column-css-7.489853
Preview:	.videoPlayListContainer{border-top: 2px solid #0b6d9d; padding-top: 10px;}...videoPortalCurrentClip {vertical-align: top;}...dc .localEd {margin-right: 0.5em;}.....sidebar .dontMiss .list .linklist li.dc .teaser-image-top .bn-headline h2.teaserTitle a {.. font-size: 16px;..}....@media screen and (-webkit-min-device-pixel-ratio: 0) {...sidebar .dontMiss .list .linklist li.dc .teaser-image-top .bn-headline h2.teaserTitle a {.. font-size: 16px;..}}...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\videoNavigation[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	12327
Entropy (8bit):	5.265184739026202
Encrypted:	false
SSDEEP:	192:BWXXGGPGZjo8/GgB8nGAc2mhniMMS5wJWIdI+8WOgYBpxB5:B4G8GZj1GCuGVnRw7++eBpZ
MD5:	4B32413DFF4D3B9B7033617F779AD240
SHA1:	19910CC60C551DDBD8C7A2A6FCAE2E3B36C44408
SHA-256:	7421B5154D3DB840B39726026541BD919843EC9D8269426B5E901757E9AB3D99
SHA-512:	D606E4DA694AA1794125C9980828E88CFB828CECB296E1F4AB1A3091A46290B4EA5292BB46AD82F0D51ED21901EEBBBDB1E302A6D8310D1D84680366BFD06742
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/videoNavigation.js
Preview:	var currentHighlightedBinId="";var currentHidingPlaylistId="";var binPageNum;function setBinIdForSharing(binId){binIdShare=binId;}function getBinIdForSharing(){return binIdShare;}function setPlaylistIdForSharing(playlistId){playlistIdShare=playlistId;}function setPlaylistPageNum(pageNum){playlistPageNum=pageNum;}function getPlaylistPageNum(){return playlistPageNum;}function setCurrPlayingClipPageNum(pageNum){currPlayingClipPageNum=pageNum;}function setBinNum(newBinPageNum){binPageNum=newBinPageNum;}function getBinPageNum(){return binPageNum;}function getCurrPlayingClipPageNum(){return currPlayingClipPageNum;}function setTotalPagesOfClips(num){totalPagesOfClips=num;}function getTotalPagesOfClips(){return totalPagesOfClips;}function setCurrentHighlightedBinId(currBinId){currentHighlightedBinId=currBinId;}function generateSharePath(clipId,playlistId,binId,baseSharePath,pageNum,binPageNum){if(baseSharePath==""){baseSharePath=window.location.pathname;}var pathShare=baseSharePath+"?clipId="+

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\NUEPGTR9\zSKZHMh8mXU[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 12 x 12, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	388
Entropy (8bit):	6.56462221029006
Encrypted:	false
SSDEEP:	6:6v/lhP4XUyKO/cqKbrALGXB8dmKveXWNc8DQ4CKMzEa2bYagvzgN+cxEMAup:6v/7AXUnXB8dzeXYc8DxC7I+zS+cxEMJ
MD5:	98B20A7EE4E7C1DD1CF2E03D05783871
SHA1:	C99A0AE0A62BF62FE15E51C0F99BC8BC2DA72B8F
SHA-256:	F9A1A0AC26EAF5B7F6CC7223B5DD4B5F545B5A48FB598C7442E5F76384F1BE8C
SHA-512:	CED3B0FBC8E19CB1ACC8CDF5B0ED7F888D1AB7C7BB4DB4987908886E68A6F9139E850D1918BF047B19FCBF5D7C5FD3CC0983FB472A72D91F7FB3ECA328FDD5C6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.facebook.com/rsrc.php/v3/yr/r/zSKZHMh8mXU.png
Preview:	.PNG........IHDR..............\|.l....gAMA......a.... cHRM..z&..............u0...`..:....p..Q<....bKGD.........tIME.....$7..U.....IDAT..U.1..P..g.tv4.$^..x..C....$.....H=....j..E.0.]\.&C..u.?..`....7u40..E...s.!.w...-...b..I....Z1sL...}.@...e.'...8..d.}........"_...L.sv....%tEXtdate:create.2019-04-22T13:36:55-07:00.......%tEXtdate:modify.2019-04-22T13:36:55-07:00..\|l....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\1[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	90
Entropy (8bit):	5.2724241411979555
Encrypted:	false
SSDEEP:	3:oBrXedQSd01HJd/cMpes5SGVcbhkN4Men:o0a1HJlbes5SGVcy4fn
MD5:	4C94F54FC43320E5BF4120C6B64337BE
SHA1:	477DA937E3046DBFCDD4C715F6C9BD558DA239DF
SHA-256:	D2D1D57ED62F42B1D2E0C73D09E014E07D7B8DB8BB05E86252A6118AE9C2465E
SHA-512:	03867876633528718C5546C0AC1E4B0B55F04581F0017AB8740C2A2B7C9A77056CE81BA2E66DD6205BE0A67570374B6BABF01B3BADD08B7B6BDB48D600B13F68
Malicious:	false
Reputation:	low
Preview:	addthis.cbs.jsonp__214178858584421870({"loc":"MDAwMDBFVUNIWkgyMjc0MTg4NTAwMDAwMDBDSA=="});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\379708[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\8613[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	481
Entropy (8bit):	5.326269622167282
Encrypted:	false
SSDEEP:	12:BMQtJOo9vt2xsK+zT5njluMG0RGXA5njluMG0RGaEQb:WC/tJPT5hrR4A5hrR3
MD5:	CEAF86943B63ADB58ABBF297FDE73C8B
SHA1:	2D15CE63D394948DB2CF990DC704A9C50F80F9E4
SHA-256:	33028B306202787AF41768DACB7FBC2B20A84F3A1F026CC0893D177AF270FCCD
SHA-512:	F2C3D39F2978BAD6D410E7BF554BA34260AA65D25D8C136ED831534493DFDFF2D718F91EFB5BD25F83BAF3D286E0C130608DEFC5AA13101149CA4EDC6C40D509
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">.<html>.<head>.<meta http-equiv="pragma" content="no-cache">.</head>.<body style="border: 0; margin: 0; padding: 0;">.<img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293468&gdpr=&gdpr_consent="/><img height="1" width="1" style="border-style:none;" alt="" src="https://aa.agkn.com/adscores/g.pixel?sid=9212293438"/></body>.</html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\CTVNews_horizontal_logo_f[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2997
Entropy (8bit):	4.763890777965592
Encrypted:	false
SSDEEP:	48:0nI3e0M6ZM8P5wCwbbkRNvPD/td6vAWKlt2bU+8pSDHWYw4V2bo2ueeg3dJpb2XU:Sae0MI1wkRNP6vAWeWJGSDY4V2zueeUv
MD5:	4F4A7857CD04A4F6C85039E3829EE496
SHA1:	4F8028E6F170C7B8929F94246DDB5E5EC76B37BA
SHA-256:	511B78EFF20199FC55EA791950A141F56813E8E93C5691031319B4B9AAC1884B
SHA-512:	CE30EC3040CFA4F56D7FFEA31887E1A1E1D3D33C7D34AAAEE72D5B38442CE3D98D6668F6DAF268F64BF2D99CA7EAD39E8422C607288CB778D624F3641E857552
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/content/dam/ctvnews/en/images/logos/CTVNews_horizontal_logo_f.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 439.7 70.69"><defs><style>.cls-1{fill:#eb0000;stroke:#fff;stroke-miterlimit:10;}.cls-2{fill:#fff;}.cls-3{fill:#005fff;}.cls-4{fill:#23be19;}.cls-5{fill:#003662;}</style></defs><title>CTVNews_horizontal_logo_f</title><ellipse class="cls-1" cx="35.36" cy="35.34" rx="34.86" ry="34.84"/><path class="cls-2" d="M256.93,285.79a16.75,16.75,0,1,1,0-16.86l5-2.9a22.51,22.51,0,1,0,0,22.66Z" transform="translate(-207.1 -242.01)"/><rect class="cls-3" x="74.65" y="2.29" width="65.02" height="66.08"/><polygon class="cls-4" points="142.62 2.29 181.72 70.19 220.83 2.29 142.62 2.29"/><polygon class="cls-2" points="127.83 13.82 86.48 13.82 86.48 19.58 104.2 19.58 104.2 56.87 110.11 56.87 110.11 19.58 127.83 19.58 127.83 13.82"/><polygon class="cls-2" points="206.51 13.82 199.64 13.82 181.72 45.23 163.8 13.82 156.93 13.82 181.72 56.87 206.53 13.82 206.51 13.82"/><path class="cls-5" d="M501.15,310.45V308H502c2.16,0,3.62-.4

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\CTV_Sans-Bold[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 32484, version 1.0
Category:	downloaded
Size (bytes):	32484
Entropy (8bit):	7.9883372002968205
Encrypted:	false
SSDEEP:	768:zQEKnXcIUWehIv3lgVr6UvBk3mTcX+/Mw2wIqMLBsgN:zDKnMIpehAGVemk3Qp4RqMNs4
MD5:	58DD5C0AE2B1532719C90F7F01FCB69D
SHA1:	0142B2E65BE9A9F505092D41898C0FF144EDFBEC
SHA-256:	88228D1013379DD731C30515D51921007B9DE9DDBAC887139196D32CDAC5885F
SHA-512:	956FE9545D3BF810E1CFDBB7FADA6E94C7F5864158808B5EF61DE12E50C8BE4D4DC266E729AD33AE6AF01C6142FBA58DCC85475036337D5ED722CA114772CD2D
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/bmdaem-domains/news/clientlibs/clientlib-brands/ctvnews/site/resources/fonts/CTV_Sans-Bold.woff
Preview:	wOFF......~........0......}........$........DSIG..}.............GPOS.......1..>...3GSUB...............9OS/2.......P...`}.-.cmap.......P....\|n..cvt ..wH...0...<.X..fpgm..wx........?...gasp..w@............glyf...,..O.........head..h....4...6..0.hhea..i....!...$....hmtx..i4.......T.p<;loca..l,...,...,.NB3maxp..oX... ... ....name..ox.........._.post..r....<......>prep..}<.........P..x..[}.T...~.{....x.......pG`ET<..!.1ZV%..b..A.....M%....h"~@..\b.t....T.5[I.......8..Gd...'..7..wp..d.f..y3==.....GLD6M.yd.k.t../_v.4.\|('.H?..3Y7\|c.T.}..%....".f.~..+..Np..b...Za..j..........%..t..lZ\uS6..X.S...U.....\|S.=..v.CMsM..~.S..\|..v.......S.........W.....V......n........S..`8.8x{......`<.n.p....1.QTK.0.!..R..`.F...H.....&ZB+i.}.i..4..D..O..'h3...E.}..Rz.\..v!}..h/-...b...Kt.i.Wq.].#x.}...3...i.....u..Q.........R....W.r...o.Z~.n......E.....C~.O6#.D..uM+U'..A...r.J.l..i=F8.....z..$L.0..4....7.......g.w.y9.V..Y.g.....Y2.I..g.^.......C.aH...0O2\|L..V...n.tm...u.c.~.....[.J..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\CTV_Sans-Bold[2].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 32484, version 1.0
Category:	downloaded
Size (bytes):	32484
Entropy (8bit):	7.9883372002968205
Encrypted:	false
SSDEEP:	768:zQEKnXcIUWehIv3lgVr6UvBk3mTcX+/Mw2wIqMLBsgN:zDKnMIpehAGVemk3Qp4RqMNs4
MD5:	58DD5C0AE2B1532719C90F7F01FCB69D
SHA1:	0142B2E65BE9A9F505092D41898C0FF144EDFBEC
SHA-256:	88228D1013379DD731C30515D51921007B9DE9DDBAC887139196D32CDAC5885F
SHA-512:	956FE9545D3BF810E1CFDBB7FADA6E94C7F5864158808B5EF61DE12E50C8BE4D4DC266E729AD33AE6AF01C6142FBA58DCC85475036337D5ED722CA114772CD2D
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Bold.woff?s=2_7104
Preview:	wOFF......~........0......}........$........DSIG..}.............GPOS.......1..>...3GSUB...............9OS/2.......P...`}.-.cmap.......P....\|n..cvt ..wH...0...<.X..fpgm..wx........?...gasp..w@............glyf...,..O.........head..h....4...6..0.hhea..i....!...$....hmtx..i4.......T.p<;loca..l,...,...,.NB3maxp..oX... ... ....name..ox.........._.post..r....<......>prep..}<.........P..x..[}.T...~.{....x.......pG`ET<..!.1ZV%..b..A.....M%....h"~@..\b.t....T.5[I.......8..Gd...'..7..wp..d.f..y3==.....GLD6M.yd.k.t../_v.4.\|('.H?..3Y7\|c.T.}..%....".f.~..+..Np..b...Za..j..........%..t..lZ\uS6..X.S...U.....\|S.=..v.CMsM..~.S..\|..v.......S.........W.....V......n........S..`8.8x{......`<.n.p....1.QTK.0.!..R..`.F...H.....&ZB+i.}.i..4..D..O..'h3...E.}..Rz.\..v!}..h/-...b...Kt.i.Wq.].#x.}...3...i.....u..Q.........R....W.r...o.Z~.n......E.....C~.O6#.D..uM+U'..A...r.J.l..i=F8.....z..$L.0..4....7.......g.w.y9.V..Y.g.....Y2.I..g.^.......C.aH...0O2\|L..V...n.tm...u.c.~.....[.J..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\CTV_Sans-Regular[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 30054, version 1.0
Category:	downloaded
Size (bytes):	30054
Entropy (8bit):	7.986027140196057
Encrypted:	false
SSDEEP:	768:Nkl0AEdkewFzr83EPA7Puq44v5taTXK9BsYT:SlhEdkhG3dF5twK3se
MD5:	3F1B3D1D2D5DD5EA84B2D3C82F96001F
SHA1:	DA9F1327657514AC42FA52FE9FD15DC3933C8E70
SHA-256:	DA8A750BF8038CB671A01C4178FADC10EB5157EFED64F44061979D008725D09C
SHA-512:	AA903F60F16CEA42DDEF6AE6BA73E6191F1719F6870724E2C14CC9C09B6F5E452F3C8B1CEE370CDDD9811B340BFD0104265FE369B32682F59A95EB3A1C856473
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/ctvnews/css/webfonts/CTV_Sans-Regular.woff?s=2_7104
Preview:	wOFF......uf..............tH.......'........DSIG..t@............GPOS..........;.6.\|.GSUB...............9OS/2.......Q...`{...cmap...<...S.....v..cvt ..m....0...<...!fpgm..m.........?...gasp..m.............glyf......H.......#.head.._....4...6..11hhea.._....!...$....hmtx..`........T..<.loca..b....,...,....maxp..e.... ... ....name..e............post..h....<......>prep..s..........P..x..[kl...>g....<..y....l...&a.#1&iCJHJ.7R.M..R....?..p.P.M..q...!.RS)+.e......G&.L.M%..P.U..N.{fv<..5.x..^...{.=...{..b".h..S......n.....t...l....k..c....oT......".j.~e...~.......8._.c.c!..B.Rv.,.B)...](.p.-ua3..P..)..W.....+..TE&F.#...g#.P."r2bE..m.................9......:....x*~&~1.o.n.fR.M.\|f.T.R.jZN+ ..(ut'J=.O..x....z.e)..e....h.6.KI:...>!...Y...<...Ci.K(......s-m.Y<...fn....W.7x.'.A....[.M...~......m.w.P.^..s......7...._...v...9.....mv..N...}t.L:...S.N.9nF..h....5....=......kh.8.c..,$...z.W{...[.zM...u.3.........t.A.$.........}`..Cp.G..........:Zh4AF.ko....?.q..S..,8.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\NewErrorPageTemplate[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	3224
Entropy (8bit):	4.869554560514657
Encrypted:	false
SSDEEP:	48:5m73jcJqQep89TEw7UxkZCm73jcJqQep89TEw7Uxkk:5nqrehEw7U6ZCnqrehEw7U6k
MD5:	3A35614D9A6156057F7D30C91C1ED4F2
SHA1:	7DDE5D14A15F465C9BFD0B0C0B3416175E69D1BC
SHA-256:	D544FAC44B7B2CD937726C401B5C9C726F900CEF22980A7B39F8756581901B73
SHA-512:	8A31C0C90EF443E3B7AC5B930466CD8CEF1D540D2D436A7DC4D12F38686368303882A9610A57B2A1CF9AB973DB684FDA0B1831B116EAEB4D86BE816FDD627C28
Malicious:	false
Reputation:	low
Preview:	.body..{.. background-repeat: repeat-x;.. background-color: white;.. font-family: "Segoe UI", "verdana", "arial";.. margin: 0em;.. color: #1f1f1f;..}.....mainContent..{.. margin-top:80px;.. width: 700px;.. margin-left: 120px;.. margin-right: 120px;..}.....title..{.. color: #54b0f7;.. font-size: 36px;.. font-weight: 300;.. line-height: 40px;.. margin-bottom: 24px;.. font-family: "Segoe UI", "verdana";.. position: relative;..}.....errorExplanation..{.. color: #000000;.. font-size: 12pt;.. font-family: "Segoe UI", "verdana", "arial";.. text-decoration: none;..}.....taskSection..{.. margin-top: 20px;.. margin-bottom: 28px;.. position: relative; ..}.....tasks..{.. color: #000000;.. font-family: "Segoe UI", "verdana";.. font-weight:200;.. font-size: 12pt;..}....li..{.. margin-top: 8px;..}.....diagnoseButton..{.. outline: none;.. font-size: 9pt;..}.....launchInternetOptionsButton..{.. outline: none;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\NewErrorPageTemplate[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	1612
Entropy (8bit):	4.869554560514657
Encrypted:	false
SSDEEP:	24:5Y0bQ573pHpACtUZtJD0lFBopZleqw87xTe4D8FaFJ/Doz9AtjJgbCzg:5m73jcJqQep89TEw7Uxkk
MD5:	DFEABDE84792228093A5A270352395B6
SHA1:	E41258C9576721025926326F76063C2305586F76
SHA-256:	77B138AB5D0A90FF04648C26ADDD5E414CC178165E3B54A4CB3739DA0F58E075
SHA-512:	E256F603E67335151BB709294749794E2E3085F4063C623461A0B3DECBCCA8E620807B707EC9BCBE36DCD7D639C55753DA0495BE85B4AE5FB6BFC52AB4B284FD
Malicious:	false
Reputation:	low
Preview:	.body..{.. background-repeat: repeat-x;.. background-color: white;.. font-family: "Segoe UI", "verdana", "arial";.. margin: 0em;.. color: #1f1f1f;..}.....mainContent..{.. margin-top:80px;.. width: 700px;.. margin-left: 120px;.. margin-right: 120px;..}.....title..{.. color: #54b0f7;.. font-size: 36px;.. font-weight: 300;.. line-height: 40px;.. margin-bottom: 24px;.. font-family: "Segoe UI", "verdana";.. position: relative;..}.....errorExplanation..{.. color: #000000;.. font-size: 12pt;.. font-family: "Segoe UI", "verdana", "arial";.. text-decoration: none;..}.....taskSection..{.. margin-top: 20px;.. margin-bottom: 28px;.. position: relative; ..}.....tasks..{.. color: #000000;.. font-family: "Segoe UI", "verdana";.. font-weight:200;.. font-size: 12pt;..}....li..{.. margin-top: 8px;..}.....diagnoseButton..{.. outline: none;.. font-size: 9pt;..}.....launchInternetOptionsButton..{.. outline: none;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\all[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	200183
Entropy (8bit):	5.444673070414307
Encrypted:	false
SSDEEP:	1536:PoqLag9b4Y0DMy8u9ddx81rLEmVzWmJrgbEAsfMpUwgC44XILyIrbAo/y0NzFrPs:BmmRAsN4q/y0Nc31u3/KW4
MD5:	140FD972EB3C67E7539E448E236FF01F
SHA1:	945B21528814287982043AE7CF1336EDB4489688
SHA-256:	86FA881FBE1B84E8151D14F25907FB321456326502146382B0987BA49D9299FE
SHA-512:	97182C66A14260294C2785F76D1E2D93E3638582AF8172C997DD1013319C8A5449B9C9E2F272309F70067CCBCF6D29E010EA5BC6A2688C95408A8CEF7B86C34D
Malicious:	false
Reputation:	low
IE Cache URL:	https://connect.facebook.net/en_US/all.js?hash=d2287e60e2a1b8685900e676a731576f
Preview:	/1616136485,,JIT Construction: v1003479412,en_US/../*. Copyright (c) 2017-present, Facebook, Inc. All rights reserved.. . You are hereby granted a non-exclusive, worldwide, royalty-free license to use,. * copy, modify, and distribute this software in source code or binary form for use. * in connection with the web services and APIs provided by Facebook.. . As with any software that integrates with the Facebook platform, your use of. * this software is subject to the Facebook Platform Policy. * [http://developers.facebook.com/policy/]. This copyright notice shall be. * included in all copies or substantial portions of the software.. . THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR. * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS. * FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR. * COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER. * IN AN ACTION OF CO

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\background-override-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	45
Entropy (8bit):	3.865782801134698
Encrypted:	false
SSDEEP:	3:N9VtNkGOCXL+jW7n:pk8IW7n
MD5:	7EE75BB432E64F7DE186CDE8D17DBCFE
SHA1:	CE376133F47112BA257B711CA4E8FEF8E8FA7989
SHA-256:	84CD473E38378F7E65EC7ABC4ADF6D5A5461AFD530EDEC9E7048AF78818DE0C4
SHA-512:	C636F638765DF8F40F1DFFD4C24EB6A5053DF4F7F46DB08E310D17B25E1209A41FCDB21B2C08418C143B8B28899FC331706EE9BB5FB5EE38856BEAC09D7EA0F1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/background-override-7.682833
Preview:	body {.. background: #F8F8F8; ..}.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\background_gradient[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1x800, frames 3
Category:	downloaded
Size (bytes):	453
Entropy (8bit):	5.019973044227213
Encrypted:	false
SSDEEP:	6:3llVuiPjlXJYhg5suRd8PImMo23C/kHrJ8yA/NIeYoWg78C/vTFvbKLAh3:V/XPYhiPRd8j7+9LoIrobtHTdbKi
MD5:	20F0110ED5E4E0D5384A496E4880139B
SHA1:	51F5FC61D8BF19100DF0F8AADAA57FCD9C086255
SHA-256:	1471693BE91E53C2640FE7BAEECBC624530B088444222D93F2815DFCE1865D5B
SHA-512:	5F52C117E346111D99D3B642926139178A80B9EC03147C00E27F07AAB47FE38E9319FE983444F3E0E36DEF1E86DD7C56C25E44B14EFDC3F13B45EDEDA064DB5A
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/background_gradient.jpg
Preview:	......JFIF.....d.d......Ducky.......P......Adobe.d................................................................................................................................................. ...............W..............................................................Qa.................................?......%.....x......s...Z.......j.T.wz.6...X.@... V.3tM...P@.u.%...m..D.25...T...F.........p......A..........BP..qD.(.........ntH.@......h?..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\beacon[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\beacon[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3690
Entropy (8bit):	5.335538072085348
Encrypted:	false
SSDEEP:	48:E9uYH1J8mf6vecnA/LjPwgkHCTyHqXrEMX7J0epm5fU8LoLGT/Ac2URTR1Uobm6B:E9uYHrZanGl2HclrUUIoLSmC9aobmOT
MD5:	5B0F9F0704A703B8DA651007721FAC57
SHA1:	780C2454BB1A5421FD3A630C4115E1C62A94A344
SHA-256:	6838420E13959ECFFE73D3576EE2125A66C9315237394A23E3DD4A5181E80CDA
SHA-512:	7E475B24A609228323937E33212BBE4F2E27BF3102DC10660A8B2B28844D26786FD1084BA4A89445773B6076AD58B5B0F8DBB1759C436C8F2C5A752B6A572BF6
Malicious:	false
Reputation:	low
IE Cache URL:	https://sb.scorecardresearch.com/cs/3005664/beacon.js
Preview:	var COMSCORE=function(n){function e(n,e,r){-1==n.indexOf("?")&&(n+="?");var o=!1;(-1!=n.indexOf("&")\|\|n.length-1>n.indexOf("?"))&&(o=!0);for(var a=0;a<e.length;++a){var t=e[a];for(var i in t)o&&(n+="&"),o=!0,n+=i+"="+c(t[i]+"")}return n=function(n,e){if(n.length>e){var r=n.substring(0,e-8).lastIndexOf("&");n=(n=n.substring(0,r)+"&ns_cut="+c(n.substring(r+1))).substring(0,e)}return n}(n,r)}function r(n){for(var e={},r=n.split("&"),o=0;o<r.length;++o){var a=r[o].split("=");2==a.length&&(e[a[0]]=t(a[1]))}return e}function o(n,e){for(var r in e)n[r]=e[r]}function a(n,e){o(n[0],e[0]),o(n[1],e[1]),o(n[2],e[2])}var c="undefined"!=typeof encodeURIComponent?encodeURIComponent:escape,t="undefined"!=typeof decodeURIComponent?decodeURIComponent:unescape,i=document;var f,u,p=(function(n,e){Object.defineProperty(e,"o",{value:!0}),e.t=e.i=void 0;var r,o=[1,7,8,9,10],a=-1,c=!1,t=!1,i=[];function f(){for(var n=0,e=i;n<e.length;n++)(0,e[n])()}function u(){var n;return function(){if(!t){t=!0;var n=+new D

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bell_media_en_white[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 478 x 122, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	6288
Entropy (8bit):	7.326606634606163
Encrypted:	false
SSDEEP:	96:wokZYQFXFuzjSDulp4DZlNDJSdRlKUipyR8eazx3AP0AI8sKf8bE/lja7:wokXg49lqdbvKtJwP0AIaG7
MD5:	FD18FAAD9AC6E696A1A96463CD2A7894
SHA1:	DEB7F929430B624CE3ECD0BB46FD8E24567774AB
SHA-256:	48DC707767808E30B116858C5F894E1A0C5503AAA5EAD5E082B18511664F6089
SHA-512:	D0707A149F6E864BC8C25CA715D34DED1C6979EA56DBE93BF0631C2EA505848CB4170B36B68BBD0A590BC31B82CB729B958A2677D043B6ACD6226537DD6B28B5
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/logos/bell_media_en_white.png
Preview:	.PNG........IHDR.......z.....&......iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?>.<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c137 1.000000, 0000/00/00-00:00:00 ">. <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#">. <rdf:Description rdf:about="". xmlns:ns1="http://www.day.com/dam/1.0". xmlns:tiff="http://ns.adobe.com/tiff/1.0/". xmlns:dc="http://purl.org/dc/elements/1.1/". xmlns:Iptc4xmpCore="http://iptc.org/std/Iptc4xmpCore/1.0/xmlns/". ns1:Physicalheightininches="-1.0". ns1:Physicalwidthininches="-1.0". ns1:Fileformat="PNG". ns1:Progressive="no". ns1:extracted="2018-04-19T15:20:23.465+02:00". ns1:Bitsperpixel="8". ns1:MIMEtype="image/png". ns1:Physicalwidthindpi="-1". ns1:Physicalheightindpi="-1". ns1:Numberofimages="1". ns1:Numberoftextualcomments="0". ns1:sha1="969c7fcbb7ff770aa24db797c37e9877a159886f". ns1:size="4996". tiff:ImageLength="122". tiff:ImageWidth="47

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bidRequest[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.435825899299494
Encrypted:	false
SSDEEP:	3:YMVmtHjAt6h+UV4nEuHY:YMTt6kU+EuHY
MD5:	61457D85029026A0A500C2720A74A78A
SHA1:	617F8F90AA72C2B50710FADD96C632E0CF45C41C
SHA-256:	75AD1C71607FBEFF7D7D7885FD29D6654EC4FAB34E3922374990841A797C0714
SHA-512:	F128AB9DC4915735845CE7AB4E5304BD05EF2E1431F99FB8C6EE6BF567F8299C6A85B33AF04D40989EF8E41FF605E622BCB127ACF20654C8DF37BB2C77E666FD
Malicious:	false
Reputation:	low
IE Cache URL:	https://c2shb.ssp.yahoo.com/bidRequest?cmd=bid&dcn=8a9694c7017474db0327db644d6e001d&pos=ctvnews.ca_desktop_btf_300x250_372&secure=1
Preview:	{"id":"f7e4e606b75c44e5994561d3bd0029b1","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bidRequest[2].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	124
Entropy (8bit):	4.50088913001
Encrypted:	false
SSDEEP:	3:YMdmx5dtnGzOpHLInEuHNKGHLFdD4dcKJzonEuHY:YMdmx5dlprIEuHwGHLFd0cKJ0EuHY
MD5:	A62F486FE7C370B20C7C6E84D5F79C3A
SHA1:	8DA55B0584FE5DDCB9CD489BCFB7AADA0EC15B18
SHA-256:	728F159B43325CE13DB54D06295E4454FCE9756D7823DD092A479B50E0BC7478
SHA-512:	648CB01C8D98F216E4B1BEE7D5A2ACEA9735F994BB5FC1671B2C37F84BF90A5A60BEC9D35B95B8F7F8DFA7F33EB8D84AB34E6146036F3895D25C84F750368926
Malicious:	false
Reputation:	low
Preview:	{"id":"cf7a8467ae1e4e8aad4c60705b8fbf12","nbr":1,"seatbid":[]}{"id":"edbf3cb51c1549c784aafff7460089a4","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bidRequest[3].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	4.539758638626404
Encrypted:	false
SSDEEP:	3:YM8M2xkWHCpQFpzX4nEuH5Q2BTZWSfnFHonEuHY:YMzAXzoEuHOYFIEuHY
MD5:	1CEA0016AC68D1509F48CB20D68C0592
SHA1:	7C8C53C2A9154E4E394CE2A9815729D5C21174F2
SHA-256:	D342E322C024D9A9E3DEBC9E11D621A3EBB3BFB84504DF711179F8CF1027CE27
SHA-512:	A458F15C08EF0421DD37F8CB10677A4D8BABE441D27423BAA9A418B4E4473E45167EE4757EB67475EBE2E4B8F787FDCB4D32C270FE39F352DABBBE15A7275B33
Malicious:	false
Reputation:	low
IE Cache URL:	https://c2shb.ssp.yahoo.com/bidRequest?cmd=bid&dcn=8a9694c7017474db0327db644d6e001d&pos=ctvnewsdividstaging1desktopbtf970x90&secure=1
Preview:	{"id":"e9a45220b364406fba3bf6a6d0058fa3","nbr":1,"seatbid":[]}{"id":"38456f3df76147c790516d34e817e87b","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bidRequest[4].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	124
Entropy (8bit):	4.457598278766044
Encrypted:	false
SSDEEP:	3:YMJlRTTcVUWde2FInEuH8y4wGTn1RucQV0nEuHY:YMh0VUWde1EuH8RzDdEuHY
MD5:	D6F16E053E88D955FDE2FD09495E736D
SHA1:	11D2621E46698B1C5473F36C525EBFF21C073E8B
SHA-256:	4CF464EC37759308E2B183A0C0C73B965653C4C1691F6F8C8E00EAACAB6BA779
SHA-512:	C68FD6A8901F78AEE356C7137394D5A828BEFB2AEAF705414940D5D744D21F5632128744FB91301F57AD818121CF6945BA237CA3E036AD8DAB73C5918EB64A26
Malicious:	false
Reputation:	low
IE Cache URL:	https://c2shb.ssp.yahoo.com/bidRequest?cmd=bid&dcn=8a9694c7017474db0327db644d6e001d&pos=ctvnewsdividstaging1desktopbtf970x250&secure=1
Preview:	{"id":"80ed5dec258a4669a27008338d5a16d9","nbr":1,"seatbid":[]}{"id":"5ad041e843c64d0bb338cb951be5308b","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bidRequest[5].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.500342028331751
Encrypted:	false
SSDEEP:	3:YM1h1EGT2QGEABQxV4nEuHY:YMF/T2QGEkFEuHY
MD5:	DE254C5E4BD6DF0216DC326E9F1F5F09
SHA1:	DCA8E541075C3F1074462B4C2E5A926018BF6691
SHA-256:	D1A3A404B9B2A36754CA98BDA76E0C550C6ED3A7E905AEADD97B03F90518B011
SHA-512:	D52CC473D97A4493FB24EC012CFDEF1F10B74DF239118EB0E181F34750343674236C8B64C2A8B9CFB683F6C22D2244248D500424BAC76AB06E440D0D237A58C7
Malicious:	false
Reputation:	low
Preview:	{"id":"0d95b0115bf848a682957d0c46ed543a","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bidRequest[6].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	62
Entropy (8bit):	4.504610778436435
Encrypted:	false
SSDEEP:	3:YM0HEUTTllEn6dABYX4nEuHY:YM0kE1d/oEuHY
MD5:	D0BDCFD31892926DE341E0C2816598F9
SHA1:	9587B85038BBBADFD7FB87DA96C0303E5E11A693
SHA-256:	DA6A39E938112F41386F7F4979F26FA6FF0B7AC0FB30434D7EEB3CB55B23F7BF
SHA-512:	11CAA6C13841FD4B844D811657F592DEC8D86E4876CAC3BC3644CC9D434CBF569C1E535470B2BE53C5F3C835509EA75BB6AC5ADE426ABC7ADA814C93F24A6AE1
Malicious:	false
Reputation:	low
IE Cache URL:	https://c2shb.ssp.yahoo.com/bidRequest?cmd=bid&dcn=8a9694c7017474db0327db644d6e001d&pos=ctvnewsdividstaging1desktopbtf728x90&secure=1
Preview:	{"id":"0e22c61668f6449aa08786c375c8ceda","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bidRequest[7].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	62
Entropy (8bit):	4.333172222257554
Encrypted:	false
SSDEEP:	3:YMD8YPYwuenEuHY:YM4LeEuHY
MD5:	7C632EB3D9DF3EF5D8291F8D2DF0C09E
SHA1:	E28AE70073F2D11547F7C14C9BBC28DBD63D52A3
SHA-256:	D8C9AFF0112C2E1163EDEA1BFDCE6EE6C1083781733D1BB6DDD4C4CEC85048CF
SHA-512:	69F88F1B3F375B9DD291584E612F9C2D86897809C0155B83E019B3F2810536479F584EFF038149E95964B3956A0BEF1521F1BCF73875CE56F1B03C259BE78504
Malicious:	false
Reputation:	low
Preview:	{"id":"9fa0a15a83064568a5461b5058bed6e4","nbr":1,"seatbid":[]}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bullet[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	447
Entropy (8bit):	7.304718288205936
Encrypted:	false
SSDEEP:	12:6v/71Cyt/JNTWxGdr+kZDWO7+4dKIv0b1GKuxu+R:/yBJNTqsSk9BTwE05su+R
MD5:	26F971D87CA00E23BD2D064524AEF838
SHA1:	7440BEFF2F4F8FABC9315608A13BF26CABAD27D9
SHA-256:	1D8E5FD3C1FD384C0A7507E7283C7FE8F65015E521B84569132A7EABEDC9D41D
SHA-512:	C62EB51BE301BB96C80539D66A73CD17CA2021D5D816233853A37DB72E04050271E581CC99652F3D8469B390003CA6C62DAD2A9D57164C620B7777AE99AA1B15
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............ex....PLTE...(EkFRp&@e&@e)Af)AgANjBNjDNjDNj2Vv-Xz-Y{3XyC\}E_.2j.3l.8p.7q.;j.;l.Zj.\l.5o.7q.<..aw.<..dz.E...........1..@.7..~.....9..:.....A..B..E..9..:..a..c..b..g.#M.%O.#r.#s.%y.2..4..+..-..?..@..;..p..s...G..H..M.........z`....#tRNS................................../,....mIDATx^..C..`.......S....y'...05...\|..k.X......*`.F.K....JQ..u.<.}.. ..[U..m....'r%.......yn.`.7F..).5..b..rX.T.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\bullet[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	447
Entropy (8bit):	7.304718288205936
Encrypted:	false
SSDEEP:	12:6v/71Cyt/JNTWxGdr+kZDWO7+4dKIv0b1GKuxu+R:/yBJNTqsSk9BTwE05su+R
MD5:	26F971D87CA00E23BD2D064524AEF838
SHA1:	7440BEFF2F4F8FABC9315608A13BF26CABAD27D9
SHA-256:	1D8E5FD3C1FD384C0A7507E7283C7FE8F65015E521B84569132A7EABEDC9D41D
SHA-512:	C62EB51BE301BB96C80539D66A73CD17CA2021D5D816233853A37DB72E04050271E581CC99652F3D8469B390003CA6C62DAD2A9D57164C620B7777AE99AA1B15
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/bullet.png
Preview:	.PNG........IHDR...............ex....PLTE...(EkFRp&@e&@e)Af)AgANjBNjDNjDNj2Vv-Xz-Y{3XyC\}E_.2j.3l.8p.7q.;j.;l.Zj.\l.5o.7q.<..aw.<..dz.E...........1..@.7..~.....9..:.....A..B..E..9..:..a..c..b..g.#M.%O.#r.#s.%y.2..4..+..-..?..@..;..p..s...G..H..M.........z`....#tRNS................................../,....mIDATx^..C..`.......S....y'...05...\|..k.X......*`.F.K....JQ..u.<.}.. ..[U..m....'r%.......yn.`.7F..).5..b..rX.T.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ca46aa22-e6b4-464e-9077-7215dc98bc0a[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	687
Entropy (8bit):	4.688479603499599
Encrypted:	false
SSDEEP:	12:H0Y4XjfLyT9RBthLdb0E4XjfLyT9R4xExlPezL0E4XjfLyT9R4xExlPezL:H0DDyT/BPdb0PDyT/4xExlSL0PDyT/4D
MD5:	0A4D3977DAEC1075089589440A938C16
SHA1:	B8D362DA3331BFD6219B0A7547BC94C75199E8FA
SHA-256:	844FEA710EC88416BF94D092567B61A61BC0020567888589D333EADB18254DF3
SHA-512:	EFAF47B101B247750DDCCBB949E34DE659AF38B5D93C5D6DB877079FEBA10B374BFCF06E80173A1FE389FA8238EC8CD0833A89519F5552654320D07B860203E4
Malicious:	false
Reputation:	low
IE Cache URL:	https://consumer.krxd.net/consent/get/ca46aa22-e6b4-464e-9077-7215dc98bc0a?idt=device&dt=kxcookie&callback=Krux.ns.bellmedia.kxjsonp_consent_get_0
Preview:	Krux.ns.bellmedia.kxjsonp_consent_get_0({"status":400,"body":{"settings":{"dc":1,"al":1,"tg":1,"cd":1,"sh":0,"re":0},"pr":"global","code":"bad_request","source":"unk","errors":{"idv":"no identifier found for user","query":"no user id"}}});Krux.ns.bellmedia.kxjsonp_consent_get_0({"status":404,"body":{"settings":{"dc":1,"al":1,"tg":1,"cd":1,"sh":0,"re":0},"pr":"global","code":"not_found","source":"unk","errors":{"not_found":"consent not found for OAo8OofK"}}});Krux.ns.bellmedia.kxjsonp_consent_get_0({"status":404,"body":{"settings":{"dc":1,"al":1,"tg":1,"cd":1,"sh":0,"re":0},"pr":"global","code":"not_found","source":"unk","errors":{"not_found":"consent not found for OAo8OofK"}}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\clientlib-news-newrelic.min.9fce3393912f1112944c6515ad1b5cc0[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	22962
Entropy (8bit):	5.2427943053971235
Encrypted:	false
SSDEEP:	384:Gls11sahuZzrzjjJNVRmLJIeVFYW+NCz/f/vp90ekSRptipEY2uLlgmKXi:Gm1KHz/JNVRGJIevJ90e10pEY2ulmXi
MD5:	9FCE3393912F1112944C6515AD1B5CC0
SHA1:	35A3B69B0FDAA007B09A2F8F163407B3A9E4B14D
SHA-256:	15E3C67A5F590C342493773E7E23D984CD75A018B885D3B87F855056D727C748
SHA-512:	A15AD8EBB8428A01982A4FFA479452E39A53C633E9ED0F0864B2A713084F0DAA336D530C77DD526B5B6737CC44A81A9809837B88CBD0B241842B45A964691BC3
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/bmdaem-domains/news/clientlibs/clientlib-news-newrelic.min.9fce3393912f1112944c6515ad1b5cc0.js
Preview:	;window.NREUM\|\|(NREUM={});NREUM.init={privacy:{cookies_enabled:true}};. window.NREUM\|\|(NREUM={}),__nr_require=function(t,e,n){function r(n){if(!e[n]){var i=e[n]={exports:{}};t[n][0].call(i.exports,function(e){var i=t[n][1][e];return r(i\|\|e)},i,i.exports)}return e[n].exports}if("function"==typeof __nr_require)return __nr_require;for(var i=0;i<n.length;i++)r(n[i]);return r}({1:[function(t,e,n){function r(t){try{c.console&&console.log(t)}catch(e){}}var i,o=t("ee"),a=t(23),c={};try{i=localStorage.getItem("__nr_flags").split(","),console&&"function"==typeof console.log&&(c.console=!0,i.indexOf("dev")!==-1&&(c.dev=!0),i.indexOf("nr_dev")!==-1&&(c.nrDev=!0))}catch(s){}c.nrDev&&o.on("internal-error",function(t){r(t.stack)}),c.dev&&o.on("fn-err",function(t,e,n){r(n.stack)}),c.dev&&(r("NR AGENT IN DEVELOPMENT MODE"),r("flags: "+a(c,function(t,e){return t}).join(", ")))},{}],2:[function(t,e,n){function r(t,e,n,r,c){try{p?p-=1:i(c\|\|new UncaughtException(t,e,n),!0)}catch(f){try{o("ierr",[f,s

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\clientlib-site.min.eaa150eb5c787d55269a8ca5d0e9bc44[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2646
Entropy (8bit):	4.896438923554634
Encrypted:	false
SSDEEP:	48:ucUuwikZienYTtpxgsU+eH3D+NGpkcQE3RevcrnO8j5SH5:ucUueYlgsU+eHucQEevc3u
MD5:	EAA150EB5C787D55269A8CA5D0E9BC44
SHA1:	02C3068135DDA8B4B9646A0F22189990145032BB
SHA-256:	3D0CC803940FB7B5A208D9577E6379F6182C098D7E996B1A045A7EE588EF2A26
SHA-512:	D0F11C38955B7778DCC1979B51BEC1FBB28A3B80B0F14C68D07688B1C34BFD20CAA4389DA65C6FB2827FC5E261338274E7AB86CFCD6A53BB4C43CF3010ADB6F6
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/bmdaem/commons/clientlibs/clientlib-site.min.eaa150eb5c787d55269a8ca5d0e9bc44.css
Preview:	html{-webkit-box-sizing:border-box;box-sizing:border-box}*,:after,:before{-webkit-box-sizing:inherit;box-sizing:inherit}html{line-height:1.15;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,footer,header,nav,section{display:block}h1{font-size:2em;margin:.67em 0}figcaption,figure,main{display:block}figure{margin:1em 40px}hr{-webkit-box-sizing:content-box;box-sizing:content-box;height:0;overflow:visible}pre{font-family:monospace,monospace;font-size:1em}a{background-color:transparent;-webkit-text-decoration-skip:objects}abbr[title]{border-bottom:none;text-decoration:underline;-webkit-text-decoration:underline dotted;text-decoration:underline dotted}b,strong{font-weight:inherit;font-weight:bolder}code,kbd,samp{font-family:monospace,monospace;font-size:1em}dfn{font-style:italic}mark{background-color:#ff0;color:#000}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}audio,video{

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\clientlib-site.min.f2bde6da836713c4e623baf2e7e17754[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	982
Entropy (8bit):	4.989871416289771
Encrypted:	false
SSDEEP:	24:Vs/ybihdYZiNBmGamliRIBNfzEwMYwBc0SKCzfI5ktoAvrV:LBiTuYB5A5ZS1okZzV
MD5:	F2BDE6DA836713C4E623BAF2E7E17754
SHA1:	8E26380701FF7A27CBF7DCE9EA89A402C22BB639
SHA-256:	DE22A1D0F222FC74DE00D6979DB0D64C102ECEFCDA5225D9D8AFE273BE8333B8
SHA-512:	637F907F6D1BA9A62396CDD857C005C1E309A684B667AF11D147521A3144FA839F552800A42F3E001F7590648E9BD4643952687BC353FB809E57F48CBC1D85F2
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/bmdaem/commons/clientlibs/clientlib-site.min.f2bde6da836713c4e623baf2e7e17754.js
Preview:	!function(e){var t={};function r(n){if(t[n])return t[n].exports;var o=t[n]={i:n,l:!1,exports:{}};return e[n].call(o.exports,o,o.exports,r),o.l=!0,o.exports}r.m=e,r.c=t,r.d=function(e,t,n){r.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},r.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},r.t=function(e,t){if(1&t&&(e=r(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(r.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var o in e)r.d(n,o,function(t){return e[t]}.bind(null,o));return n},r.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return r.d(t,"a",t),t},r.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},r.p="",r(r.s=75)}({75:function(e,t,r){"use strict";r.r(t);r(76)},76:function(e,t,r){}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\contact-1[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	4762
Entropy (8bit):	4.465935275485858
Encrypted:	false
SSDEEP:	96:idEBxxxuRwv15UW9H4ebxK+OuGTa1aMy9CJ:tBxxxuRwjU8YebxK+OuGTa1aMy9CJ
MD5:	885D927A9DB4187E0F823805761E8E94
SHA1:	EEEE3321EE29B35A4E3D7BE6697FC6A8CE21E7C7
SHA-256:	0CCCDE7A357447327FB83A54C040134592192258D3DB872511D1FC4FC38780A0
SHA-512:	B1136B73BB6A5BCA85F25BF4E02614DFDAA58DC289BA4AD6BA3C693BBCBC5B29A0E2A8CCBF36A7D5BE8B32CF8852B66F88128248DB1A75A7DB5405ACA7EC186C
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/more/bios/contact-1.4694013?ot=AjaxLayout
Preview:	...<section class="story">.<div class="element container formArticle">. . <h3>Contact <span class="da"></span></h3>. . <p>. . ......<form id="formBuilderForm14694013" name="form" class="formBuilder" action="" method="post">. . . . . . . . . <div class="formBox" >. . ...<input type='hidden' name='form/form[0]/formHiddenTextInputField.bio_author' .. . . value=''. ../>.. . .... . .. .. . . . <div class="formField">. . . <label>Name</label>.. <div class="formBoxRight"><input type="text" name="form/form[1]/formTextInputField.inputText" size="30" value="" />. . . . . . . </div>. <div class="clearfix"></div>. . . . </div>. . .... . .... . .. .. . . . <div class="formField">. . . <label>Email</label>.. <div class="formBoxRight"><input type="text" name="form/form[2]/formTextInputField.inputText" size="30"

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\container[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5810
Entropy (8bit):	5.546604696057645
Encrypted:	false
SSDEEP:	96:euWaCmmku4wh5Wjg4bfIX5jch828cInOhfYzVAexeZCp+xPvF1zj:NjS4i50TfIXeh8vef4VAe8a+FNJj
MD5:	94918A2321B72368FDFE5B171AA653CD
SHA1:	98B7880B6C2A5FED14B55458E175424D34FDCD69
SHA-256:	E86479D6E54449D1085C2149E190A615C6BEAD407B20BACBCF5852B5D65F1FEE
SHA-512:	9C9616CCBC9765F4E825F6B57FBA35E57B97B5EF5F51E88A5FE6D44BF22EDBEE1A52975F3311FE25D2CA65837B34DCB51CC2E00F02410C54A3AEEE6A2C17E255
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/safeframe/1-0-37/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){var n=this\|\|self;var w={};var y=function(a){y[" "](a);return a};y[" "]=function(){};var B=null,G=function(a){var b=a.length,c=3b/4;c%3?c=Math.floor(c):-1!="=.".indexOf(a[b-1])&&(c=-1!="=.".indexOf(a[b-2])?c-2:c-1);var d=new Uint8Array(c),f=0;C(a,function(g){d[f++]=g});return d.subarray(0,f)},C=function(a,b){function c(q){for(;d<a.length;){var e=a.charAt(d++),k=B[e];if(null!=k)return k;if(!/^[\s\xa0]$/.test(e))throw Error("Unknown base64 encoding at char: "+e);}return q}H();for(var d=0;;){var f=c(-1),g=c(0),h=c(64),p=c(64);if(64===p&&-1===f)break;b(f<<2\|g>>4);64!=h&&(b(g<<4&240\|h>>2),64!=p&&b(h<<6&192\|p))}},H=function(){if(!B){B={};for(var a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789".split(""),b=["+/=","+/","-_=","-_.","-_"],c=0;5>c;c++)for(var d=a.concat(b[c].split("")),f=0;f<d.length;f++){var g=d[f];void 0===B[g]&&(B[g]=f)}}};var I=function

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\container[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	5810
Entropy (8bit):	5.546604696057645
Encrypted:	false
SSDEEP:	96:euWaCmmku4wh5Wjg4bfIX5jch828cInOhfYzVAexeZCp+xPvF1zj:NjS4i50TfIXeh8vef4VAe8a+FNJj
MD5:	94918A2321B72368FDFE5B171AA653CD
SHA1:	98B7880B6C2A5FED14B55458E175424D34FDCD69
SHA-256:	E86479D6E54449D1085C2149E190A615C6BEAD407B20BACBCF5852B5D65F1FEE
SHA-512:	9C9616CCBC9765F4E825F6B57FBA35E57B97B5EF5F51E88A5FE6D44BF22EDBEE1A52975F3311FE25D2CA65837B34DCB51CC2E00F02410C54A3AEEE6A2C17E255
Malicious:	false
Reputation:	low
IE Cache URL:	https://09e0895e5f1eff1d823107e70838d286.safeframe.googlesyndication.com/safeframe/1-0-37/html/container.html
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <title>SafeFrame Container</title>. <script>.(function(){var n=this\|\|self;var w={};var y=function(a){y[" "](a);return a};y[" "]=function(){};var B=null,G=function(a){var b=a.length,c=3b/4;c%3?c=Math.floor(c):-1!="=.".indexOf(a[b-1])&&(c=-1!="=.".indexOf(a[b-2])?c-2:c-1);var d=new Uint8Array(c),f=0;C(a,function(g){d[f++]=g});return d.subarray(0,f)},C=function(a,b){function c(q){for(;d<a.length;){var e=a.charAt(d++),k=B[e];if(null!=k)return k;if(!/^[\s\xa0]$/.test(e))throw Error("Unknown base64 encoding at char: "+e);}return q}H();for(var d=0;;){var f=c(-1),g=c(0),h=c(64),p=c(64);if(64===p&&-1===f)break;b(f<<2\|g>>4);64!=h&&(b(g<<4&240\|h>>2),64!=p&&b(h<<6&192\|p))}},H=function(){if(!B){B={};for(var a="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789".split(""),b=["+/=","+/","-_=","-_.","-_"],c=0;5>c;c++)for(var d=a.concat(b[c].split("")),f=0;f<d.length;f++){var g=d[f];void 0===B[g]&&(B[g]=f)}}};var I=function

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\contents[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	928
Entropy (8bit):	5.106815299808471
Encrypted:	false
SSDEEP:	24:pw/AU0vNENtCj/NENJMwENRLENaZ97ENhzLxk7EN6QrEl:pw/AJvpj/npQa
MD5:	C703D368A2F4E16622D29B72D59B8D65
SHA1:	CFB10AB8057E60048B279DB0DA08EF865F2A1469
SHA-256:	D4262772935E258FD66F46E7747F6762E2046A633FC0CF1BE7A096FAB9C9CDA7
SHA-512:	CEF8A50780AEAA2FD8C8BE1E2D3DDEFBA48CF421CEC8C4E473A287F879008A076D8E81CFAC339E948B3496FAF7E9033F5743ED946D8651669FA018780451DFCB
Malicious:	false
Reputation:	low
Preview:	jQuery1706089855567565504_1616166180879({"Items":[{"Id":2164044,"Name":"CTV National News: A critical boost in supply","Authentication":{"Required":false,"Resources":null}},{"Id":2163304,"Name":"U.S. will send 1.5M vaccine doses to Canada","Authentication":{"Required":false,"Resources":null}},{"Id":2163331,"Name":"Watch Ford find out U.S. will send vaccine doses","Authentication":{"Required":false,"Resources":null}},{"Id":2163826,"Name":"Power Play: Anand on U.S. vaccine loan ","Authentication":{"Required":false,"Resources":null}},{"Id":2162596,"Name":"WH considering requests from Canada for vaccines","Authentication":{"Required":false,"Resources":null}},{"Id":2151144,"Name":"U.S. not considering sharing COVID-19 vaccines","Authentication":{"Required":false,"Resources":null}},{"Id":2151278,"Name":"Is U.S. vaccine nationalism surprising?","Authentication":{"Required":false,"Resources":null}}],"ItemsType":"Content"})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\coronavirus-label-fixes-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	343
Entropy (8bit):	4.792526071374822
Encrypted:	false
SSDEEP:	6:dlXliARCBfKdRF3TcMobAovjF4AIYJ8z4J6XIKj6WueoyAYVebuN3EuEhU:MARnTTTfwF4AIYJFJ6XIF0c6NEuEu
MD5:	74C47BEAF8DB3AB2A0B530F0D661B8F5
SHA1:	BE115656D83F52A8C20AFE6D2CFBE3702FA31588
SHA-256:	6ABEDD970E7517F189D8DDB993B6F7C42F08D19675DDB9D49AE43519641CCD84
SHA-512:	29A9AF3579EC47CF97357763439B5EF0BDD80FCC69DE1F622B37484941121F4FECADBF920F5CB76B2730B9D78D1A1D1A4E319A3290AFA36DEB86C51CA50EB3AB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/coronavirus-label-fixes-7.743225
Preview:	@media only screen and (max-width: 768px) {.. .videoPromoList .tag {.. display: none !important;..}..}..div.column.col1 .element.list div.teaser-image-wrapper.teaser-image-top div.teaserImage span.tag {.. margin-top: -33px;..}.....aLabel.open .tooltiptext {left: 125px;}.....gig-button-container-print {display: none!important}.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\coronavirus-player-7[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	53093
Entropy (8bit):	4.724298558162066
Encrypted:	false
SSDEEP:	768:4IGmGtar+CJ+5J5NtRdGI/LKU0J4IEEeavcFWd:4Iiar+8+5JrtRdGI2UWey
MD5:	1A37470C3BB41E5F6DCA4052FFB84D80
SHA1:	DAEBC7168DAD6D6ADE320B79A19AC2C381B00152
SHA-256:	ABEEFCD2E018439AD69A4D7FC177D51A9DFFC50DAD8B504D1FBBC7B943D9FCDB
SHA-512:	326F7DB34E9A421798F194EC8A85D08A0EEB6CA68A83D8F51498AA7296953A6FA7B4C89C0AE38D2DF2EE36AD60ACB6A25077687CE84B8A9644A05A8DF4FFD6D3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/health/coronavirus/coronavirus-player-7.742347?ot=example.AjaxPageLayout.ot&maxItemsPerPage=3&isAjax=true&autoPlay=false&pageNum=1
Preview:	.. . . ..<script type="text/javascript">.function isVideoPlayerSupported(){..var videoPlayerSupported = !MobileEsp.DetectBlackBerry();..return videoPlayerSupported;.}.</script>.. . . ....<script>.var sampleAdZone="coronavirus/home";.var samplePlayerAdRule="coronavirus/home";.var samplePlayerAdSite="ctv.ctvnews";.</script>.........<script>..var vidiPlayerPath = "//webapps.9c9media.com/vidi-player/1.9.x/js/player.js";.</script>.... . <script type="text/javascript">.//isTVEMode is returning false for AJAX calls. Investigate. Might need to return from controller....// Get auth flags.jQuery(document).unbind('isDone.renderClips').bind('isDone.renderClips', function(event) {. requiresDependency('https://static.ctvnews.ca/bellmedia/common/js/videoNavigation.js', function() {. getAuthStates("2163244,2163346,2163304,2145305,2141443,2138992,2135888,2134888,2131436,2126161,2104257,2125382", "ctvnews_web");. });.. jQuery(document).unbind('isDone.getAuthStates').bi

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ctv_logo_f[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	832
Entropy (8bit):	5.020869455319979
Encrypted:	false
SSDEEP:	24:tu1Jm5eWudaXZ3K7cjJzbweCmCoVg5/XDFbFRQ8LTdz8i:0LwXZ67qpwelCoY1d4i
MD5:	8FBC9B5556E74AC78FBDDE0DAB24DE27
SHA1:	74031CC8E421C31A80F2950B04B7058D76AE2245
SHA-256:	21414CAB6930BB82079E712556F39F3DE7C1D0F99F306169239B83A59513DEFD
SHA-512:	244FE8A72E984AD5DF584084851DF8EA7E6E8226785ADF2D1EA7944A2DC4AE36EB364EAA6CF18E7947D317D2B264E05B58A2AC6A282D679A45A030CA01F5D6A6
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/content/dam/ctvnews/en/images/logos/ctv_logo_f.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 220.33 69.69"><defs><style>.cls-1{fill:#787878;}.cls-2{fill:#fff;}</style></defs><title>ctv_logo</title><rect class="cls-1" x="74.15" y="1.79" width="65.02" height="66.08"/><ellipse class="cls-1" cx="34.86" cy="34.84" rx="34.86" ry="34.84"/><polygon class="cls-1" points="142.12 1.79 181.22 69.69 220.33 1.79 142.12 1.79"/><path class="cls-2" d="M146.33,226.25a16.76,16.76,0,1,1,0-16.85l5-2.91a22.51,22.51,0,1,0,0,22.66Z" transform="translate(-97 -182.98)"/><polygon class="cls-2" points="127.33 13.32 85.98 13.32 85.98 19.08 103.7 19.08 103.7 56.37 109.61 56.37 109.61 19.08 127.33 19.08 127.33 13.32"/><polygon class="cls-2" points="206.01 13.32 199.14 13.32 181.22 44.73 163.3 13.32 156.43 13.32 181.22 56.37 206.03 13.32 206.01 13.32"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\dest5[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	6983
Entropy (8bit):	5.483922930498494
Encrypted:	false
SSDEEP:	96:inw1EOb9muLpw47eIDCpXHG5z/QkqJeMnSSyi8c2Kgn/UnNsnA2aI4j4e:iPc/xDCpX8/in/y+2KgMSA26l
MD5:	2C9C2EE145EE280B85A217AD7045FAE5
SHA1:	6ABE394B53B32816ECA642126FD62BCD91D17348
SHA-256:	7BEA17A80A61ED0F54248B4FFC4C718F7C8FF2619742577A73591D62CE074DA8
SHA-512:	3762C5F678EB4858000FCF379EA1C8BEA54F2A211A3F940300876D1697B82012C57B0E614E33770D8F5626B2F4C3B7842B658C926E12974A43A1B0A313E2DB79
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">.<html lang="en-US"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><title>Adobe AudienceManager</title><script type="text/javascript">.var Demdex={version:"6.2",dest:"5",PROTOCOL:"https:"==document.location.protocol?"https:":"http:",COOKIE_DOMAIN:function(){var a=document.domain;/demdex\.net$/i.test(a)&&(a=".demdex.net");return a}(),SIX_MONTHS_IN_MINUTES:259200,THREAD_YIELDING_DELAY:100,errorReportingEnabled:!1,sent:[],errored:[],timesDextpWasCleared:0,dpids:null,cbmacros:["%timestamp%","%rnd%","%did%","%http_proto%"],validators:{isPopulatedString:function(a){return"string"==typeof a&&a.length}},addListener:function(){if(document.addEventListener)return function(a,.b,c){a.addEventListener(b,function(a){"function"==typeof c&&c(a)},!1)};if(document.attachEvent)return function(a,b,c){a.attachEvent("on"+b,function(a){"function"==typeof c&&c(a)})}}(),replaceMacro:f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\dnserror[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	5994
Entropy (8bit):	4.4885437940628465
Encrypted:	false
SSDEEP:	48:u7u5V4VyhhV2lFUW29vj0RkpNc7KpAP8RrN7u5V4VyhhV2lFUW29vj0RkpNc7KpS:vIlJ6G7Ao8RiIlJ6G7Ao8Ra
MD5:	713ADD0E98C772CE39C7B2452806602B
SHA1:	7888DE86275AE869D6E82EE4D392C71EB9BCCD25
SHA-256:	6DE0370BA485689D411FF66EEA6EBCC577A1D19CFD489FA4DC7E22BD91F65806
SHA-512:	ABFB3EF6B1EA2A12B9A1E425BD94F807A4CE1C8FCE8CC618FBC700222CE573CFAB47BA9FCDCDE7157142F43CD3349014AAD1DC720EB8C327000B9211BAB3339F
Malicious:	false
Reputation:	low
Preview:	.<!DOCTYPE HTML>..<html>.. <head>.. <link rel="stylesheet" type="text/css" href="NewErrorPageTemplate.css" >.. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <title>Can’t reach this page</title>.. <script src="errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="getInfo(); initMoreInfo('infoBlockID');">.. <div id="contentContainer" class="mainContent">.. <div id="mainTitle" class="title">Can’t reach this page</div>.. <div class="taskSection" id="taskSection">.. <ul id="cantDisplayTasks" class="tasks">.. <li id="task1-1">Make sure the web address <span id="webpage" class="webpageURL"></span>is correct</li>.. <li id="task1-2">Search for this site on Bing</li>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\dnserror[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	2997
Entropy (8bit):	4.4885437940628465
Encrypted:	false
SSDEEP:	48:u7u5V4VyhhV2lFUW29vj0RkpNc7KpAP8Rra:vIlJ6G7Ao8Ra
MD5:	2DC61EB461DA1436F5D22BCE51425660
SHA1:	E1B79BCAB0F073868079D807FAEC669596DC46C1
SHA-256:	ACDEB4966289B6CE46ECC879531F85E9C6F94B718AAB521D38E2E00F7F7F7993
SHA-512:	A88BECB4FBDDC5AFC55E4DC0135AF714A3EEC4A63810AE5A989F2CECB824A686165D3CEDB8CBD8F35C7E5B9F4136C29DEA32736AABB451FE8088B978B493AC6D
Malicious:	false
Reputation:	low
Preview:	.<!DOCTYPE HTML>..<html>.. <head>.. <link rel="stylesheet" type="text/css" href="NewErrorPageTemplate.css" >.. <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">.. <title>Can’t reach this page</title>.. <script src="errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="getInfo(); initMoreInfo('infoBlockID');">.. <div id="contentContainer" class="mainContent">.. <div id="mainTitle" class="title">Can’t reach this page</div>.. <div class="taskSection" id="taskSection">.. <ul id="cantDisplayTasks" class="tasks">.. <li id="task1-1">Make sure the web address <span id="webpage" class="webpageURL"></span>is correct</li>.. <li id="task1-2">Search for this site on Bing</li>..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\down[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	748
Entropy (8bit):	7.249606135668305
Encrypted:	false
SSDEEP:	12:6v/7/2QeZ7HVJ6o6yiq1p4tSQfAVFcm6R2HkZuU4fB4CsY4NJlrvMezoW2uONroc:GeZ6oLiqkbDuU4fqzTrvMeBBlE
MD5:	C4F558C4C8B56858F15C09037CD6625A
SHA1:	EE497CC061D6A7A59BB66DEFEA65F9A8145BA240
SHA-256:	39E7DE847C9F731EAA72338AD9053217B957859DE27B50B6474EC42971530781
SHA-512:	D60353D3FBEA2992D96795BA30B20727B022B9164B2094B922921D33CA7CE1634713693AC191F8F5708954544F7648F4840BCD5B62CB6A032EF292A8B0E52A44
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............ex....PLTE....W..W..W..W..W..W..W..W..W..W..W..W..W.U..............W..W.!Y.#Z.$\.'].<r.=s.P..Q..Q..U..o..p..r..x..z..~.............................................b.............................................................................................................................................................................................................$..s...7tRNS.a.o(,.s....e......q*...................................F.Z....IDATx^%.S..@.C..jm.mTk...m.?\|;.y..S....F.t...,.......D.>..LpX=f.M...H4........=...=..xy.[h..7....7.....<.q.kH....#+....I..z.....'.ksC...X<.+..J>....%3BmqaV...h..Z._.:<.Y_jG...vN^.<>.Nu.u@.....M....?...1D.m~)s8..&....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ecm3[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0666130806898115
Encrypted:	false
SSDEEP:	3:CUUX/ExltxlHh/:SXMb/
MD5:	6851DBF491AE442DA3314F19E8AFF085
SHA1:	ECFEC27263608C4AE7CD4F8E0CEBB1B061DF2AC3
SHA-256:	C21E2C1246FE45A6750AE6208DB2B5965FF6ED63EB80D2ECEC3BE9C83813428E
SHA-512:	89DFC38EC77CF258362E4DB7C8203CAE8A02C0FE4F99265B0539EC4F810C84F8451E22C9BEF1EBC59B4089AF7E93E378E053C542A5967EC4912D4C1FC5DE22F0
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ecm3[2].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0666130806898115
Encrypted:	false
SSDEEP:	3:CUUX/ExltxlHh/:SXMb/
MD5:	6851DBF491AE442DA3314F19E8AFF085
SHA1:	ECFEC27263608C4AE7CD4F8E0CEBB1B061DF2AC3
SHA-256:	C21E2C1246FE45A6750AE6208DB2B5965FF6ED63EB80D2ECEC3BE9C83813428E
SHA-512:	89DFC38EC77CF258362E4DB7C8203CAE8A02C0FE4F99265B0539EC4F810C84F8451E22C9BEF1EBC59B4089AF7E93E378E053C542A5967EC4912D4C1FC5DE22F0
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ecm3[3].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0666130806898115
Encrypted:	false
SSDEEP:	3:CUUX/ExltxlHh/:SXMb/
MD5:	6851DBF491AE442DA3314F19E8AFF085
SHA1:	ECFEC27263608C4AE7CD4F8E0CEBB1B061DF2AC3
SHA-256:	C21E2C1246FE45A6750AE6208DB2B5965FF6ED63EB80D2ECEC3BE9C83813428E
SHA-512:	89DFC38EC77CF258362E4DB7C8203CAE8A02C0FE4F99265B0539EC4F810C84F8451E22C9BEF1EBC59B4089AF7E93E378E053C542A5967EC4912D4C1FC5DE22F0
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ecm3[4].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0666130806898115
Encrypted:	false
SSDEEP:	3:CUUX/ExltxlHh/:SXMb/
MD5:	6851DBF491AE442DA3314F19E8AFF085
SHA1:	ECFEC27263608C4AE7CD4F8E0CEBB1B061DF2AC3
SHA-256:	C21E2C1246FE45A6750AE6208DB2B5965FF6ED63EB80D2ECEC3BE9C83813428E
SHA-512:	89DFC38EC77CF258362E4DB7C8203CAE8A02C0FE4F99265B0539EC4F810C84F8451E22C9BEF1EBC59B4089AF7E93E378E053C542A5967EC4912D4C1FC5DE22F0
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\errorPageStrings[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	9440
Entropy (8bit):	5.164796203267696
Encrypted:	false
SSDEEP:	192:JsUOG1yNlX6ZzWpHOWLia16Cb7b4sUOG1yNlX6ZzWpHOWLia16Cb7bk:JsDhpNOWLiIb7b4sDhpNOWLiIb7bk
MD5:	9FDEE838E7C036092E81A4E7CC949643
SHA1:	364FC6C36972FFD803E5999AD501F3D7A2216FDF
SHA-256:	C6BF586821E13F7F6D6EF75AA82E69BD5E3E1336615C85AE513C70704F5C0787
SHA-512:	622BC3BD9F0615C191B03F2E8D018867C9D9ADCF1015DA5FB4D3462D71512B72558B32CA9F74A925C150B57FD232ABD48AFFC8D32128C50540DF02FCA8ECBB2B
Malicious:	false
Reputation:	low
Preview:	.//Split out for localization...var L_GOBACK_TEXT = "Go back to the previous page.";..var L_REFRESH_TEXT = "Refresh the page.";..var L_MOREINFO_TEXT = "More information";..var L_OFFLINE_USERS_TEXT = "For offline users";..var L_RELOAD_TEXT = "Retype the address.";..var L_HIDE_HOTKEYS_TEXT = "Hide tab shortcuts";..var L_SHOW_HOTKEYS_TEXT = "Show more tab shortcuts";..var L_CONNECTION_OFF_TEXT = "You are not connected to the Internet. Check your Internet connection.";..var L_CONNECTION_ON_TEXT = "It appears you are connected to the Internet, but you might want to try to reconnect to the Internet.";....//used by invalidcert.js and hstscerterror.js..var L_CertUnknownCA_TEXT = "Your PC doesn\u2019t trust this website\u2019s security certificate.";..var L_CertExpired_TEXT = "The website\u2019s security certificate is not yet valid or has expired.";..var L_CertCNMismatch_TEXT = "The hostname in the website\u2019s security certificate differs from the website you are trying to visit.";..var L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\errorPageStrings[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	4720
Entropy (8bit):	5.164796203267696
Encrypted:	false
SSDEEP:	96:z9UUiqRxqH211CUIRgRLnRynjZbRXkRPRk6C87Apsat/5/+mhPcF+5g+mOQb7A9o:JsUOG1yNlX6ZzWpHOWLia16Cb7bk
MD5:	D65EC06F21C379C87040B83CC1ABAC6B
SHA1:	208D0A0BB775661758394BE7E4AFB18357E46C8B
SHA-256:	A1270E90CEA31B46432EC44731BF4400D22B38EB2855326BF934FE8F1B169A4F
SHA-512:	8A166D26B49A5D95AEA49BC649E5EA58786A2191F4D2ADAC6F5FBB7523940CE4482D6A2502AA870A931224F215CB2010A8C9B99A2C1820150E4D365CAB28299E
Malicious:	false
Reputation:	low
Preview:	.//Split out for localization...var L_GOBACK_TEXT = "Go back to the previous page.";..var L_REFRESH_TEXT = "Refresh the page.";..var L_MOREINFO_TEXT = "More information";..var L_OFFLINE_USERS_TEXT = "For offline users";..var L_RELOAD_TEXT = "Retype the address.";..var L_HIDE_HOTKEYS_TEXT = "Hide tab shortcuts";..var L_SHOW_HOTKEYS_TEXT = "Show more tab shortcuts";..var L_CONNECTION_OFF_TEXT = "You are not connected to the Internet. Check your Internet connection.";..var L_CONNECTION_ON_TEXT = "It appears you are connected to the Internet, but you might want to try to reconnect to the Internet.";....//used by invalidcert.js and hstscerterror.js..var L_CertUnknownCA_TEXT = "Your PC doesn\u2019t trust this website\u2019s security certificate.";..var L_CertExpired_TEXT = "The website\u2019s security certificate is not yet valid or has expired.";..var L_CertCNMismatch_TEXT = "The hostname in the website\u2019s security certificate differs from the website you are trying to visit.";..var L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\f[1].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	107
Entropy (8bit):	4.687983113383467
Encrypted:	false
SSDEEP:	3:oVewGL34zhoJMd/xC0MId/avHvpHlxfYf:ogwcozOJe/xeq/Ynxwf
MD5:	D9C47F48660B656705D0FF86FC850DE8
SHA1:	BCEB9478F69CDFC2EB87AE6B80E95DBAAC8B6769
SHA-256:	A4A1824DEFEC1084CA81D496EE77891684C26196924BDC4FC21DD3482CE15E14
SHA-512:	0CDE289EAD00BD9B3BDD614FEC5B5EB132FDD0D9EEF5136F7E6EA0081F7D8DBF8144EE90067C8C25C4547FAC4ADC8FEA1B028930C9EDCF023151758BF6671D6A
Malicious:	false
Reputation:	low
Preview:	processGoogleToken({"newToken":"","validLifetimeSecs":300,"freshLifetimeSecs":300,"1p_jar":"","pucrd":""});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\f[2].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	107
Entropy (8bit):	4.687983113383467
Encrypted:	false
SSDEEP:	3:oVewGL34zhoJMd/xC0MId/avHvpHlxfYf:ogwcozOJe/xeq/Ynxwf
MD5:	D9C47F48660B656705D0FF86FC850DE8
SHA1:	BCEB9478F69CDFC2EB87AE6B80E95DBAAC8B6769
SHA-256:	A4A1824DEFEC1084CA81D496EE77891684C26196924BDC4FC21DD3482CE15E14
SHA-512:	0CDE289EAD00BD9B3BDD614FEC5B5EB132FDD0D9EEF5136F7E6EA0081F7D8DBF8144EE90067C8C25C4547FAC4ADC8FEA1B028930C9EDCF023151758BF6671D6A
Malicious:	false
Reputation:	low
Preview:	processGoogleToken({"newToken":"","validLifetimeSecs":300,"freshLifetimeSecs":300,"1p_jar":"","pucrd":""});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\f[3].txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	21911
Entropy (8bit):	5.410485043250451
Encrypted:	false
SSDEEP:	384:HvNB4ViWplMmF7SQyPdKgJR9MKNiWYza6SVAoflT2z1x2N+nMy49Wy1ek/LA:HMV627ryPdKgJPMO7codixKE8LA
MD5:	24F79F6E34914FBE29845F90EA54C095
SHA1:	D137A3F36CE3A61551D905FFF6AA043369E8CA03
SHA-256:	70D82C6075989E0082B4917C6685F5F6BEC1E673D0A80160EAC61B3F1CDCB1A1
SHA-512:	8C92F509DD1C22619AA87F99E42607C67144A6859A339DF38CC6A77275EFB7A95E9FD250549B5259B640299392A4614107EC214330C6C0C0BDEE23A92CC87826
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/pagead/js/r20210316/r20110914/abg_lite.js
Preview:	(function(){/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a}; .function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ca(this);function da(a,b){if(b)a:{var c=n;a=a.split(".");for(var e=0;e<a.length-1;e++){var g=a[e];if(!(g in c))break a;c=c[g]}a=a[a.length-1];e=c[a];b=b(e);b!=e&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}} .function ea(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:aa(a)}} .da("Promise",function(a){function

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\form-button-bkg[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 8x30, frames 3
Category:	downloaded
Size (bytes):	519
Entropy (8bit):	5.9714097705956055
Encrypted:	false
SSDEEP:	12:V2bfQPGonYwq7Rn2KloXco4tncvVXpalba:0bfQPGoYwIRn2Kl5o4tc2U
MD5:	82100DD8288C0B2CCC67ACF8A6961A39
SHA1:	33E2699C7D4847E9905B9AA7D4C2E0939EBD47AF
SHA-256:	E56350CBAB4180098C8D079E8233F4BE4441B991AFA479575FC32D93FBEA9B08
SHA-512:	1C3CD15B0E88EADF580BB55FF3D001C0B037C752DD6E83634A0A53E38B951DEEDE837D5FE65729694081373A902A5441D35104EA8078EF721DC3239F28415A99
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/form-button-bkg.jpg
Preview:	......JFIF.....d.d......Ducky..............Adobe.d................'..'2&.&2.&&&&.>55555>DAAAAAADDDDDDDDDDDDDDDDDDDDDDDDDDDDD.... . &..&6& &6D6++6DDDB5BDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDD...........".....................................................................................5.....!.1.AQ".aq2...B......R#r3b..C4.....S$s.c.....DTd%5E.&t6Ue....u..F...............Vfv......................../....!.1A.Qaq..".2......BR#br..3.C$..4SDcs....T....%..&5dEU6te....u..F...............Vfv.............?...V-P3.eP?..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\g[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	172
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHhqw1urkltxlHhqw1urkltxlHhqw1urkltxlHh/:ggqbgqbgqbg/
MD5:	B8D64F0D0244ED0D53022D78EA623B2E
SHA1:	8C07219C53CCD1D6EE30193962DAB623E4EC32A9
SHA-256:	F6C370E009AD0A946A8F1CF7726E3C426C3E72C1440DD3D7BB3126DB4BC710C9
SHA-512:	7347D89A18DED63DF76B714576DC408E08BB920DD0954CC03EFD53A16B0DAAB42D0AC2EE2C2DE5B7522F0FA3B530760DA1C3AE0A93C15BDEDA5CDAFC74E1C4E3
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;GIF89a.............!.......,...........D..;GIF89a.............!.......,...........D..;GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\get[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	367
Entropy (8bit):	4.860698485123483
Encrypted:	false
SSDEEP:	6:8NqAcPMBu6hppQeUjuepUhWSQP2uK7XuFIufXHgZigP1/67BXVlWTMx0HjD9/en:BnibvpQks2uqXLuoZiQABFlu9Wn
MD5:	7EDC53F89F41D6720FF6B6F2A6C53DCC
SHA1:	75E6719D24D6EB3033C7FB64F60618E4DB0C79C8
SHA-256:	A6191B6AC10675BD40A595975D153816821E06498061A7F778E29B6B815C767C
SHA-512:	4BF26F1136FAB46E24C1967FB233AEFFC4EB88558B59AE526FB421C16C9585F2074F6C0BFB2F05417BCFFFD977547F8A6EE76E69C037E90EBB14E9D822D24BFF
Malicious:	false
Reputation:	low
Preview:	Krux.ns.bellmedia.kxjsonp_userdata({"status":"200","body":{"code":"no_segments","kuid":"OAo8OofK","kuid_long":"v4kkdrasc","geo":{"latitude":"47.37","longitude":"8.52","domain":null,"region":"zh","zip":"8000","country":"ch","dma":null},"technographics":{"browser":"Internet Explorer 11","manufacturer":"Microsoft Corporation","device":"Computer","os":"Windows 10"}}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\get[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	238
Entropy (8bit):	4.75741157248866
Encrypted:	false
SSDEEP:	6:8NqAcPMBu6hppQeUjue3u2IqmhWSvFIufVX8n:BnibvpQJu2tm6ul8n
MD5:	218260555E239981A3B8B94E53123569
SHA1:	C548FF55F56D0DF6EFCF2DA0ACDD1591F6B5380A
SHA-256:	EC725C74D7ADEC470648AD18437D611E5451748455357685D5778C2DCD9113A8
SHA-512:	2F38D3F94C9806D98E5444D27E6BFCAC621335D42A84FD69752DDC0464498411F11F5A79DB5EAB6D3FFDB8B0ED880AB2EA913B58D5C8120D85835826B6EA14D6
Malicious:	false
Reputation:	low
Preview:	Krux.ns.bellmedia.kxjsonp_userdata({"status":"200","body":{"code":"no_segments","kuid":"OAo8OofK","kuid_long":"v4kkdrasc","geo":{"region":"zh","longitude":"8.52","latitude":"47.37","domain":null,"country":"ch","dma":null,"zip":"8000"}}});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\header-hotfix-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	445
Entropy (8bit):	4.777470187783144
Encrypted:	false
SSDEEP:	12:JCBCUtw2sElMyC9hUtwiAROPV67HARqo568:cBJt9lfMKt0OQQqu68
MD5:	225B6CB9D20A3B6DDA474B5ED144B313
SHA1:	97E04DE81F5695F8C2D4B5BA38CEFC2058B184CD
SHA-256:	4842D1AE21112B4A0C8B224BB223C9A1D0B024733F64BA9DE667F8460DD2D3CB
SHA-512:	7BF761DDDF7EBDCBCC56AE8B18F42846F9367E5FAB736570A218F2BC938959A2605E8F624387086F80F000EBD10FE8A217CBF5CCFDC54041CE310B5B36053CA9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/header-hotfix-7.737013
Preview:	div.election-returnhome-cta {.. width: 30%;.. margin-left: 0;.. padding-left: 10px;..}..div.election-brandlogo-cta {.. width: 40%;..}..div.election-follow-cta {.. width: 30%;.. text-align: right;.. margin-right: 0;.. padding-right: 10px;..}....@media (max-width: 320px){...banner section {.. max-height:40px;..}..}....@media (max-width: 420px){.. div.content .election-follow-cta {.. width: 100%;.. text-align: left;.. }..}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\hide-g-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	218
Entropy (8bit):	4.5708633899072675
Encrypted:	false
SSDEEP:	6:I3E6OVJiEhTCcEBYFk373EPEBYFkBa73EwWVlIQ:wEiE1CcwlLEPwlSEjVv
MD5:	6D4B14199571B9CD78946095E6805AD5
SHA1:	DC42655B8C1AF98A350B007B153E547E80CEF918
SHA-256:	00495DD51A002EB2DB182674246C5D1B3881705F544FC8FB9BB88F4183015E34
SHA-512:	3B0A9ED2A05235C7DC57DBA777D14E41ADA41F181AEA156D1A5F49A1E0D2478BB39B7D5E04F196636440719580FD522860505325F31042E57BAFDAC3B221A2B2
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/hide-g-7.725977
Preview:	.gig-button-container-googleplus {display: none!important}...gigya-space #componentDiv div.gig-button-container-print, .gigya-space #componentBottomDiv div.gig-button-container-print {margin-left: 230px!important}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\hide-status-label-on-3rd-column-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	146
Entropy (8bit):	4.281013576396826
Encrypted:	false
SSDEEP:	3:NxdJCA2IMsAGkIPNuI1NuI7GkI8M62LtxhvCWV00ey/C:naDcNuCNuuJMtxVTey6
MD5:	CC298853D4475F6C173D9C3271C826B8
SHA1:	9781CC00AAC4B3FFD9B7FB3A4693B89521D54F47
SHA-256:	CFE9E0A55EF9FB1095D6FF6BC607ADD7CDEC62813711F87E1CE5343F3B218D01
SHA-512:	E7FD6655E0FD013A0ACE3B7E47AA9260E0C361B0DC6D3F26B95B51594AA07272CBEF1F297E1976202E796FFE69D883780CA8B369DC99EDEE602E89F431D2EFBD
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/hide-status-label-on-3rd-column-7.753690
Preview:	.column.col3.election-col-3.election-col-s-12.election-col-m-12.election-col-l-3.election-col-xl-3.lastCol .eHub-div {.. display: none;.. }.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\httpErrorPagesScripts[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	dropped
Size (bytes):	24210
Entropy (8bit):	5.451485481468043
Encrypted:	false
SSDEEP:	384:xPini/i+1Btvjy815ZVUwiki3ayimi5eqBG1fm304Pini/i+1Btvjy815ZVUwik5:8i6+1B1y815PUNZ3ab3fBK9i6+1B1y8d
MD5:	7B6C8BD51E49F7F56E2B21311D0EA59B
SHA1:	EDB0F7D21BCEC6C48DEDC14E9ED41383740BAE37
SHA-256:	620BD33A4E0358498D9429FE2DBA00F85A86D6059FA796B482E2A9F6B0794F2D
SHA-512:	DD1D524872EE165D230BE5B3872DEE108B806AB684AACFA955F07B7A87C1ACA63FA3B59210442E1E3C9A2D33409583E0AC3B1A6A0D4EB91BBEEF62D311FD1BC4
Malicious:	false
Reputation:	low
Preview:	...function isExternalUrlSafeForNavigation(urlStr)..{..var regEx = new RegExp("^(http(s?)\|ftp\|file)://", "i");..return regEx.exec(urlStr);..}..function clickRefresh()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..window.location.replace(location.substring(poundIndex+1));..}..}..function navCancelInit()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..var bElement = document.createElement("A");..bElement.innerText = L_REFRESH_TEXT;..bElement.href = 'javascript:clickRefresh()';..navCancelContainer.appendChild(bElement);..}..else..{..var textNode = document.createTextNode(L_RELOAD_TEXT);..navCancelContainer.appendChild(textNode);..}..}..function getDisplayValue(elem

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\httpErrorPagesScripts[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12105
Entropy (8bit):	5.451485481468043
Encrypted:	false
SSDEEP:	192:x20iniOciwd1BtvjrG8tAGGGVWnvyJVUrUiki3ayimi5ezLCvJG1gwm3z:xPini/i+1Btvjy815ZVUwiki3ayimi5f
MD5:	9234071287E637F85D721463C488704C
SHA1:	CCA09B1E0FBA38BA29D3972ED8DCECEFDEF8C152
SHA-256:	65CC039890C7CEB927CE40F6F199D74E49B8058C3F8A6E22E8F916AD90EA8649
SHA-512:	87D691987E7A2F69AD8605F35F94241AB7E68AD4F55AD384F1F0D40DC59FFD1432C758123661EE39443D624C881B01DCD228A67AFB8700FE5E66FC794A6C0384
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/httpErrorPagesScripts.js
Preview:	...function isExternalUrlSafeForNavigation(urlStr)..{..var regEx = new RegExp("^(http(s?)\|ftp\|file)://", "i");..return regEx.exec(urlStr);..}..function clickRefresh()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..window.location.replace(location.substring(poundIndex+1));..}..}..function navCancelInit()..{..var location = window.location.href;..var poundIndex = location.indexOf('#');..if (poundIndex != -1 && poundIndex+1 < location.length && isExternalUrlSafeForNavigation(location.substring(poundIndex+1)))..{..var bElement = document.createElement("A");..bElement.innerText = L_REFRESH_TEXT;..bElement.href = 'javascript:clickRefresh()';..navCancelContainer.appendChild(bElement);..}..else..{..var textNode = document.createTextNode(L_RELOAD_TEXT);..navCancelContainer.appendChild(textNode);..}..}..function getDisplayValue(elem

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ibs_dpid=771&dpuuid=CAESEJP6rF5j76A7H9ODeGSccW4&google_cver=1[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image076OUV8L.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	9686
Entropy (8bit):	7.905565747760928
Encrypted:	false
SSDEEP:	192:UNfxMUZjKxp3HmV6QwCmQnJta4ZJb1tknXCve76JLl3QlHuF/njPO:UsUZuK6QTnbhJLme5l3oHuFfLO
MD5:	0FFE02C222A8F5FE84FBB67E772DBC1C
SHA1:	64DF22F17DB92A3436388C22C824B98A150DE0F9
SHA-256:	9E8A17C0FA61B5AF73517D1E3E25E591EA7623F32F8CA6F47140A40E03B07554
SHA-512:	E1F6A977FF2208249B2AD96AB2B86B39E433A06F629F14FD19C338F2C9313369FC48704F737664C3235CF2EA12BD2A4A2D4027999A2523D9EF9FF39C76CC329C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5346702.1615728060!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..w.e..-_....h>...\|....F.'O.....*..y...g>\.).G`...._.....N.7.....G.O...O...'.[.....CZ..}.#..4.V.mf...MM......!...lL...:..#......_..ea.?.'....x.Fm.q.]...@....+<$p.C).x....h...g}.uJz=Q..:.ci.k.;.I...K..xv.........Y."HLW...NP.......\w>5..u$.....xz.C.SR.,e.?...n$$6.Dx...y..._..%...{.p........}..n...o..to.L..ti..ku2.G..F.J:....m..gy....Xh..k.6...N.6..5;).L...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image0JZU8GPO.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	10171
Entropy (8bit):	7.906319512500216
Encrypted:	false
SSDEEP:	192:RO6EN/X1waX/4EFZN/+6swqrSl6cPSaS71Fm8N9SpiIlKsST7oV6:RnEN/X1PgEFZgXSoQjSRFmgcIjkA
MD5:	A583084E7A3607D6406D8771FB9B8735
SHA1:	D1681F7E271CCBE72651E70E2B9FD14A4AA54BB9
SHA-256:	84DA5BCE2C48C56F2ACBC651442D2229183B946C3E6F3A0F55694F39BEF583A6
SHA-512:	AEE7ED5AFE17467895FD1B19EF2C35BFF325BB8AAF6B853148F18649DFACC233FCAB271F207CC25B570D9CAB0A06361FFDA7A236FB119426E47C0A7CAA76C15F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5324616.1614291098!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..z.B.9..SF.S..6 .s.U.u...u.z.B76.4.WP.R.I.<G&......VA.=..M-.,....a..9..?....P.?.?....?g..>...].3.&...w..x~.=.*i....dYVv-..I.k./.$?.._......mcJ...\|/..t.K...O...&.O.$.1#.......\|i.......=\|:.<a0..>...Yn..G...y..I...M.....jyu.k.,...w....^..3..............k....m...O...:....x../.....%..I%.x.R..d........Q.. .f8%........>.x....<.?.)........t.3OM-.=...:$q..{

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image0OIYV9O9.png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 300 x 169, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	9489
Entropy (8bit):	7.936176498339437
Encrypted:	false
SSDEEP:	192:MCCCCHnqnKNDNLGqAIJ9hgC5pD/iwAjdkaUJEzBwaac3YgDXAp6UyHLhc4YVZ5T5:MCCCC4URCwjpxNAZkDqqjgTAcUeF6Zd5
MD5:	87D981552FE4ED0D88B90892DCCCA3A7
SHA1:	79F3ED5B6BA9C2DAB4C560661FCE25FF6257B799
SHA-256:	E970F2A3AA8F0EA7AF18F690CD44A03AE241C72D1FDB96199BC08EF783BFE893
SHA-512:	B53779933B2283559EBBB009DC7ABA2333460203BAFC0F7FD3942DE7EC74DFAEEE6D91D48E6A33556D97542F520AA292A98895EC3CFC124AEDF9B3BCD31D3E9E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5033312.1595366126!/httpImage/image.png_gen/derivatives/landscape_300/image.png
Preview:	.PNG........IHDR...,..........w....$.IDATx...x.U....XV]]...+..UQ...Q............&.t...(.{.=....b.R..@...3wr........<.;}..o...\|..(.e....KD.......(..V.X.E.X.EQ..EQ..EQ..EQ.E`Q.E`Q.E.X.EQ..EQ..EQ..EQ.E`Q.E`Q.E.X.EQ..EQ..EQ..EQ.E`Q.E`Q.E.X.EQ..EQ..EQ..EQ.E`Q.E`Q.E.X.EQ..EQ..EQ..EQ..E`Q.E`Q.....v...;W-....8..l.....".R.NIF.....K.5.H..W..UW...%$.uk.p......,.....KE..9(.v.PJ.\|)...a%!........$.v..R.%...%.Q#.NNv..3.E....R{.b.).U...<...G.....{YW.,.@...'%.........YR.DG....]i.Rr..a.V...YY.,.@au.$=..o(.-....$.q.d9<.....y_....UO...DV...(e.=+I.K;..{$.eK.\.P.....2W..3]..>,.m..7....U..H.y..R..... .\|D..V....Cdd.P...A..a..7..@u.[...}R.xV...H.i....Pe...o..).C.HB.b..S>...h.V....o.Q.........%w.S......K...X..tU.K..&/.yF...7%+;.......)x..$.p..V.~.1g...[Ux%...$.......6.@...?..Q..d.X.....E.-..i...+\...y..........{..P!..g...w..! X=..II..:..........Xa.,. ....::...TY....;.5.-).HvJ...Sm....e..a=..=~").".U...ky....{T....oh.>..V..&.MP.?z6V._...{....H....JJ...&SO_

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image1UF1DSRH.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	7040
Entropy (8bit):	7.915621098020352
Encrypted:	false
SSDEEP:	192:U9EQLWCAaHBEC21SderL/itcNg+wDiAaW5PHfdpdDS:UfLJA0OaerL6tL9DDasNpdW
MD5:	3683A2CBC61F819CC5D8DC615015D1D2
SHA1:	53D6A63C7233ADB74BDFA70C7EBF19BAE3328362
SHA-256:	27E9589D44459E688781B9E35061690E8EA31460A016208C4B2AAD6372DFD266
SHA-512:	90980C38C7609ECDC9BE4DACA615F0EF59EB762D07A8E73788C284ECA4E32E29287521EFF7BDB39B92A3D7B7903378D3D0191F7C9251BA209AD572FC3F18400D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.2302970.1611241953!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...<?./..Z..,.....#.3..>......+m>X.FU.n.F.Q...m..[...+Oq...y.........y..}/H..V.....k6....5v....v..#..#\|.....w....C[..g...E....\....>...+_Cd\.9.s./.F..r:..R.h.....0..q!u...<.Q{. KA...>Q.....(.a.... .9.-.....G<SZ-Ek.6.Q. .=0{..lP........Zx......;.'..&M.]..V.l....Z,...X.c.FX.7/Z.`.....%...^.h...y~....g....>.u.../.....+[u2;Y[.K$........x.h$f.?/ke'.X....}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image2209FECX.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x451, frames 3
Category:	downloaded
Size (bytes):	105938
Entropy (8bit):	7.969858723878182
Encrypted:	false
SSDEEP:	3072:pC5Y/UACBG4il4fMft+pWmKDmmt7QdNEjKrCZE:pCMmiyfqtBv1QduOCZE
MD5:	5C1FD35BD4B9C2961AADC2DA5119047D
SHA1:	74207229C64D8C0F136EBCD8A5014628CCF9EEA6
SHA-256:	918CFC46AB6A40DA28EFE03525750FA35428B86283E27B45FC9523ACB8B493AB
SHA-512:	23AAD012C739689A88C7BD085BD39933EA6B9A0EFBBA8489BD233118643F26075A70D0C0F128781118402337D5138065DB7EFBA56C3A5F0C282BD633DE908429
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5314530.1615970210!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..$Q..t.b...v3..O...+.1..#.y...z..A..k..X......$.a..G..}x.n....q..bNN8`.$..)"..aA.k....Y..l.A'.Pi..V..7..S....,.Gg#...&.V....RV.o.C...X.....I.C.kVF9`.F../Z...gw...^W0..s...q...5.rU....z..3c...==k..p...=.....<U.....(.*.O...r._9...,3.K.....<.3tv... ..+9.".J..s....Hb{..c....7....2...u.. .G.'.q......#g.....'k..g+3..6... ..X....[.EV..6I..... .o....#i.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image2SORHJYJ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	11715
Entropy (8bit):	7.912349628054801
Encrypted:	false
SSDEEP:	192:UpXQ2ZhhBhb1jRB72pZaSUPlVmSC1VfFcvsmthkpHD1qPLgyD81bO:UpZh9bVX2faS6jmSqFcv7yqP8ywO
MD5:	795F482E3A7D9CE4D1BB560EB6E1267E
SHA1:	DF9B8C02A08333C168FEAF679445A09397728C84
SHA-256:	A60A3E2A6D13C554D994CC89FFAAB3CE30279FE1D59C57907FAC712A6B28249B
SHA-512:	8119E23B7160AD283F79EF0FD509F929CF42AE2FA52E062ECCBA54787649B46909FBBD51FB1361C62FDEFAB1ED398D8B36CEA7B31AF7681EDDB482A4A0C01638
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5346395.1615677084!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..-.i....),ZG.S.~$.XT....kk;[yn......i.d3.-..+h.f....O.....\|Y....."..>..k..n5?.X..&.].]..[K..EUo....j.X.2..E.....f.[m..7.}.C.....h.cx.[.S.t.K^3G.M..u..-c.K5..r.....E...........i..x......>.\|E..<+..V.6.{....>.p4.6=X.F....{m-.v.X.7O:c.;..6..L.e.I.....V..Z.....=....W.._...;-m._..........y.+?....S........."..q..P..7...d.v.........<1.....'..+...>..x.m......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image30AMG04Y.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	8142
Entropy (8bit):	7.913644803412132
Encrypted:	false
SSDEEP:	192:Ux1IX+Axdo4D/uw/fUFWUos3SGl66p9I6Wak6:UxuX+Ax6yXu7U6p9K6
MD5:	C73B9C4A941E5A236DA4BC83783BE90E
SHA1:	A08C296E69A3972DB79112B0650F23E7C22043FD
SHA-256:	25C635C19C55AAB672642F001551BA51841DA97004D973141C0534B0F19B72EC
SHA-512:	A307E3C27CB2F6616C2944CD10F3032781F7F0131123DDE4AF2A3986F26B50C6C999E6BB318A277B1CD6324A404FFF96AFCC21114985981F7975959A8AB6542E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5345551.1615592013!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...hw.....F$D....u.f....,^e.......NK...r...}.+..wS......."...h......=^.%I.R.3.f...\|...\..L.'8....qu......\|...Z.3.{......O..Z...%...2.q../...v.. .....;k...izv.hd.+Y#...~....8...-....kz../<9..mu,.......W.o.%W$.yldl....}.s.....-.....%.=R{.].l.F[;.c..O.k.1T...&..<.Z...;..._....t.../5.-Z.KP./...>dP.'.......cu}[.......[/.xs[.9..-.M.......c.F:.$zW.....6u[+?....u

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image3HF3VV6L.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	134275
Entropy (8bit):	7.934671518338675
Encrypted:	false
SSDEEP:	3072:szglrhuh/BE/UDDCC9y8lTToa/oHwHZoXhqkwmWt5/3GP2mZ7M2:szqr8BEwTnGttq5/WP2m1x
MD5:	BF8269387DCD2A0E40215997AC2904FF
SHA1:	D2F359E63DA9E3344AE84BA7125B5A9483613C4A
SHA-256:	B0ACF8834248C140C3986E23DE61648DB72AE37223D19CE79841E8CEB52AA2F6
SHA-512:	B92921165B72B5D864F7609862E4ACB58260E94EECD655E75B64AB5C66F0D60C6AFE26911EE71A3D5621E3C128902DF79427B65E92AA9C30A00F3F21B4855CC0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5109244.1600366099!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...-...... ..'<....x.....l...L.W....s...~.XH..(@..sF....?.~.0...\|..pp9...r......\..`.).....x+...z..>..H...5_29..X.q..H..Glz.Y....+aQ.....c......<.R.J.7..(...7`w....1..W........N...5..J.a..c.9#.8...2.?2....8.~..3..j{D...d.#0 .......qF......8..UdC.d...3.zv.L`.`..v.d.....O.L.A.2...UQ.%..z......*`[i'$.&E...q........+.....`....r....2...q..~.nhX.bw?.b...`.d..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image55V2YMX0.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	8639
Entropy (8bit):	7.904391834184386
Encrypted:	false
SSDEEP:	192:UXraZdViFOSDQXsWWRA6/+jxEbdNo8x2VLmIIxuquf2hZ:UXraZdViFfDQXsWWRV/+j+bbwVKKwL
MD5:	5C190B5E9BAF1B5F0D39B2FDDFC575DB
SHA1:	55D373B17EE27FDB1EC4009D40CC13E079DE7FF9
SHA-256:	EC0572D4F7E44D8E9D0914039E83FDAAB64666D5E1DFD4D6F06E0B6CE7BA2D15
SHA-512:	E56F3C127463D670E6F5D292F899AD5822CAD6A8B8B66FF0C3D4DC8C5DD5B32A3A6E18C0AD70420CD1EC4237D725C082C54E40F626A11BE926DB88361EA7E9AF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352733.1616090976!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..0.->.s<.F#r......+.-.o.....U...Z...M..)....Q.Hi...A$/8.}A......Om..\|'..\|Ke..k}..jQ..+$..nT.a....Y..8$}....o.-.O........K..Xk.....b.Mi.[.&.R...0G,s\.SQq.Xd.NU......S.`....D...F..........e.".y...E.......w.n....<E4.].....1A ..........M...@-4.....k&......8.M.B>....la......`.\|.]..u8\|=.W..5...'..$.)a....;.D.1.....t.7...D\|6.....X.#....\|F.....-l.$.t.F...p.,....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image5AYP8VYP.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	152277
Entropy (8bit):	7.944489760206314
Encrypted:	false
SSDEEP:	3072:oM/JPFsA8UPRNVkQmtjtuhQuoL07Q1BJYbtJ/3J0:oGJPEUVkQstuKEuJatJh0
MD5:	E3FEFE816557BA935399BDD887101FA1
SHA1:	ABE9180168EC0B4EEE7C9715E3090DFE1930B244
SHA-256:	537F4E7D2CBDA28DF7955410660AD5FEBA49E2D80C3DF72F00ABC2A4F0FF995D
SHA-512:	ED7A76875C5392B808B39E4DEA46601C3C6B2826255E6B5967679FEC22A90C4248548E6DEE13B9EE615EBF0BEA335E427FCDABF75A168002D08648C4D043E7F0
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5346702.1615728060!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....._..3.-............h<...T..%...y...<C.{.....j$$.........?l...#S....Eye4y....J.d`W.......R.5.....\|N..yQ.I...{.....-.}5%t~.E..V.....i:.}.5./.3....~u.....).+....-u.{_..R.t.z.......<....F#k9.r+...?...x.M..\|/.;k.v.b..P....W{..n....1I..z.W..puif...I.S....7.\|/......v./..A.=.+..7].'.]..+..RN3.k...[.dI4.{E....:.r8...r......SG..,..om.L..k.5o.......xpxcX2+&..FkGL

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image68XAJT1F.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x450, frames 3
Category:	downloaded
Size (bytes):	43742
Entropy (8bit):	7.831334040604937
Encrypted:	false
SSDEEP:	768:J+V/lvvvXk+NHe8bOZC2Xm2Y6aRt5dQWL+ZXDwY5hfoUp3KSFK2NfR8:JWvXkuHed5m2Y3OWSZ/iUpBRNm
MD5:	52EA6E800533A09F6830C274875D289A
SHA1:	B7DAC5E062A31CA493CBBC8ABAD80468905D2C38
SHA-256:	693488F42C44B7FE7F86B0AE899568F654E06CD256180FD2135BBF47AEF1C4F2
SHA-512:	E95BCB8390325655AF735A9DF053261DF404B18B7C20D6EA97D2D623DE70A0A1F338C49B5D2E1973A1F1F1E2BA4C0D0D7353C09FE462F3CB9AB950DFB16C3AEB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4703645.1591719133!/httpImage/image.jpg_gen/derivatives/portrait_300/image.jpg
Preview:	......JFIF.............C....................................................................C.........................................................................,.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?........6....b.N.C..^.O.*......V.9.w......w.y...g..@.QE9>...T.J.U.e...{z.cR........[w?.%I..-?.T..r..?.(.[..V..t.J)....."n....i]...OZ.a..46..Ryv..4.~H...r........./.?...........}o.=U.\|[s....Yj..w....4r.../.}.T..$.M..F.G......o^.gCn...o.6.G.\|#.>$......G......Ig.....y....w.5li:...h.?.4{....^...{.G.qgp.H]s..h..9Y=w.w....S..;m.]4.K,.....=G.(...f.3u&.3..?

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image6LZ9NJPQ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	8649
Entropy (8bit):	7.91301914478488
Encrypted:	false
SSDEEP:	192:R26cG5yfBByp1hb34oZ3sHbxqDTTvCYQuc3aWpA9rbMA:R26cGsr+hboG3luucqWeqA
MD5:	C726280FEA9B9B7CA85729927322515F
SHA1:	DE996D840E1B2097EE22E61F3DB3B9545DFF5F85
SHA-256:	FD752AED1E19C9EBAB942AF00409F9528B5C4997C76E6B42A0EC7AEDE4441133
SHA-512:	25D3829789905BA18FF8F67CDF2C3ECB5A9C677392CFFE85DE3A51A420ED9281302A955179A6DB6D819AEFE0723979F586AB20FA687494648B616E0A33976055
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5046847.1596202922!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......../.Y.j....@....`.,.6.]..H.]....LZM...,..\|..?.{..f..4.I.K..@$....A..V...%{$~e...Q....b.........g......._.H......lQ....}..m^.=6v.%.B..q.~X\|[.$6?.\|1\|.*,W..'.....7F.kFyn..[.."\|&...}..M{E....-..@.^.q.{+.........m.X.xsH.>t..\|X...........iI..s\r.I.8.......\|2m.E.......n...ds.+.]KH./n...^..f....L%.b.O-.IniK0...}....)...:a.'..(.eyf.....^&...w;....3..k..c.s\

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image6XVKU17W.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	135162
Entropy (8bit):	7.9623493412803255
Encrypted:	false
SSDEEP:	3072:EvsbjwvILpv+OAD34VHjdpjkfNwn4k6T/PQJ/:ECjwvILUOQ34VHUfrk6THO/
MD5:	C12A7631F7382983C145FD6A52F9476C
SHA1:	9D5A1B5613E83DE9AA400C28DDD59BE19BB7E428
SHA-256:	49804E5E8BD23650068BCFB7A1ABE7BA5FE6459DCFCCD111E8B81FDD00B0F599
SHA-512:	6BE6C1174C7B20BDBF324F3A3D8834BF83A8D417B2A026F4877C022CEF6F7211E4CC16E066458C8E3E66E120FD8330CB9F9F20AE0E9E8F2D3F17F157D0F9470C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5326051.1614368171!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..a..rX.. H....~i..$.T(....m..~..}.Y.O.E$3#...}..l..4.....%......y.\|E.g..(....s.$H2..q....K.........g...~.E..P...\|.....zP.I..8.e..Td...;.]sU..qSR.Qy...~`.......'....M.R..A.6..PH.c...._9.9V\..v.6..R.d.%.F.'...Q...S.V.q..K.*...Um.F~^9'..?#.C8P....u\|....'..Y......2........L...9#s...q..S...N...>L.J..C...'......D.v.nw.N....I....k.m.B......>. u.y...s].1R.....f

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image80ME2BDN.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	5471
Entropy (8bit):	7.837236856975434
Encrypted:	false
SSDEEP:	96:dmaEGZ5/qe3dFJkYzX1/YJrpkbJ8jHsCx6t2Ygm+GSUK+NVZx1t8:3DxnnxUdCQHs5thgJPD+Zx4
MD5:	9BB9B3934FC02267BCD3CFC8280C6B6B
SHA1:	DAADDF634C11D8A4372F85B4ED207BAD0C1CD2DB
SHA-256:	72D798AF911E10E00D9853FBAF68078D8AF86C6A7889F862ED7E0A18C2903AEF
SHA-512:	70D82DABEC481B01AD9ECA51FDC3C2039D9DDB01D9F5FD62110B184EFC0B3D24D814A3E8A9C436BE5A35BD3E468E6F8AFE4509184073F9144112F638126F3530
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5331591.1614778396!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...?.(...(...(...(...(...(...(......\|X.>.x.F...W.J;]#M...gc.1.u.e....i....J....S.m..W....<.ay<.....o.t....:g=.....@.....?`_.....m.B.?.ll.sc..W..g...$..]..k...$w.....?._...Z...=O..#..>.ql<...gj.......$.....a_.d.R.R......g............`......\.3.D `......3.u.....w.......U...~..s"..c..x...5.....6..=........hMk._.e1..qI.,....We....+u.......L..._.\.....?.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image8TUBPVZN.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	8184
Entropy (8bit):	7.90736194521268
Encrypted:	false
SSDEEP:	192:UOjLhQmsSXBW7Dj9KE1a86M/I4uqt5izwrwLFfdrlScmz:UkBsFfwE1a8v/I4uw5ikrwFfDiz
MD5:	271A35CF80B7E0946A27B89EB34FE960
SHA1:	9C7EB88FDAC71BF06E584322307590014F8998C9
SHA-256:	F90A9B1BEBA30E7F68AA62D58FA6F4D20EE709D52B5A21952C78724B30846C75
SHA-512:	ECEE78E447C0827A5E276C7522FE8F7A912D268BF9717918890EE443202890934E4B5188FAE83BAE407B5A4386A240AC1ECCB9B9A1669BF7F2D4110B47014B5F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5036493.1595533329!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...t$..o........G..&...IX...I.Q....!.d.....T.5it.o.?.t.Aq...v....2..o...v..v"S...7L.,Tc.>..15....8...........u..X........A...G..k...i..a<p..d..c..B.27....#...?m?....v.....^.._\|D.v.=.....V.8....E.G..@......).i..j........x..._V.t=~.NMJ;.I..-gQ..=.b...b)...7.F.pY./$..&i$}>..K.>i_.?n.:...Q>.....q..0....<qy.[.J...~.m{..s..`g.(C\..c...$N.?......._...VP.....hV..<

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageAZHSN4JT.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	6355
Entropy (8bit):	7.920438044417186
Encrypted:	false
SSDEEP:	96:dmaEbvO0CRZXyAWcoNRglTAR9J83WGmr+0cb+W+lDE20E1YGAITFdLlbBxaEEL21:3uO0CnysTARL3v2bb720XIFdpDLELOR
MD5:	08DF412499973058158EF7060BB7F203
SHA1:	9616EBE989BC114AF0BE41A4230D395DE7047B42
SHA-256:	13F1FE05E7D30714F75A1D9A5B17E0AB58DA8B80FE7B11DA2272242A961B87AF
SHA-512:	3424375784C81B4BAE05B7FB458EA9750EF32E99B1D111BC9A8AC2E20CA72374808CFA0BBBFD5F160F7204C957C87075655DE22FBB0775FD913014926B4BCD5C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5268704.1610738174!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..=.a.L....n.....I......W..a./\|../.5......S...;m5..e.9_J..$.I5..H.yGr..X.i...m.?Z...r\|..1...[...I...(.1 .n._N{.KD.g.j..J_p..<`V.(.F9.H.Y.g.....>0GRF~...e.r[...U{.}1]..P....S..[$....W....:/.b1.\....4.r.B;....?.k/..>..~....X.S.<.2..&S..w.2..z..}B.R..{.....f.<.!fg>..u.C......s..88.:z....O..>2k....l...8!<.H.f..\..>..y.k..e.....(,9......<\|.3..r1.8...l.u.w......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageC124T2MF.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	10343
Entropy (8bit):	7.944084990379487
Encrypted:	false
SSDEEP:	192:3zIs6sKn4WbHs1RTun6qAxpmwvo7LJLEmfNLLCkno+/+YSvEus3gAq0+MMWO8nxH:3EsSs1RalAzOXJwmftr1RgkQAgNWhBeu
MD5:	6C64C71827CD0C9CF1E180106CB22F80
SHA1:	1E786076CF29C875FDDD161F7E9FEFA287052E8A
SHA-256:	948BDD6A6C834ED74A6362C4CF7252F24907D56096316E67D76A71CAA3A7F0F5
SHA-512:	1CAD2166665548EF082383AB3CB755A8604BDFDD96D6A4379703A7EA5DD878C5D34053E00B0E933FB410111C7E8CF3D5FE85026FAE2A21356FC57E4E1EECB908
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5326051.1614368171!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..`{d.!S g....i$P.....J#...d;I...\.`....s_./{c..}Q...{.b......{{.._....Kg.E....!......k.a.@.>.\|.._....B.i0.s.>X...IR..{...q.Wev.<O...r. $. 5z.......5{MkW....\6......K...'.a.........<m.KM2.I.F.Ss...w4(G..f...=../G...w.~....#...U4....$...zqO..P.5N:.]..U.\|._.S......1k.}.._.._...\|...iZ\6..k...{...+.......C/.2.....x..d..[....~.?......k9.O.........#.I8..hW.w....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageC8TELK84.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x448, frames 3
Category:	downloaded
Size (bytes):	113563
Entropy (8bit):	7.96527731623151
Encrypted:	false
SSDEEP:	3072:Rg6UOra7MpSkvRPiuqKKylJ3ujIEK3qfpuAMlMD5P7C:q1OrW6kuoyz+kE2fAMt
MD5:	931DA3B4B8A50CDDB7EBFF9919DBBFD9
SHA1:	3B9CFF33AF336F83D1346B516049B68CADEAFFB9
SHA-256:	2C333EE5816FE68E65CF0DD2736B92D1663EA56409FF42A5DF1D23FA3DBDC571
SHA-512:	40AE96686E1CAC0AE2E79C90249355D996EF30BA29CB04264A8B02032BCE5C1AC71CF1099D08B97136519500E313539491F32B557E32138E5E5CB859D21C63BD
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5325567.1614350564!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......#..*PGOC...I..p....x!.G.=}.e+.4..=I...R.y.`.......R.zRy.$g.1M.2..D\....5:..d....0B....xp=y...%-G...^x...8....t....b......)........s..q.;..`.$q.JH....)..pp.x...........#..8......p.A.......3.Bh...$.F2....q..S.J.#..N.2..z..i=E.....(....h#.......q..}h....S.=h#.9..#.A...}F(..#..3.........s....d....9..4.=z..9......rr..pA...`rs...@...,S..<dg.i5.j.i..A....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageCJXWY22E.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	131533
Entropy (8bit):	7.964581024108079
Encrypted:	false
SSDEEP:	3072:nrK4Cf8ePXHIecvWPIYzrICPM2YtumVmLXDgrV2Q6dKq2B6C:0B/oebPHM28ZVqXy6gq+f
MD5:	66F5B64690903B517B0EB7A35E558B26
SHA1:	8E1B8E0427E69CD68A9DE3F7015F5DB538600374
SHA-256:	4A54FFDA5B1A19F9D090CFD167FC5A98418C13B00925FE542F16DA3230AA273A
SHA-512:	A9EBD2F1E71788538BFE3011A1374583800DE076BA11A9384CB30100050C6FFEAF516A5E21BBB987563DB047821934D73967493AF0B9F08962350BE36C3C0BF8
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5245417.1609004000!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...D#...=.T..O.G.P..j.lqc.nO`{T.......#..S@.T.G.U...........w.^.,.?........o@8.q#$...aR..s./..V..z.@.,+.[....'..i..z.}.ZXzg#...,.9.[Hy.;T....y.Q.....@..3..v........B.9.q.T.....B....U....8.jt...QV....3.......O~j.DO.q..n8=.t.j....T.....Y..:..,m.....U....<u..i.O.;.MY[bFKs..ZQ...j....O..g.o....[X:...WV..o.XH..s.x..I....VV....i...0>.mm9.......H..F.je..E...i.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageD47UTNG5.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	6053
Entropy (8bit):	7.912707458467354
Encrypted:	false
SSDEEP:	96:dXE39YwlOEsU5wWCVtF5/LCnnsoqgyP+UhdHCn3h4eyWwIFd3OXn5F6FSOtiBlQa:Ri/0pU2WC7nLUnsoqgyFCnCwOX5F6FnA
MD5:	A28C731FCC5D02DC8918732FA4F7C6E7
SHA1:	1076223EC2DB4FF0490B5C597B1BFB5BD69043D8
SHA-256:	8D3B83763C5E66F15939BB743300F738D6D19A92341F533053D2CE7C164DEBF2
SHA-512:	EF7D75BFDA06C5533DA3E296AC1A2307D430E7188507869BDB32E5E0C38623900D32930D43D82287C35CB07B084BC2BD30F86EC04D35F3708572FF2E139A33E1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5312034.1613535292!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..Nk.4r..zVm..-.pp+...8.b...&.p.)m.i..\>.zl~........w<..P_v.Gn{.F.....W..X.'n......v....~..p....T.*.8..u.............c<r.v.d...zU..S......T...>c....>PF{-M......w..lA..:.:...........E5...Kk.....Wz^...:I5.B.B1qgc./...d..B..K......%.9Ij..y...g.g.e.>...j(G....$~][..?.....mA..c`..W...y..........^5...7....k-..c\|..#..r.U....E`.;r..$K...1.X.....u..+_^..u.f.~m.U

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageDEAX0E4F.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	156863
Entropy (8bit):	7.959117997711003
Encrypted:	false
SSDEEP:	3072:VKw4KkQJ610BMXuVJO9YmgFmbawI+8ab/twDrGXUMBCCcCT5xt:H/kQJW0BMXum9Ym4mu/JabGD0B8C1xt
MD5:	A4CE46080C24821F43E17BF64AE81B84
SHA1:	DB92AE2F3328FDDEC52B01D4F927D3586B6AE51E
SHA-256:	A74DBAC469F3D27BBF4C31C7379FABD4B14C9FCCA3ACD1249D22E5902E930C12
SHA-512:	C6BF4A9E0C0B3D483C31F835504412E0385A67E415DA40E2A280FE2E94F9C43A55C43A0144594F758D5B6A32AA7091C72F45E4BB651F02C272606065A3AA5930
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4859921.1584637596!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...og..s.W/ux..d..7.{w.[<w.qw..y..<.}....+#...Y......>^...C...\|.y....M.t~..u~@$....3....z..p.s.X.Ist......\..OV$...]o.!i.F9.a......#.<3.H..x...KytR&.....X-c..P{f....R\|.*.....Qks.xo/.+...#.C.k.i.r....pN;W.u.x\|u.....{G.f...S.,s...s..~5.?.Lx.4..Rc8A.M.\|....)...eq./.:...y.Av.m...f........C.~.GB./.O.I8SWW]z.X.....!.An...............d..=.y....b.....O.)=u?.W..SV.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageDYE508TW.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x348, frames 3
Category:	downloaded
Size (bytes):	88690
Entropy (8bit):	7.968279750724169
Encrypted:	false
SSDEEP:	1536:q0NKw2uGewakszdvYvs0EKHEoPANPuHidAKCSRg1TIalXQRUub3:ZSu3ksimKkoPANmQAN+g1TI+XaUA
MD5:	3F49B06C4A97BF12FF0E6955293A4D79
SHA1:	F5BECC99FEE466C91F3FD97FD9AE16A4CD536499
SHA-256:	8DD57563B4AEDC073AF7F3542DBBB0365DED8DE88C093635458749EA2AD615F0
SHA-512:	A39689D7263A04DC2A583D9E04484566A75A7D306374689B49BFC68BFE4DB033899A7DCC572CA128C04BC0CB9C0250FB0DA4ED77503F0CAF9828F611AE4BD4A6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5257373.1610033529!/httpImage/image.jpg_gen/derivatives/landscape_620/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................\.l.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...0..s..2x......Q.A..N..NT..!_k.....:..Q..rO8\... .a.Q....8..p.....R. .p.X.....t..@;C.8..:}i..W.'. ..?O..Z.H).b2.}..@$....N.....P2.zq....6!.0I8P..0r`....0.$.......:... .:.y..U.Y7.2.........B.G'!T...S..Kc.0......4..".`>P..<~_Z.F....N..<....?xw.K. ....X....4l...cql..x.......<..Bm<.....?...9#....c.jE@..m..5"l.b..r.Ux8.T.2.AT .u....L.U...{.......X..R..6.RT

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageE0SFWFJ5.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	9084
Entropy (8bit):	7.900784607923818
Encrypted:	false
SSDEEP:	192:Rt2MmSA9JKeb47RWUm+Q7DuVg/vSggcRBgaNAJoC/aBi8zz2DYASjIJFZsjH:Rmx47IUmB7dvSgTR2+cf8pzwYANJaH
MD5:	4A022AC1E0581EFDDBAC072DBDC8A27D
SHA1:	E5933C4BFD3AD487427F9F655EF7816068E78297
SHA-256:	7EFEED31BCAC9B5FB78D6A642008CA9E59DEBC3E52C73DD34979CF2AFFDDF2D5
SHA-512:	02A7E9DD4E35A8EE21922CB06D63D31B4410588A5A3C08B7F4CB457BE196EECB93618A2081A990321DF271E19744FEF8AF2D02B04755315AD2AD2C2EE316C561
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5182007.1604983283!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..:.Hsy&.s.}K..x.?.~.?..k....k..N6.a..#...........Vh.Y....Mg4...W..G._..)..U.8.B.0....~.<3K..M.r..5.F/.._....{.q....=/C...Ac.K.8....By..%O=8._.....j....'..E...".g."P..Xu?.......x...w.5.../....[;y.j... ......_..Z...a&......Y.#(..%s.._._...>..ep...~.K..V....p.....N../H[...R......CS.\|K...r.........,.@..^=a..=.b.`........U.-......aK...H.H...3_..9.;._

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageE2HYO35O.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	4386
Entropy (8bit):	7.82297648884047
Encrypted:	false
SSDEEP:	96:d6EXFKzKH2xM1mSxP7yp9Bh+BAZx+vsWyRzs1h7N:U/36Ld76BjQUTzs1h7N
MD5:	E2242AE86BBA70F027CA07A962FE1F6E
SHA1:	4413C6B51D7F025C6B3CF11CF8B0D55EA2C91E8B
SHA-256:	2F258FCF127AC3545501404AC5A6301F2DFC8E870CC9DB9A1418F8A5FFEBCA27
SHA-512:	7F59F6F1B74CD237DFD88D6C1D5E2586404C4E92B964C5DCDC150ED4884AB3DB62281F8719CEF5F92B1D73BE7CA0B816A4C1FE1FFFF1B66FD7520A0CFDCD875B
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5307001.1613159398!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..y...9..0.(...(...(...(...(...(...(...(...(...(..?g/.._...<K...-...~..=.<Y.;..........i.X.e..F..f.{xc.1..d...u........W.......u<..6..,../.>ZT..o.(.)6.Q.r.i$.H......c..W.w..$...'.}/.v..\|;.h....m...j^#.m'..L:8...%..w/s!g.0.F.........j]g.F..^...?.}k~.......6.m..q5...&.0.,...6.4.B.F...Y.#.t.........7{=.M.d...?...2..7..Y_...KU.Q.{HF.e.zj..J*s._...]....._....1..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageF2H40W8E.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x349, frames 3
Category:	downloaded
Size (bytes):	143113
Entropy (8bit):	7.95594770290923
Encrypted:	false
SSDEEP:	3072:m9OhxTJHmpJtxZWl81w4OHvDgcFBGtmG0F:hqJtxQl8CNHvscFBGtmGu
MD5:	1F07E9941BED4B55754438EE3BB1F655
SHA1:	1BDA10A68F78FA9B48EEB1EF1427132131D743C7
SHA-256:	50C4D20E620983D057FFF48799FA7C5EDC4C1536B7ABBAAEB63029D20D2277ED
SHA-512:	74C9B878F92CF2690D4CEE80E9A87E6A760CCDBC3C39CCAB915095B7C77FE48E3A2893265F977EB28CD69CD1127E8C674D0B697BEC3D142966CAC98A4A76470E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5277841.1611323626!/httpImage/image.jpg_gen/derivatives/landscape_620/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................].l.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......>..~"...u..F...<..o ..!..".(..G.>....wp\|_.?...:....j..v...[.Kk...v.2.f.)Y..V.......-.H.9..\|M....]w.>.i....X...7....F.E.Z.R..Q%w...a......$.O.........W..~.._.x.Q..X.....s.Z0Hv..........+/..?.e..X,D.V<.i.-.]?......1..)J..~....)`....7.e......&&<.jJ...^......J...6...G..8.A...q q.._Dh?....\..C...f._..=.......].g.$H..[.$............s...Y.s......R.}2.m.-J..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageG522EXU3.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	118141
Entropy (8bit):	7.969668203640946
Encrypted:	false
SSDEEP:	3072:auKrZQ25S/r5B6Vhq5f1FfEku7QPuKHRIltQbrQN:auKrZzI4hWtpEku7o2zd
MD5:	3C5746925F0F7196C34D7A7920169633
SHA1:	38457AE3D34BAC2E1A9D5C0DB6931A4265BBB01E
SHA-256:	6B25932F7F79A9FDD60113CDF7E552ABDD07D67F4CA69E900815341BEB9BEDAD
SHA-512:	D34CBD0502A60EADF69A0DA71CA2162CE3AA77EDB4F37545AD9C35611ECE3654AF5FC49348D6DFF664EF6B1AE0BCB0BC589E1837ADE0F8167BBE565D3E18B951
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5345008.1615574539!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...+#\.n5m6...T..&..u.=.I...7...+^...U ..a....J.~...'.....0x....I.C%..k$..\:....?n....&...J..L6.+..9...._.m......[.uo2....2.=.5...F..><..$....+...L."\[..z....9.A.PNxZ.;s>e..=<&#..........h6.G.C[dnA...?..E/.A.B*..C]..........S.......4?.h....Gy.r.TwW.1..K.{L..k+.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageG6I5EUW9.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	121638
Entropy (8bit):	7.970758007400614
Encrypted:	false
SSDEEP:	3072:5VnF1tEDFptb7PtiJd743ak7PAXnVQO2wA8FZ9hFVZNkc9Ju:nnF1yDFfrtl3yQOXDblbkc2
MD5:	9C41249AE46E9C20BFB4DED39C3FB2BF
SHA1:	17ABF7998241905E576073A4EF290AEE103A59C3
SHA-256:	9A17F0679BDF46CE43055F53A08017E8C34A10358CCBC92AA7724E07FAFF47F2
SHA-512:	4014345060F5634522D7E6309CA85DEE4BC323DBEFB898FF19187CC4AB845A5C3ABCB2AE38520E725D15FABC46DD5A90C3AAD5AED0DC661DDD39225152514D7A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352709.1616090065!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..33!.2r.d....UWr....<..........1l{..j..R. z......n}..).".1tl.W c.v..H...V.g......o.......x...UBI...IP.>..../.v/....Fry..5..9.....TZM.j...z...P4.......&.L.y..{./0...,~b..BebK....x..=k;...pH.y.R...........i#EqvV..V;..3..npF=V..t.....=.9f..8...E.Skr.H..G~...'p=3.U..?0...."'%...R....4...!9.).T\|.%..Y.z.e......9.....D.$.*.........0eA.....UZv.l......UgW.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageHO8527D7.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	119716
Entropy (8bit):	7.97115261090643
Encrypted:	false
SSDEEP:	3072:wPEoFVTCP9+F8kb61uQOM7G/v/m/dzjRSzUTuxTjbSa:wXVCkf6l17mvu/dHRSgulfSa
MD5:	2E8F4EB49B936D4F7DF4EF76C9731AAE
SHA1:	A7A9936AF1986A543B7CAB7615342FFAC6B947C3
SHA-256:	2474133D57FD3DF4B0733CD2CF2B5C736E0EEB62693E81A760C3734CBE77884C
SHA-512:	C50A451F6A56F0017AD85DBCD587DF344CAC28EA1A12CE480CC22748842C11D31A5156FF4D66A6637DB1C10AE8F070822601515F3EA07E2A6DFA6C8AF48DF639
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5343689.1615500577!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..@..&v.7;HJ....$. !X.h.7.6s.8..n....`.$U.g./.'.#..8..6<7;.d\[.q..0.....S.?....X.8=...Z..<..pB..rx..U.."J.$.t$p=.J.T.wE..3.2..]V58....j[.G..I9...{...22.6.'....W....>.t.7p:....j...Y.h..J.@.....MO,P..s...a.'.?J.k..0@.<..._Jt.Q.y..v\m.y....t..l.S.....5S0..0 .@f...x.......%..H.cYG\.....9>..W(.j...\(Q.;.V.Y..PJ.....$.....z......(~..~.+.....(.!....8..f.=a../..e....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageHZ5M87W9.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x349, frames 3
Category:	downloaded
Size (bytes):	84013
Entropy (8bit):	7.959710060650753
Encrypted:	false
SSDEEP:	1536:rtMjmdZCwdUa+t8tEwwNm1U1H6xBbqXhwO8iMJBc257MhHsRah1WUfagSKA:ujmywPtEwJG1H6x6hpy57MeeWCage
MD5:	9701D44964D7E0067DAC7EF4DC2D496F
SHA1:	AB91177E7C0CF74303448E4229354EEA46AF1754
SHA-256:	A280E352207DC16C0FDCC6D4DD0D62136F3F410405332645CB1217050FEF503B
SHA-512:	CF8033964866102E9969EE3ED9437CC160CA401E647E0DFCD40CC190B7BDD793D6022A937D336CF51AB79F48CDAC8D7007E6C3E9CB9ACDCA1B6F29681CD0ECCF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5301282.1612871177!/httpImage/image.jpg_gen/derivatives/landscape_620/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................].l.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...\|..aK.....5#...a.p20.....h.....X'1.i.C#.p$..#....[6.Z......Z.!..z..8..x..Y\..b..F..%db.....dc...9r...i8.s...k.T..:V4.!..,.o..}........eq.8..6P.d.z..F..%w..3....N.Q...2J...B..G...}....Bq..:.UYF. ..w\..S..P)..w...*%f..r.As....8.<....L.I'!..d....P...z.."...U.BX..pG~.2...O..%.T..'..Tf.o.....s......E..t............r:...z.Q.[1.8......U..A...`...r.,.#wjb...#.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageICY7MV06.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	7174
Entropy (8bit):	7.911247677175169
Encrypted:	false
SSDEEP:	96:dXEs2cYcWxTc/tALCG354NY4ocAX7ZJrc3NOiBWtFxtaVH/iMTGBToRfj9:R4xY/tab2TUrIMiWtG6BTqb9
MD5:	29897C3585CF97A7190B7F7FE496CA77
SHA1:	99CC5D6AF686699D41F4DD064720713D2AAD634A
SHA-256:	A447B42F2DBC35F616183F5F5AF12B28288EDFC1BF4899FEA2D2D80275B6102D
SHA-512:	4F27099048699521F1BB3030C05ABFD24C92878F0DDF413CE004BFF78FAD0A0D177F1BB5EE607AF46625DC7A3EFBC1A2C43E4FF6AA7ECDC76DB123FF03F90E85
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4987822.1592401250!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?........5...f.S.).p...........[....9.]..mV.......;\.=..W..v7...-......=...."..?c_.+..;}>.WEg*.v`;V....V...x..0s.\..z.8]_9Q.k.4....g..V5.vWF...=. .O...;.....O..K..+.i..W6.E?+..?.z..t..G[..8-.S$.........W...u..U...`a:....6.I+"....yk..P.df~+..5.Q.T".....TN.2..>.......;v..t.....<7....I.S....G.d.l%k....(.H.............\|...]R.b.z....B..Jz..55....+.5...8......4Y

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageIJKC3R15.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	134545
Entropy (8bit):	7.9617077903427615
Encrypted:	false
SSDEEP:	3072:IC49w2sta1WO4EMW3VC3C68ssZKAeIxinEy0KRD0lmDr:Iu2f1x4FW3VPDssZKL5DcmX
MD5:	70324E76D35104C0A329079D7F6175B4
SHA1:	9FA266967C93A05C2C57D215B6EB63FF233C07B1
SHA-256:	9FA652F4B940FA4C721306882B715648C497D208C3E658AF642FB8763D6C8FC0
SHA-512:	6A6EBB3EDCF56F2863312C71FFB684B19CC4BC8A83C40E4F19069380A03861EF50CC4E2CC670A9BF2B521D5C4E316A07DCFF839416B0A73266137EBEDC49CF32
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5326912.1614399657!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....Ly.q.q......H...d8..<...]U.C.....\7....~...^....yJ8....N3.}9.U..V.~.....vrZ. .6..\.......^.d...gs.8..f.+.R.J......>...F....b..>..u.b!(\.p....C..9RK.U.........jCibA&C.)..9...=M......A>.....5...~@...8..G.\|.+.;.p.W].:.....6.m.z}.?#\=.,.R.B.<d...O.[........'...J.o"..R....~#.=@.o...=.$...y..5e.N[.j.....k..E....J........&...,....>kc...9...y........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageIWZELI1I.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	163213
Entropy (8bit):	7.961071201745295
Encrypted:	false
SSDEEP:	3072:o6dWYOyeWguMxsh+oMJNoLkUHw49zxMt33BshJxm3ntqR:o6UYOyAioG4UQqMtnmLxm3kR
MD5:	D09A60C929D715CB6C8D21E9E430EAF9
SHA1:	A9344E919171E4E90ADC9CE4EB3BF009D6AA84A4
SHA-256:	052D47F4B2B7ADD26B2B051C1A760224F6FFE9601EF1B9C0AB568245376BF6ED
SHA-512:	D3FE45090D3697F2B6865CFB091D048C9E03959E401A3D02701B90D5FADA4295BBFFA5C7589437DAF0E5821FA9D069E026F819C09911685B357B148959FAFB60
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5351578.1616021618!/httpImage/image.jpeg_gen/derivatives/landscape_800/image.jpeg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..E-".q...t.;p1R.Z./....l.fp...LW.\|...S..5.Dy85.}..s.......N?*.H.j-=.T.{.o.}........{.i?..9.r=V.j..B..s>V{5<..Et.a#.#......9..e#Od.9..$.Zel.hs.`. Uqj.8...Ob.\J.#g.qZ..$q........[..lH.>.2WD.Qm.'.u..[pA..0..Kmbx...mEf..........0..V....ZB.A....$...=.q.....&@.`+..+~X..=.CYW....[SZ.....&.~.W;q..c....kV98>.V<.[.H..i.X\..k.y.N=...'...._.%..R+....r3....+ r=9...oB2z.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageJNKZEP75.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	10016
Entropy (8bit):	7.910567050502731
Encrypted:	false
SSDEEP:	192:R/9Ziwabp6vC4TvaUq/CzO6iHUPto12OsxXOPlRw1s6VgZCwH75qm4V:R/iwabp8WnsO38JERPkwH75qrV
MD5:	C863BC919543318FEBEDB99F4366E1AA
SHA1:	414F06C59F38DBE11A8BCF0F30A4CBF32A69DE99
SHA-256:	8DE5371C86A11E15F3DD18A3BA6299B9876BB81C5B270D52AD0E644DD3C59FC8
SHA-512:	707BFF072AE406AC2645170934135042552AB29F0F6FFB93985FAEE71F927768076775BC84A736AADB91657C46AE8FAB5370CCB193E47E3C9F81670640427DCE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352789.1616093051!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..D.......\|e.......?.>..'...~.x.W..ZX.f.......H.)..F@y.A..I...........O.Z.h.]3A.:]...5......2..LY..6.08`.........Q..h......&.}.....2F.E....T.a...A.=.hj9.v.%P.s.......8."X.K.$.....M.x....Nq.b.\|g..f....G.....m.?..\|1....\|4...Q.A.......%Rn.3$Sh......7G...H...^q'..;O.r.P...o....K.M.[F.c.....}+P.......E..Y.\|....*.y....\|S.V....n...[mkL.b.U...4....A...?$....#..hH.y.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageJRH8KWXP.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x84, frames 3
Category:	downloaded
Size (bytes):	9423
Entropy (8bit):	7.90592687968638
Encrypted:	false
SSDEEP:	192:RacG9fwiWR6TnkmS90Ue22xxQfkVGUqpJGfKhug6jAsXS7O:RacG9f0RLmS90UeMkVzwoU9A2O
MD5:	0AD467878305C8D381EF87BB92FBC3A5
SHA1:	3A62768E940841621B2FE290EC10D7C034F1C941
SHA-256:	BD5037097731BF8749937FEE72F6BCAFCD45635F672A8AA6A181F61A4E59BB03
SHA-512:	F0DA0E70BD354CA894A9825117D3CE94D6090D3EC4E0FEEBBDB44D88DC97409A41F60A200EE85254A560B70B332023F775E591B30011277E3486299953F50030
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5329309.1614641307!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................T...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.]...C.G..\|....5u.k.....<..%...Eo.__Y..ow..~o3...u%...W......kW.......U:v........j.c"..Xv$`.'n..;....%...s...f...g..xw..>&x'Y.>2.....kW.e.....L..C5..Ew..i$9...zi.}..eo.YZ.....#.....R.{.y.s..V..........Mh..[...9.u....._.....b.K.WZt.;/..SM.........e..}pf..C..Y.%...m.....U.m.1........].a..r..'.u.d.mn.d..v............i5.vQ[$.>e.".{J.\|.....Kl:.R.....=.@...y.U.X.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageK8RJ25ET.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	9615
Entropy (8bit):	7.926075171853679
Encrypted:	false
SSDEEP:	192:UiVjQSQw+/+R5pAapzITIGc1amzDQpQi1vZ/y7Ad8q:UiVjVDM+RnAaFITItamzkCivZq7Ad9
MD5:	7BD972E7A4C6BBC4481EB78CA6E58D58
SHA1:	ADF730D7E5D5194434D4C5639CD10E1AE503F17C
SHA-256:	866447B08F17C7111BF3A6BF4B764320199DC4BE7BC5BE2635E0EA48CDBF3349
SHA-512:	C84C8D153A9693E0A1B40936290AA2B1309937CBC9D81D63669C9261219A1FA46063266A9008B5E03CE854FCB87B7B8FF6C4966B6943BF91076797E9CB8B823F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352935.1616099218!/httpImage/image.jpeg_gen/derivatives/landscape_135/image.jpeg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.....x.g>..G...?.S.../Lg........~.6.......@?........._..q.X..W.~.,.v..~8i....]c.A1...l......s.......G..5....."Z.6.q..h.....y(=......=...!..n:....XK.]k.........?..>...X....ds..!.s.\|;.b.......K.............r...M.q....16...G...}..+..b);r/..mwR..j~9....u...x8.M.5P...g..V.O..'.W.Z..6J.g...c...j...$.I.....D..7.<..p.kI\|....s.)=O...?.._..0xz..?...?..[h..mo.<u.n

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageKDFLT2LQ.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	102004
Entropy (8bit):	7.970769775933429
Encrypted:	false
SSDEEP:	3072:QFq16reiNZwuRNUb0dBi3Xeqjll6ZzJMkrB:QFi6rpWsdBqOq/MrB
MD5:	A8D5FE147BEAE04E5513BF3DA23B3DF7
SHA1:	68A60B131B67129C9EA5679D200B31A33F00CF77
SHA-256:	9116669056D55FC7FBA4C8639009F8EFC08D6C90016518B74196CBAA97EE73CF
SHA-512:	61142CE4CF42409179F91854A37F59D11D26FA92EF06E59C24663DE8926AF87B8AB70CCBC14C2FD6C2C0BCDB1C63B01D1F5380BB116B2FD50F0C6087CA490D8F
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5351228.1616010455!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...Zb.8.c....].....n..Trx..Rd......y2...c@:\|.0...!e.y.'..9.....X..N.s..AGR}..rL..prG^).0E(..$.#.Z..q@.g...~.<.Z.s.n)T...dcr.j.e...'.k:27......=y...!+.8Z..-..I...*R..\|...qU1.~...I.}M&.c.j..10J.@....G#.T..{...Z+xB..r....\.......pO.J...R..@..t..Q..N....S.oP...0n3...~.XHCg.s....f....3R.$..E...T.;`S\|...n....y...Nr{b..;G. ...S.!..2......1.L8#<.v.E..8.=I......A....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageLTEO7PA9.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	7685
Entropy (8bit):	7.903160696702273
Encrypted:	false
SSDEEP:	192:UAGz4gAMW4Jpz73g2Yu+QkrDbQWiXrM1TX7c5FEMUErbbdRc:UtzrAF47z73g2nUrDbQXXeTrdMUErbfc
MD5:	E3A0517925CD7776E1579CA6C705E29F
SHA1:	5C2C9D76C4302AD8A27873CF5619DF0F01115D1D
SHA-256:	F10BB1EC32BEA8545D20AD019E4F61BE5E743960E6CFE815671A42E0C4077E7C
SHA-512:	F5AFC993A1F88ADD4088C913F91DA6BB3437492612C8E8AA5DA08AAF20E667CD393E772B607DC57E73E7B73CE2AF4914AACB8C5E9012107B18800ED5F230A370
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5258189.1610062886!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..#.R0?,..B0..g.V<`3zd.u.".?....b~..........wJ.T.h{....U\.q..wP*..../\.Oz.!.K.y.[v.9mU.........VK.=.rO...<;....^>.-.q......R]6..X.hH.#.!Nx-........<.."..~'......P..4;..+.3...2.1a....P.....N4k.s.wQ.m[M..........Z..j[..-'}...%....b..~...C....!...../..k/.\|3.&...z....%.h{.....eNN.o...mI.6x.U........j.g.....,..n...'.=v.....O.%.....?.B...........-..#y.).kM....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageMCLZPFHS.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 135x76, frames 3
Category:	downloaded
Size (bytes):	7078
Entropy (8bit):	7.9203856460262365
Encrypted:	false
SSDEEP:	192:UUIijNrDrYGcijmhlAqkpd4sF2xmS1BJWUGhuf4A0YDt2xz2u4v:UUIijN3sxPbSdNE71BJWUG4f762uS
MD5:	9CC962A9243033FC483B3A63487EAD87
SHA1:	EB944209DF4E4992EB80B6AC123C5EA7AD416335
SHA-256:	04F57A44B9C570D83E6FA5A5FAD76387ABCAB6969A74BB3FE414F107EFF379DA
SHA-512:	1A116AF7DDDDE9BDF9AB775813D1BDCA2013F51A853BB59CF393B9F15020A40148F8B4D8AB50E0B3C23616D2B53288671FF85A48B9CC8A9C3ECA5C9FC4DBEEB6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4670199.1615578558!/httpImage/image.jpg_gen/derivatives/landscape_135/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................L...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..]..o....w.W.zw....CF.....".DK.?0@^H.p.#...W..hu.kX4.6..y.yp.[..N:...VuhB...w?>...V.-4.....#..t...s.....KZ...;T..M.R..T{.B(B\#..q.A....}....>.}g.s}.J.N\|..8...?:.?...\|M..?.$.%..g....q,[!X...+''z....,y...x...0..U6...........n2.e.[.(FZ.ov.....OT.~.....o,RX..x...y"......F2.PGj......-.[h.i..)'.2.X.5.....bIgka.x.@.-t..t.n.......;.9..d.O5.....,.Y/..A.........C#

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageOL3X7PWD.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 150x85, frames 3
Category:	downloaded
Size (bytes):	8018
Entropy (8bit):	7.924172249821029
Encrypted:	false
SSDEEP:	192:Ul1lkPZXhScX6l6rcCXQX+9gY10a8lTOAiiIJP7:U3i3HMcgO8BZ+D
MD5:	AA230E519FDCF797DF26AAFA9CC9CCC1
SHA1:	FFA7C853DBF0A88F2BDB75921DA36610D4BFA604
SHA-256:	41733388F0AAE17C33D685E2C14C2411FDB1F429C13DA34F8CD3857AF688ABB3
SHA-512:	07B458538B8504849DFF91F0DB366A65E51751A191AD5E3E83ABA2BE5A5FBE8EBEC6C382891D98A4D9DB8869906A88F9BB515934362D297546588546173564F7
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5277016.1611269269!/httpImage/image.jpg_gen/derivatives/landscape_150/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................U...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....n.@.......1. .l.i...)..x....<#....B..eHg.f.O.Ua..<.O\I.]7..W.h...0.......Wdh.H..cBNk.8.,.k...T.jE..^i.4}.Q.U...W.&.NI..zy.i.<.T......V....m....H......n...p..Q........$.Q..o.$.g...4M.K.o...YR4bW...A'...I~..Z.{koiau+..."9..+;..i..s....f..N....J......@.../.8......q..n.ZUR........=V..K.....qo..l.U..*T.Q......i9]..-....o........C.......q..a..Kxb+.>R.....=k....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imagePNQ7RVNI.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	128675
Entropy (8bit):	7.961958647010596
Encrypted:	false
SSDEEP:	3072:7RZV/eoRJT+kWy+hh8/L1ofxBjqCUle+vmsKqvcgSW:7teofPH/L1e/qCrkiW
MD5:	0D54AF4BD9AB8DBF40E5BAE1C88DD374
SHA1:	2E251F475CA16B8D8F4629001A27B88B50AB828F
SHA-256:	21D1033864AFDDF24415B75BEA6B419648CEE604D88EC18400171DAD77F1BB3E
SHA-512:	F94A330823D0ED44E2DC4404E084652C1AE32304755F7164961B01BEB55F013851A9F8BC6B3CF285A9B35AD13EADA02BD180C72F0496CAFB6B69D1123F62E02C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352503.1616083591!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..0\|;.....F. ..F;.8.d.c.h...s...p......o...Y.....o.#.)..7AV....<..r...NE.z...y.F}>..R.....W9q.?..aL....?$#..Vtp..c.....Z.D@.0....(....wa......]....`..Z.[.Um!1..q...f.[..[.i%..\...G...fl..C.Eq..R[}....8$/.Acu.\4..$..y....^....7K.9P[..3.L.G...Y..;A.k..*2...8..~........m[....#..jO6-J....k.>i....,...Wn.h....M....rm.;.a@...e..7X...c_F 3i....l.o..y..!..=...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageQKN6SDNV.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x449, frames 3
Category:	downloaded
Size (bytes):	162372
Entropy (8bit):	7.969365914069342
Encrypted:	false
SSDEEP:	3072:N65CXqSpcaJ4/YdeXb3mR0ZBtxvZm+WFut7hTJm16GHYS:U5CXNHJe4cZvphiut7JJmUGHYS
MD5:	9A276B3E82E2E69ACBA45A8801C6F9D1
SHA1:	EA0F85673F73F1482FBA3B3321C5666AF80F9E14
SHA-256:	1B02215670FEDD439D2BFFE4837A325BEC09306E2B721E01768DD2ABDBE4E8C9
SHA-512:	58493BEAF0E3237CA10EA7715B7E476F88F6B7C4DD9D4A1D9918185F4314D52980C0BACB9263085F13F6939AE4811FC9D10B83E6BF602462E9A94D31EDFE9F96
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5345551.1615592013!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..r.B..$..>.P...W.].l.W1....A.z..q.r....&p...c2....FI.#...+.9].....BK...p.....(?ux...p.yGt..UP.8...ye/..."...,..../.....f..{....$....[. Vf..b.v?.+..Y...dy3"..c...S..5...I/.#...Ufu....Af......Z.b.....,s.,sy)....e<.Fx.J`..P,.w.dP:..k~...N.Wa.D..GN:..qn.o.m!.cP.;eH....Kf.2..H..P...=...@...Vi.P...]w.....C.&i..}...V?..b..H...c..d`.<..r\.0n.8..B....<..=..~.L

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageRHS3050R.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x349, frames 3
Category:	downloaded
Size (bytes):	72709
Entropy (8bit):	7.965112767883951
Encrypted:	false
SSDEEP:	1536:rfuuSpnLQ6n7egOkCowqMPkuETpsCsUCoiTOnOjfyqWbQ6alhkb40+wfo9pT:DuuSp0u7WkC4MPkLTpsCsrovOmbQ6Q2c
MD5:	4DF8F707F158E9DF2DE92BEA6E1D173F
SHA1:	5485C2F9BF3DE9EB579B777551E6E7BF62585FDC
SHA-256:	A57B0EFF04C998C16F02D7CE5CBCC3F71FEBF23D2BCBB749E17DBD4D2755F878
SHA-512:	335DD1038289B71D9427825F27C4DA70310967B2ECA257DEB78DCA52E9F1326053BD1E75454CDD1FFFC25523713A998BAFA4B75657E42B0609ABDDCC66DB231D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.1174352.1612035015!/httpImage/image.jpg_gen/derivatives/landscape_620/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................].l.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....A.v.....i_[..b.....x.c.=.ZR0:...3+;...}.E].T....$..ges.q.../4..4.........m.Y.X.X.x_..Z......;.W..._..1.=..I....:...\_..Z..B>f..}+.x.G.Gon.... d{.>..C.i.B)......v0=....~5.M.i...U. .+.k.8...~^...T0.L.........)!..5.j:.`.......&..N..B...I...W.I%.#*}8.ha.N..U..r.{.A.0.....Vb9...\|s.Eh..Ur..8.>.."g.Go.?'.... .`..,.RO<...z..'8.b~.?.5........F.@.G\|W.h

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageRNVNVF1X.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	14490
Entropy (8bit):	7.930697898760991
Encrypted:	false
SSDEEP:	384:3G4uk4zoHEjF/I0lx6xTHCYJGlHAYNqfYeOtiLs1W6O:3fuPzoHEC0lcxTt0l1NFevsvO
MD5:	EAD6C48A09D8252B7EF6E2B262B4A700
SHA1:	891D4EE508F6DA71272B01971D79395F315CB291
SHA-256:	C56A672F46A60BB14F9BB8B63FD17FC258AE2ABB13149F5CF0F9FECEA59F5D2D
SHA-512:	50271C7C42CAD1A10659FC40A716182AC8B1D8E4E613430D4E98B58C5051C4FA1A7A8E9A9E51CF9E61868D90E37D7655491469D47A3891DB071FE2DDDC821618
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4799558.1580972570!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...>.\|..\|.s>......X...]....Hd.i.,.#.l3...2..U_2......S[...u......~"\|,.&..-.T.I..`Y..+.Tpx .A. .En.....71.$A..q....53......#.\|B.....~..chw#..^....p.w).L...R.&.8..\|@.....+H.y-..L........[../..~Y...?G...Q....!.+./.....[.^..M...2.X...$....F...R.v"..?h...'...p....Z.........y?{.i1...34?...>. ....]..dSH..;t.k....LK..b7+..ExP._.V.\|.R..8.z........ .2....c..4....P...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageTA7GURMI.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	288629
Entropy (8bit):	7.943293126459941
Encrypted:	false
SSDEEP:	6144:bKCjeNw5AAFQEiYBpviUmh1zd3E2qTxOAt84FW2+QapAEzoO1mpjGl:bbAAF5ilhHEBgAGcW1OEJ1mjs
MD5:	1E381B37367D158B99A1A5B9AC4E0446
SHA1:	D3E81426C0F23D60FC56A878C10675B221700380
SHA-256:	5D9B7CCDD63E7258ACBE2834025258B4D64C99667EDDB04BBD350508859485BB
SHA-512:	25C5AB84AAB8E9ABA3239A5C5197359556FD0FF7D08CA6FB1FDAB0C6FB6C21C5D91201B7C4C80A509916B9CDA6386C8DAE6BDB230008BF33BF45DAD84DE2C509
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5346395.1615677084!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.. ....X.....zf.....$zn..o.\.ocf.[....a$.1a.`..../...sJ..xv.OV.W.u...+.<.[./b...,....('..~.\|U...k...~.\.N.F...i.m=e..i...Z.".X....i.v.q..j..../..\|4...[..^...~...b...e.Y....1.-LR...q.I$.T.#$m....\O.p...*<..M(.4.R..d.M.......U...n.[-..?.<s.<\|n.n.c...\|......X[...,..I%.%.'Hn.JC..T.........k....... ../...V9......w.o...._.....W..Bo.[S.=..d..Bw1...9'..<d..\|...m.x

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageV10LF0V9.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	122626
Entropy (8bit):	7.975055525432252
Encrypted:	false
SSDEEP:	3072:fnq6ZC+t7tNrikzI8QefkPDKeuqCQUnGyl6yPz9kBY:xZz7tlik8eCufQ+JZhGY
MD5:	7AEF8B94C180356AEBD479BAAA4B709F
SHA1:	A1A12C9DCBB2700923DF72424DB6C5F68E3FA25A
SHA-256:	CA8F07978D4FE4FE2BF8231D2D2FA7227F107D4790B7BDD8F7BB01219C546C86
SHA-512:	D481AF5A394F028A41872B3593D841083CC1FA8084C978082799EF52346A8DD9F2E3DA2F6665091CC9FDD78AFAFDA9F5654DD14C22598435026527D4A06EBA4A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352900.1616097553!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....U.A..J..OZ.._....;.'...W.zV.p.........x.....BU......h..]IlyJ.5.9O.~.........0..I<.;\|Wo..s$.Q.1.d..M~..V...G$bVt.3_.....<.y=..$V,.s...~...a.%N...V...}.\|.......s...%.%...v..\|Ak....ot3.L.....(M*.T.~P....=..9T....^....;m.-..A..l......g..EE.A^.g.\[.I.....T.....$.%w]..........:-....\E;#,............"...3..)....{4+...r. .).rk.#...S.k.....5........}.....p.+'...E...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\imageYINBQHOL.jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 190x106, frames 3
Category:	downloaded
Size (bytes):	17338
Entropy (8bit):	7.924300257222329
Encrypted:	false
SSDEEP:	384:3JgrPob358DG2k0U7MgbCdUBmKWT95PXh/odQ5c2xJmkU:3mrPob358DGwU4hdSWT7dYIa
MD5:	DFB23E8EB9352EB84A7B50C89F01739C
SHA1:	072B54F2861AE06076757DD2B1D0EDFD67E0164D
SHA-256:	D0B7A0CA906A658A506393F8E0C7A2D79FEA4ABD9D9E26B6173C60D6DF83DF66
SHA-512:	DECF2AB88E28A2DCEAA15A95B0B030974D6B211F61F2B0BBC871F545E100A027CDBC4EA1842E2C86A5D6A2D4F2EECD596F3594DF6E3615549232D50227C56E9A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4837867.1583295891!/httpImage/image.jpg_gen/derivatives/box_190/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................j...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..F<..G.G..:.j...C^.!...D...^X.X..yY.l.~....Z.h...Z.v.....,#....7r..1.-;;.G.....5.....]....."q...?.}..\k........\D.X..Z..j0[p..N+..T..mbE......F.4..).J^...O.!..x+O.w...q^.q+.4.o..rc..T........w...t_......g..=..M{ikkm?..#.9',.A....Z_..9.......sQO.$.N.U.~..K.Y..:..Ns^.~-...L.......~........I...t...Po,D`1.v..8.i.Uk.iY........b....;.Z.9Nn*...=.5.Zo.m.m.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[10].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x449, frames 3
Category:	downloaded
Size (bytes):	155950
Entropy (8bit):	7.971513123104347
Encrypted:	false
SSDEEP:	3072:khERz9d5YmO/b+8nJQTtlF6IZ3Ql0IgIEx8cd0GqZLgB5eq0eWmpoHrnLts1mj:khk9AmONnJ0vF3ZZ5xrdxqpg2+p8rnKe
MD5:	68812E09452712D14496BFE1699BD327
SHA1:	4DF7AAE8B415C327DD6D2A4E265461CBA698722E
SHA-256:	D4E5D59350360F91EFA0C00F6D57714047F26647C0455DE5B45B970729065F70
SHA-512:	802B106E80F495DF2D47859BA763637515F7F8F6BD470E0E7E92085FADB5B310FDC05465DD40FFCFD20C609E91BF4E5C75B7B312637A1B71810F72AF9E48F414
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353652.1616133940!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...@.vFq.&...@....s.$V...v.A^.....b...p.z..........i.!J\|.O..j.i.a....\|..D$u%_..._,(..n..r...........$2.....G.e`......s..V.D..[..[.}.M..FO..3e....Xrzd..0F... ....V..kn.....;g........._v+.h.wkS..U._i.....^....q......;rz...7/.ZO.w.<Q....jo..l.1N..=X..5....kfca..".uG.H.._..q.v_.~.?.\|7r.D.w.ub..(.!}!M..........S...z........G..\.V....\|....n.......{7..g.....A

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[10].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 190 x 106, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4694
Entropy (8bit):	7.9256171496189225
Encrypted:	false
SSDEEP:	96:wQkKsJONxg2Mn4uB5s/nek+JQ7/Qm4qLZdoYXgN:wQk8bMn4un0enWDoR
MD5:	87733705EC9CD8CF8FE693840466F5FA
SHA1:	42855D380C97DA9A503422EAFD1470BD6A2DE7A1
SHA-256:	5DF259B6B504DDCCFA1AF1D13B20198062B2804AF203E592173446F6E5234453
SHA-512:	B99CCF1B1C34756BEC350AC50C8F8B73EEB11102C855597E5B14D8E5F8E427DC05CAAB516FAECCEF11E7E8754B10F986EA35CB7B1244A9734ABE5E3E2A1108E1
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353278.1616108247!/httpImage/image.png_gen/derivatives/box_190/image.png
Preview:	.PNG........IHDR.......j............IDATx...#7........V..j...2.U.....n.......e..e....{..L&...&.$.IV6........g...%"...u.h.V..w...G.-......e.Q).....u.U.y../R\..v.R..9..H....T.G..)2..)....E.....`..}.v.h."WZ.n.jmmu./^.X555.+.......:::..+u..hT..g....}M...\.z.!.2.{(.R.6lPk.U.....$.o....v..p,.WWW..;v$.....[o.{..2.....-S.....[z{{U{{..7..p.ic~[.t..l.V.J.j.../_..m...1.n..s.}.....H..`..`k.Qc.Q?....{..j........i./........^{.......~.o..........:u..m.>f..j......Z.>..Sj.....>..s.7P\|..'j..j.....f.O?..o>e5...$.;\|.p]./..B..>........?..W_}......]y.9S..7.X.B..9R}..7......6......>}.>.._......Qo....lv.....g...........~....kkks...U.\|..~h.......Sg.-......@.n.7...>...hu.........w.I....@..{.9....D....k......./...y....U.....2..w.....$6.hi:3.......h.m..(9b..W^t..:g..N.O.....>P.p.U?....?......m..~....}.D..:...."]..>P..2D...hwn.Z..1c..p..>.........w.U........?.8./Y.D....t.d..A...a..4e....\|7f.Q.4.....1..7..\|L..6 SV..5Y....'\k..ZAP~..0..(7..v}.....h..s.^...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x449, frames 3
Category:	downloaded
Size (bytes):	209154
Entropy (8bit):	7.9455650464917005
Encrypted:	false
SSDEEP:	6144:ErHoz4oNs63W8sosoE3dmIxqM0gv/yd49Y+aO:8HozltsRoE3dzx9Y/O
MD5:	3EFE0F30C4B455F2A34673C77CB0A0CD
SHA1:	AB0CE7B068AC82A344656E763A6B1E89DD7FC544
SHA-256:	1AD9CC5138E2FF27C1517DAADB4425A72AECDE57DE69822C2ADDAC7666DCA87F
SHA-512:	5AF428180A11788B210334DC3BFE20112129C0D955843C799638CD782905A8BBA64A246CF6A2632E8B465E05C07D8663BB0BD76C67AD05C908520E57C6168F46
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5352771.1616092229!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..[ee.d.......=..5.ip.ae6.........................q.q.`.H.c.....'...:.2}1._.m+..n/m..?."o.....p..E4`.........._B\.......@.....G.I*.~..#.X[....1.06.zq.....5.+nA$.).......8..&K..`%\|......O...\...DW....s.N........t........-..Cw..q..e.#.r........e..MGOki8S........:.~~'A...O..Q...u8..1..2.I.b...0u..d\|..U.O.MA.W.....~7.c.m.^.............`K..E~..7.l...D.V.....^.^.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 800 x 450, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	535417
Entropy (8bit):	7.995942937794043
Encrypted:	true
SSDEEP:	12288:Zx9FMZloiJS2znaJUu8Lyt/lbLXpmHtL9Aq1ardgWyrqKfiV:Zx9FMnosS2hrLiZmPxaryWGdiV
MD5:	B8123A4ED888F00F43D98825639972C8
SHA1:	45BECCC019A4DBEC8E50E13D29D7062F6B822232
SHA-256:	F37063A203EBDA3E3B999C374560C4BDAF554269544090698C5C77950D7AC48F
SHA-512:	6ABA90214CECABEFCC3B92F214338A472FE3C83AA5A877AC76461CA1AC6769C4B8461B20F0C8C11D7F60C3A3F5231E02CDF25B671C402B3962DB67034D275ACA
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5350904.1615999369!/httpImage/image.png_gen/derivatives/landscape_800/image.png
Preview:	.PNG........IHDR... ...........:.....IDATx.....u..?.>..H...9W.....s...@...@.`."EZ.%Y.l..W...#...,......{@.............Z.z.s..b...b..'..8..........O.q2...q..z.mDA..'.N..D=.x...6NF.....e~..1...)=.mI...(....+.v8...}ZH.Q#z..hZ.!...c0....Y....."..i.........r..Z....~..c....h..0......~L.t.a."7...(t.....f.M....\|...cz.....!.mC..g.G....E.xm.....(.#.K.E(......j..#.o.,....n.a2..$...#.Z...>..:.>..I.$.h${.....7e0.....p8.G.6../..xa.`.....C._[.A..W.V.].........I..G;.."...(.)...]..\|....G....8.K.=..R8...{.......n..mPt..v....[.Z.]m5..V.n..J.Q.h.K.z.^+.kE.k....J.Z)..Z%[+..\../.3..\...T../....9.<....o...>..m.f.g2[.3.>7...s...0?.\|6.Bv.n...Sl......\.+.............d._..e.~..6?.%.y!..J&..<.f)...........n..s....\n[>7...N..\|n+...-..^d!....P...,K.E..X...t.....[..J.,.-c{...r....B.vN.HQ.....J.T...j.P..h}.....ok.r.^..i..i.7...f...yw..z.].t..n........t...M..].s\|...n.....\.H....~............W>...8..>..p.......\|\|..1.......O..R.....<....\|..G=....!V..:.x

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[2].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x449, frames 3
Category:	downloaded
Size (bytes):	223405
Entropy (8bit):	7.951882640320981
Encrypted:	false
SSDEEP:	6144:xwSiXmaMnvUHEItAUYNkn8HqF8KaNGYuk:QmTsHEI6Nk8oraEq
MD5:	8A2F8C13CFC11BD763A1B25B6744C49F
SHA1:	2B53A1700305AA4C6EE8C9AB6F80FCFAD8DCC548
SHA-256:	CE95BEDAA49CBDA06BCDC4851438A71E7EE4D4E9F746F7CCA6C2574483A078B7
SHA-512:	FC4DE3C4F38638A0DCFD7FCB53ABA5E92AFC51B17B61ACF247F5D4DC47E0BFCE491AC785F2D5F6B08887E4B25ACE298747CE0134C21DDE88070AAA63AAEE39A3
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5350197.1615945327!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......9..O.2 .i._.wa.;..i....t..F../...ZMK.......k./.<c<.......Z..k.^{6..j....o........c..#.....ujI[O....._\|z....7.1.#.f...b...:..H...\.....'.d...../.L.....M#nb.q3.....8..,I.A....Ns...]Vo..$.........o...B5j-t.....2~...=..7..O..+.X..M.......}..R~..u....).G6.$dw......e...9....\|....g..Hs..3.,....`....oY-................F.<g.6..].V.......rIr`o$E...@.+..._.O...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[2].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 692 x 387, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	370172
Entropy (8bit):	7.973984645868713
Encrypted:	false
SSDEEP:	6144:k82tRtZfr2si2ken4JdzD9hNzrMvE2e4n6iu3DuQ6AcwVALGN2E3IVjSJ73vYWxT:kVtRvv5bo9hNzwle4yDu1LGejS9QWxlV
MD5:	98102C6582A15A08FEBBB887EA1FBDF9
SHA1:	D571814D688BC06EC7777038E476D7F52D9A0110
SHA-256:	C66ADCD3AA322D1870404D3045641C34E16F458451AD6ADBCF5251B0785A11B4
SHA-512:	46492C7571B587D09961903984CDAF907610FC4C266B2F616B3F4DB9DDFCD88FF54CF8BD28EA18959BA90DE12A454B918B8E7A394D1F5DFB8FF0270D8897973E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4783916.1580052167!/httpImage/image.png_gen/derivatives/landscape_800/image.png
Preview:	.PNG........IHDR...............R....IDATx...w...g...b43.2....13.B33c...8.)..>.}.w....w.3...{...J`;..X?<.J...e.SS.7._E.a.>....o~8.{...]..\|?S.7L.....S..y...UD..g..P...........T.......4.F..DFA.....[...o.}C.J`$L..Z=buz...H6...m.=...S.q.....-....'........;..G......W...=...W&.4.[.....u_..5....%..+..j<.....<..R_#^.5ae....n..z.1...D.^O..-b.}.#x5...N0. ..tm...)/.[.1..:.1....p...;C.yC......f\|!\|7.3s..._.o.....f....yO(s.l../6g.}0....z.i.^.......o.\xG..~..k.....h.I.T..XZ<R.Z.kU.h..U.EEA.........!!........Qo!....k..?......?....5....X.)D\|.u....O......\.........>D...UXh..B....Sn......;.$. A....%V.....z ...xk$.t.2..:.[.....H..F..l^r....qjO.*Hb[./`...#.X....\z.._]._6..................'.{.q....u.q...n.+p.S.;.J.m...........\|../.Ib.H2G.l....L..lLx......2.$.u..$...=.I+...!q&.....t3.g.~^..og$.....B;......u....S.N.8.F'.>...d.....xO.2.z$h........N.T...a.......B....~..F\|.e......j.6.q4t.....~...@OR.'.5FH..$.t_....Id.:$..H....kA^R<..pn.>j.@Gm9.;}.?9.......w..W..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[3].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	163169
Entropy (8bit):	7.959346607977419
Encrypted:	false
SSDEEP:	3072:U5W5db97YIcrgFYatXLS4nRBgDolP2WriaKyK6femHlF4R1FLdvqZ+P:IAfpcrg6KjRyDyP/KN6ffHm1hdV
MD5:	8D28133848013622F7BA4C23CBB046E5
SHA1:	4768977991AFF7FC20D1971FEE3043C38D58C2F0
SHA-256:	0D9C4C358DAC1D3C3AC26F0876F002DF4EE3388D7DE90D280D8247F801C908FA
SHA-512:	D7AA2A616D9ED99FBBAAEA069D14442CB2A579DB6394EDF732A302B4DF25699B4B88CDABECF4EB380BF47B64BA84B7B914368CDBC20F7B8C881C308B36B75F8E
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5337103.1615092605!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..Y.q3@...s#...._....i..........`@..}O.....sy'..>J.......ya....b...!V.)...rA9..y.z....NI....k.<.W..."!B..;..../.].%...8..]..O.pF......../YX,JB..'nI.OS....4m\|G2..Df$yRr2s........{9r.9..,..a.L.U...pr.......].Ys.\..3.HJ...`.~.....h...f.B......O... ..d.^...]...?>....N!.H...z...5.]7E.......s"[K..#.,i.......:.3...j...l..F..$/"...Fs.}3_......f....v.$...[.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[3].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 150 x 84, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	26404
Entropy (8bit):	7.959134658501502
Encrypted:	false
SSDEEP:	768:VWZ/9PNl+tqVC5cKxnP9U1FwMfMoh0+1Auk:m9etaC5cu+1Fw+zY
MD5:	CC9FCAE2A7C47D4D119B310037A549EB
SHA1:	7C7BB4BF89E630D0CAA397646BAED580EABBFE09
SHA-256:	5EABDABCC7C32F0F736A98665BBA363D84DA13C8517A82EB973DE575A442AE93
SHA-512:	BA77B9FB3DD6D168568FECDDA5BCA2D193E48C6AB53B8D4FEDBA25E152BC5F6CE83795344B72DF84D708CF6257601DF4456DB98527031D627A462269AF8A9D55
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5200978.1606156807!/httpImage/image.png_gen/derivatives/landscape_150/image.png
Preview:	.PNG........IHDR.......T.....`!.]..f.IDATx...xUU..-.^n.%777.M..-@......D)J."...(.`.T.. .::.:..........}..Q,..\|..~k.....f...Y.9.....].^{.}N.f....C.;.~.`. .-i(...P..UD..=.......LG] ..l....{,.qx9....(.Y.....[$.9........Z.y.9y.r`..Bf...d.(.8%...X.r.<;D.z._.S.(.%t^D..k1z\J..X].+R.-e.\.]..c.[.N.W.c.f.p....zM%.=...u.:..lP.r...!t.QE`$N....p.....U..y....`....t....W.....szmp4N...........(.9.f+..t...}m.1...Ynz.....=..[...]...y.wr5....~..p..v.......?.......`y..4.+M...+.".t.)&1....4.._?..44.....@.7.!...C .P.V......?,..p.?.".>#W...X.9v...S..`1D.TVP]..8,.......R..+.?X.l..$.,...0....(h...X.....r4'...K..P.X#. ....Q.......vh...Q@...h..V......A.k...C~N....v3.-Ix.......Z....?...~......Qp1X.<..+V.M......'AgM...$..D2...D.C.e..".R.V..P&x.A.~@E.6.5......g.i...,..........=.Q%...<z.........~`....5X....Z....j..).....M`.d...V......"`.UJ!_.V.C}..6.&&E.j..K....B.X...Z.\|..h...4......c4.C.X..~...z.....R.e....H.ZyM..7.....T.AU.S.H..@...0.0...2..l..!.J.3...)...?.uy^..M....+...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[4].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	158137
Entropy (8bit):	7.9522044217305226
Encrypted:	false
SSDEEP:	3072:mwAU7c6D1dlqVsE6B843nHBBsPGgMEmfczFVsde7LQ1roj2:mwAEc6DE2EI3nhK+gBpVQeLQ1roj2
MD5:	0F66AE62FD87EF8DD50D118732749257
SHA1:	77FDACDF365F83BFCEC149186B8D0DCB18547249
SHA-256:	B3257A5303176F5F627B82568110859DB20767772C1B42998E0EE1A66529B0F9
SHA-512:	478920BA0CB666315487BF39B29B2C0A90E066A409E70C27D1497E99E24D0DDDC0D5F99D730499299B37B00415E0E0C79AF5E0660510E121744C4F500604B037
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5054732.1596766151!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?...0GP.......0'......^........P.{.....z.BW....)s"V.cF..gkd.8....9..).F0.........3.u...=.1...3Q..#8..}.w.T..^..o"`."C.....Ri...u.b...........#.....s.V.$. .'F.]X.@e..l....c..d..l3e.n.n.<....n8J.>...{..e..e..z.@...5.V.I...:...1....O.....&...u.. ..K.....5bnI.Z.#6p[$).q...m9#...ql..T.@.M .......Zz.......;>.....d.g.[e.@$.j..RrK)#5..(...MH...sK[+F,.m....?

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[4].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 135 x 76, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	26111
Entropy (8bit):	7.980584175767141
Encrypted:	false
SSDEEP:	768:hH3dQdla0eOYApvPsDhB6vY7M6V5E+lIU:13GdlapZAmh0vY7xC+6U
MD5:	9A3A864669FCFA79452E6E72988AA2D2
SHA1:	5C97321B9A5B0BB0C67F14ADF025C1F6D858E2C5
SHA-256:	C6DA8D3EBC95218FBA6B6D2A3E6F1B700AFB88DA94462D717B1A45E05F71A8E4
SHA-512:	877FD113383548C2AD2320670A2C781732F073D54D8E938428B57FE6897CFFD32EC69A33E05C6E230E9B8B112790BE6B5FCABDDA5B92B7659A721E03D16722CD
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5010981.1595793416!/httpImage/image.png_gen/derivatives/landscape_135/image.png
Preview:	.PNG........IHDR.......L.....G.}..e.IDATx.d..f.U.Y..L.DG.h.toU..\|.............JSUY...{u...$..B.#$.B@...a..V.......b..f.o..f.j....1{.g=.Y..7.Z..%}#N..v`6..2..!.[...8.>q....x....'....6.M\....!....M.%.....W.%N.C\|Q.D.!.a.lXr....qc.J\....B)&.b.kq.&...:..v..-#...9=.gwJ?6....-....~.zF.....~.y8.s.O?..m...6...Z....sM.g...~...]..m7..\..}.....W8(.h@...d....Y.w-f,..J:...Z..\|..Q..c.].s..=_..6".\.\'..1v1IsN..l.n..z.,....#..L.m....!........2..4_.#^....s.=..#..=.......2p...;.bc.....'......L...K.g....#%.%....D1"I,Q..K.C..$.m.j!..W.R..Ha4y...2[..&....h(.......2.s..':yV...-..M.......].qh{..Rg.~.t......@...z.....nk...u...j...!X..HH.....T...5...^.F.i.b.FZ...4..i.ii..,s,sf..v..X^.....f.s..mY...v. .N.e...c-..c.Yo.....r~..c5.FVF......sR...5R...@.A.F.WF.X....0..q....bDvi4).Z.e\.1,....R....H..8./..@.....f_.e...`...$..e..@.Z.53..2`.\|.\|XB..b>q..n0.h.X@.!.u.n.4c........E.Y.8....%..`..xca......27..&.<D.7......`:"q..JB....e..~..qp...."%........F.pV..6[.8Z..L[..Ng.n

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[5].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	152439
Entropy (8bit):	7.9635203933817
Encrypted:	false
SSDEEP:	3072:yne7zszkoIaY7/UcDafAJfaPTMukz3Tqe72YcXf:+OAzGaYDXDafAJfab2q82LXf
MD5:	E88D7F888EEB807D082AA205E81AC11F
SHA1:	5DEE2D19064E358417F4A73CD6D8F915D8027D3E
SHA-256:	056C4980C0DA02F009534D38AB3ED56B22B643F85876E41C14DDD49E954EFA4C
SHA-512:	C380064297B7CB31444FCA06CDEA793805D67D95A6380FF11D7FE3C2C1A82500CCCBE7A88C07B8190C92BCD8F84CE16A6E74FC1BFB7F74B44B1270E5EEC7A489
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4129667.1539264370!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?......G,.gK....V.U`B..<...hj...H8.....-kT..W.:v...?.#.......1W#q.8..Pg'..8...........(......!+!.+......1.H..U....I<...U=..<...Z%..-D..'..#....Q..!.._..7.p2;q..).0.@].....C.a.=F?.z.H.........$.(..sO(I.=q.........8..J..B.}.wqS.....O.[.! .`*..=O......1.[..@'.w.....@...T...(.?.h..n.w0a...M.....g....&.=:`.#...<{.T............Q.cw.ynjx.O..2I..(.,w\|..;Ui.Pj.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[5].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 88 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2352
Entropy (8bit):	7.886334324020654
Encrypted:	false
SSDEEP:	48:6E0GBEgQ0MomNKedD9P6Ug9HvaqYB8T9MO5GZY21mnktRj59hAxzp4CnToq1+:6E0GBI0XmNKedDhVNqYB8T93UZokzNb1
MD5:	14F38FE553342B393BDD8ADCB5104E81
SHA1:	25B8DD32E349AD69CE33E77508E9DC97C1F75AD6
SHA-256:	052D02F57EB13725085FA7C265526D7A988F57C84A272BBE07C2DFFE721EE8C2
SHA-512:	A895FB1FC0169F187D9CB2AEBC7A80D21DA5FF5B5B591DB769DD7363352F53C2573046136A6808A6C9C9476F7AE783DF4338A920E43F8574C5215C8C8A0631BF
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4264165!/httpImage/image.png
Preview:	.PNG........IHDR...X...$......u......IDATh..m......O.....rx.F......'......./.....E...J,......."rA.F.+.`.JL..!..FE.........x....;.......$..\|........t...n(...J...J...J..%~^n?.TA......c`.p.`.V.>Pe5.%.c.f.~..#fA...Q.@H..^..!..w.........mG....""....p.%_,.h<&.9?...e.M.>.a..X.#E.+.#l...BX.V.....h%..&.....E....3c...z5.....<.A.t..zP;.{.d5......:,>&..1u.k..._.,.....U.........<G./...Q.....n+.`..R@../s.<..'.>Q.u.jcx...!.d..Y...p....sF...$kg.h.K,P.....8_..@..........W...]@h.$..H ..s...Y....PNy.C..].K.N...r.l........u`;..K .r.X........B...V?5..I^R.8...........$.$)7......x....w.9.v..mb~.........SVd..../.....R.(. ..Oh.tH&...@&..1..Uc.......[.D..(..Il\|../75m..a'..'..s.`......(.l..]..Z..aS..l...IVm.F..n..W.xn.p+.$..h...`..6..P.1`&..M..A.R&.#..}./......+..-rW-.i..-.'=...6.L..'.F..yD..Hb..8Y..........\.N.0.}......P..f..&...ku.qf..W.......g.......]..yq.K...n^i[.\..&.#.F.\|>.../gB./X..'.....X..8..'!_>X.+.......>.\..$gN.>..0.N..u..o...~}.b....m.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[6].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 620x348, frames 3
Category:	downloaded
Size (bytes):	114739
Entropy (8bit):	7.928689990381106
Encrypted:	false
SSDEEP:	3072:rwhkrWdyh15s0/6KxmjPmGUg0+K3lyPkL:KcWd015X/6KwPmN8PkL
MD5:	E198D12E0B3470681D44E03B9BE5FC1B
SHA1:	A9148AD867B02AC56818C13602906E31854023FE
SHA-256:	B8943967EFABD1096C1A94702BD20DE1E12756651E0A85C9E17E2F44F69243FF
SHA-512:	7219D8748369B5435F926E98A53F9D0239225DB8F1394AC8BCDD2175C24CB4ACA3B67CE8D935BCE8B5A33E768CB8DF18AAF63FC7CD57D32EE8D43EB72D7CFCAD
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.2891786.1462571419!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................\.l.."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?....N.z.%..R..Ei.v?..).....'W..\|..I.1....O..;Z,...=i.......E9+.<...# ...^......E...G....y.c.Z.`.4..L.M*...J{.t.6.....<DSd...Gj....U}...S6.SO. S..?.B......w.....A;..'.t5q.+.M..h....jb..#..:DA$/...I'...S.{.s.........QF..+B.K..0Cqv....r.kz...%...E..~.y.....pt..5...ta..f!.9J.i..g .TdsL;....../..0.e.p!.n......m>._..{....p..u.V.......a.3../J.z.x...L.#.1....8#..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[6].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 88 x 36, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2756
Entropy (8bit):	7.902481123545963
Encrypted:	false
SSDEEP:	48:+dzD6UtbtgB40mAGuTtAmlJW8hPNjC6ahY1IHUTQVeUtA8eKYCXmHs:C3tpg20iUtz4YNjgCkTy1CXmHs
MD5:	F6D64966ABD60FD4F7338B431211F9D3
SHA1:	98B8B11844FF4EAD7A0AD9DFAD891F1973C67DBE
SHA-256:	A8AA243B8A1B1D349571B14DA93032EEDC8D9BE9A520AD8F0FACF82CFFCE60BA
SHA-512:	270E15CAB5455FFFCD728534A650220F74D190C47DAEA4CD38BC02DCB723609919EA5BA306BB1F966A41844C04C3F482A07F7841E341D11C884FF5B6C6293BF5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4264174!/httpImage/image.png
Preview:	.PNG........IHDR...X...$......u......IDATh..y.T.......a..D.d..E.vP.5.!.D.L...FP.B.(........Qk..D$..hD...$%.l.* ..@..f..{zy.....g......W...}w;...=....d.A..d.A..d.A..0$.J......W..U........(..x......f...OB...A(!..........v.Wg.pS.C....V(..}.[Y.N.M..PU.2...x..ly.]...;S..=M.J....[.R.l.V!...m..s......9:.wG..2L..H.^...N.]"<.T.....ko.......al=.RI....>- Xz.y.-......A.%...^..#Uq.MY.....kxPUj<r.........6Y.k...UH4u.)Ue....%.p..I.`.M(...]..0.l.K]....Wm....=.;...-A..q ...._cy.mc...A.L..b.&..A.....j....6.....G.h.#..l........Z.."....t..{.{UQUZ.K._.'M..........UnV.AxG......x......."..`...\|qe.B...V.w...l.........j.u`+TE.4 ..,..w.....?...k...y.....{q.....W...TY!....bg...T.).v.....r'./.....z.......P..#.%.c@.Y.T`..9.SQ>q%...,..x..../.g,...$...v.h...............;..f..3=B;..;.....78f.o;....B..@. .-..uv..U....r.2...DBy....EG.....db......e..._.@PB..`.%S..7...n..(Y.....KO"a.+..P..L.R.D..2...p....;..B.."T..pk"..^...I..Suy{.n......""...3.7d.x.qU.........x..0.c0.A.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[7].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x450, frames 3
Category:	downloaded
Size (bytes):	91330
Entropy (8bit):	7.968310294333875
Encrypted:	false
SSDEEP:	1536:LavaR+MTXRb4Ydc7cA8s0s4HQzrCcOfWH3oAOnAmA9QESRklh3WEzT9P971L9M2J:LhX54YOr8s0GKcVX/OAJSaO2J97D/B
MD5:	A6018F90230E3A4380345571F594191D
SHA1:	CFE8B4C4969469EC8788FDDF8E5250032B524DBA
SHA-256:	054ACFA35B97C4802C6C6F9D6BFAC54503F1DFB7734B2DA7F65766A6DDE8582B
SHA-512:	34AECBEB661549190BEA9B79E36EBADE6A6C8C60D530C34062248C7A2226AF2ECD743738749F1FA8C364DF9D95CD4EF8B196087786E429C93E8D3D63D67D62E9
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5348128.1615897096!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..m.8b...j.1....8._w...~.}k2L...I..j.B.ZW?Yj.U...p.?.....pv..Eo^......j.......4....i;..2.Xrx.k..v.....i.....J.....N+..S.~...e8l.q.eJ.d...y.X..v...01..C6T......r.......O.Z...d..+&.pz.c.V.y.!.......i...2ZE+..q].........5.i.;..p3....p..^....w..w7..n...Z.EeBp..=H..e-.}......v.\RRoC.6.0.0....ps.q.....O........._a\}...#l...0k\=.3..bp..l..H..=[5....^i..2eO..=..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[7].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 60 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2847
Entropy (8bit):	7.901208188674761
Encrypted:	false
SSDEEP:	48:8Wn0zDRftGNFf7Fc+KqEV1WQ6KUKuJKwWtlRtNXUFE6hcXy+s5LzXxPBA9h4N:8vEnf7W9qEVn3tlb3SJ5/hPBA/e
MD5:	51B4831E3168AFDD25D5291BEB12C4EE
SHA1:	E6CDD8F499F27A57CFD633CBFA3D59E219715986
SHA-256:	EBC09D2D6610002BDF36DB60A83FEBE368A6E75D176416E1E7DFA2796329F76D
SHA-512:	C07CA91734DFE25693CF99CDBD8C4FE2C7592E6722B61F7C8F5AB2FBFF74EAB8E50879BAFC9F68F3ED0ABA7B544DE9CD39DF8BFEE66A9DDE8ADF9CC25F06D291
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/7.726389!/httpImage/image.png
Preview:	.PNG........IHDR...<.........p.}O....IDATX..yp....?..^..$...i$.1UD.AZE.,......EF.Uk.........`AET..P.X..((....$.....k..^.o...k6....?..d.}........{.(h.n<{..... .zf_.~.n.r....2a....{...fO.."...&.$;.@...}..`..r.T...QCS4.....!#.....t..+.e......(...s0.7.R..............\|..M:.\|...]..m.........`S.5....7.m.t.{.uss.9.n@7uTEEA!d..g...i0.l.b..x.f..W.g4'.z.0.t...X....~....mm.<..]..._.hjZ......,.U.Q..5.F]....2.......!.Z..4...f.L}.x..C.j^:....9.. ...g......sj...Z...:....:..,....X].&.P.1......x......../..#.@Ai.7..GM........z0Mx~..W...@........S[.+.X0.~..i..i.}...T..J..Xq.8.)q.x....{....!...m.p...;..Oh.&..f"_}.o.d".7..2".....<lP......O..V.w....o#.O.{.n=...kj;j...AZ.6...0..T..{......U...'......fyn?4..r...AQU....YgV.S.1\|>.T3....4....... .)m......0\|....'.._...=......dN.O...._d..J<..C...(........ZV.......1.1.................z..FG...`....mM[...a-....[x...=h..w(.Pl.b.....(.@4.Yw....B;..I...u.....N<s.]{-.3.X....h@.....i.4bX....,.<....D!pf.........

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[8].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x449, frames 3
Category:	downloaded
Size (bytes):	201412
Entropy (8bit):	7.9547995967227
Encrypted:	false
SSDEEP:	6144:m2TDP7khHn4Kh/+g734SpqVPPrstZE2NHUBPcjmRrRtQSK8:mWDPohYKr34ScVr8vNHiXRPe8
MD5:	A01057275EEC6941F75D0C54D153398C
SHA1:	D97341E09B7845723E9FF2C16C8DC0613827BD64
SHA-256:	DCD72C5A2ACE8ACE2BE7A81B6C0E5DCBEBFDAD76AB1CA8B4F2EF8A366A6A813D
SHA-512:	33B4650267E2A8F441AC03ECCAE9F79C58448BF8A647A14F45002F82FC3B28C423BEB352683B1D85C1FC93F68D7E73E480E86C5B46321CC9BB3C007E8DF633D5
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5353552.1616120929!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..K.O.O.,F....\|E...w.)..O...u/.G...Z%...l.H..F.&.....:..z.l...+v.....^)..y...........;S....u..6..h.c0.n.t...H'...\>....~......i.n.{..........;......i.lL.{..'5.k......5j.V.h...-Z.../#..)`..@3...FNI...?....{W.#.:.~..MS.....J./.9..W.>$\|....~..R.....K9...,76...<I&.yZ`\|..l l1..`..~......\|m....C.i.m+.....M~kk.YW..k.i.+..).w........~....j.{..ca..S.C{....k4............&.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[8].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 970 x 123, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	166959
Entropy (8bit):	7.996299037973394
Encrypted:	true
SSDEEP:	3072:UO2im3nG7n6C+e23sISYcCXeTR25cN3GkTVx2seI9TnJb2Di:UOFF7n6C+e292AQxGk/eaTJb2+
MD5:	01A326A105FB2F11F1512E51CCE72811
SHA1:	7A4494E63C20460281D1B7232380C6D59C477028
SHA-256:	74E4AE4E56691B9F3DE4926AF358A9F5DACF071C965225C35C15E644C77C7407
SHA-512:	2F7FBEAC8D0FCA8A62E51DA1564E4DA5FD8E431EE6EB55B41618D13150ADDFA631EDF5E4EA1DBCF538F492C64BE76D97E637ED37C86ED751A9ED45F6CD4D1497
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/polopoly_fs/7.740367!/httpImage/image.png
Preview:	.PNG........IHDR.......{.......yy.. .IDATx..i.%.u.v2....._..L...e..XH...E.D....^h.AI..#....(.l9DGX.[..tHVP.$...`..A.$.r.bf..f.Y{zz.o.[U.#3.... .R.d."...}....u.=..s..m...6...\|..j.[_..h........N)......@9.B.........+.9X.7.Pj...:...Z...@A+...5`.g....t...h....C9h.\|.........Z....1....{8...9..~..@..T....Y.g.?y8..1.........N...S)....>H...........0.._..,...).....;Ua...r....s.............R.>..P4.....S.k........N.t..1..........RH.....r.3....{.c............U LB......9f.x8...ga....=...+4.r.6....\|.a^.t..3.A...5..G>.<u<...x..A.S..38s.L<1...xl:.z.T...C..C<.'..s..)....j.8..._..t.:........;.X....3..p>...6..../\...M..R...\..._.+....1H.m....-.w.23.......s....m.S...4qd.2{..\|\...ri.\|.N....Z....d......>.. ...#.....~?.~:.....<_]...c..?./Z...'.L.g..s/...%.>..Gzn.uR.{.t..4........5.....m....o.5.x.m.s..^.Sw._[......+PZ.u....[....1...0<......,.`P.vc........<...T....N.a..6,..B....51.i.........<C..4jDp....wQi.P.5P.s.........1.#..!.`.k......@....Y.C.8....k.\.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[9].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x451, frames 3
Category:	downloaded
Size (bytes):	230791
Entropy (8bit):	7.95857793373347
Encrypted:	false
SSDEEP:	6144:7xSNmKyWWsPVw408254RxZSmvVGSdOIurDEDxls:7t/WVPVw40l4R+whdOqG
MD5:	344C5047DF8926465C376E186EF0172F
SHA1:	9C63769986AD17F539FEFE5DF9E9A9B8D073E8D1
SHA-256:	B33026AA379EAE398FC058BFA30FD2D72C13CBB4565628FBDBAE2CB416A82A80
SHA-512:	A855CA6739FB9CD2B98C6C42DFA6A9C1FEABE3C06E1C15C6488163ED31DA4244AA27850197BBB764140D874F54A3DB8801780E75D313DE28025B85CC6ED9C7B6
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.5200373.1616109211!/httpImage/image.jpg_gen/derivatives/landscape_800/image.jpg
Preview:	......JFIF.............C....................................................................C......................................................................... .."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?.......5.......V..s.B.....}..._.n.2#x.U.`WnD...?8G._...M.O....5.T..s...q.A.p.~J+..U.S.M...._...N..._.={T..y\|..#.c............Yyk..;...N.7.X[..8.u..j#....F.M.x.....H..{....?<....S.}..#..O............g.[.\|k..!...W...O...{.._?....}??..._....h?...k....\.../...j...K(.f.....M}....d.k...R......A"F.$X.r...*..K.R.....0#..[.v.....1......k...t..7./....ao...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\image[9].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 800 x 450, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	434989
Entropy (8bit):	7.980558598620497
Encrypted:	false
SSDEEP:	12288:bmenyxpCoNX+6TnRNL8MI6L+umScFu/p6PNEWxpVzlLbihgHZo2:aQ67T8MxzcFu/kVEWxpZxbrHa2
MD5:	C97F5AEB9330B9D7EB071BD52975572B
SHA1:	AB86033C7103DAB739CBE877E409D4422DA690D6
SHA-256:	75A70471725E37E8BD3475F909108D5DB042FCC8F8F7B78C89CFF91D4DF2375E
SHA-512:	957009399115B3F8A4E40048D667E8AB2BC61DAEAB8B4A7EF71F01541487F25C3ECAB479AF78F6A13EBEA44A4CDD78C664E25A75AEF20850306045DA85C62977
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/polopoly_fs/1.4893910.1586795726!/httpImage/image.png_gen/derivatives/landscape_800/image.png
Preview:	.PNG........IHDR... ..........c......IDATx..w..F..[YE..o.wvv.N.$z+...r...\|{y.(.H...".;z.R......}v..by..q.8.D ..R.{f.8.2....@V...y....FhG.._.._\v"j...S...j..F.?....b.m..%...].K...4.~..F.......}....-.7z.K.o..V.`.....A...Q.....}.h{.S...,...Gm../.m.vF..m..XF.6c.W.6....M..m.....6.9..d..m./.e..k.5.../.......}.[.\|.?..?..Rl.2...K..<..<..[...g.us......6:.....e.W&......M4......3Z...f}.a.)e...Cm..Q_P..m.ie..yz?................s..Z....b...S..lz]...F.-.k...:Y.c.'Q...c.Z-.j..m.\|..F....al[yQ[e1\|....P,}...v.j..E..&_.ur..Y.}....mI..V...z.'M.=I..'..O..x..{&}_.9x...kSK....\|.){h.......B...lAl[.X..V..y.........~/.....s...s>\|]..m...l..p]A.....k........)~?....$.x=i.g.a9.l..A............,o..v.]T..G-.z?.<[.nT[...n.m.[.F[.m.s/\..{......k2........Ls..R...^?.e...+.7...^ot.2n...=.2.W.s..:...Z.u^....i......m..v.....\|.o._...l....Uh../....1.W......}r...kK....x.m...&9.....>l...O. .`....@..L["..E..K.B..!..bn.M_Eo.iN.a...........Vcmu6.\.^7....6..[..^.....lc%.F...c.U..Xz..=......d

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\info_48[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	4113
Entropy (8bit):	7.9370830126943375
Encrypted:	false
SSDEEP:	96:WNTJL8szf79M8FUjE39KJoUUuJPnvmKacs6Uq7qDMj1XPL:WNrzFoQSJPnvzs6rL
MD5:	5565250FCC163AA3A79F0B746416CE69
SHA1:	B97CC66471FCDEE07D0EE36C7FB03F342C231F8F
SHA-256:	51129C6C98A82EA491F89857C31146ECEC14C4AF184517450A7A20C699C84859
SHA-512:	E60EA153B0FECE4D311769391D3B763B14B9A140105A36A13DAD23C2906735EAAB9092236DEB8C68EF078E8864D6E288BEF7EF1731C1E9F1AD9B0170B95AC134
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.../...0.......#.....IDATx^...pUU..{....KB........!....F......jp.Q.......Vg.F..m.Q....{...,m.@.56D...&$d!.<..}....s..K9.....{............[./<..T..I.I..JR)).9.k.N.%.E.W^}....Po..............X..;.=.P......./...+...9./..s.....9..\|........7v.`..V.....-^.$S[[[......K..z......3..3....5 ...0.."/n/.c...&.{.ht..?....A..I{.n.....\|....t......N}..%.v...:.E..i....`....a.k.mg.LX..fcFU.fO-..YEfd.}...~."......}l$....^.re..'^X..}.?.^U.G..... .30...X......f[.l0.P`..KC...[..[..6....~..i..Q.\|;x..T ..........s.5...n+.0..;...H#.2..#.M..m[^3x&E.Ya..\K..{[..M..g...yf0..~....M.]7..ZZZ:..a.O.G64]....9..l[..a....N,,.h......5...f.y...}...BX{.G^...?.c.......s^..P.(..G...t.0.:.X.DCs.....]vf...py).........x..>-..Be.a...G...Y!...z...g.{....d.s.o.....%.x......R.W.....Z.b,....!..6Ub....U.qY(/v..m.a...4.`Qr\.E.G..a)..t..e.j.W........C<.1.....c..l1w....]3%....tR;.,..3..-.NW.5...t..H..h..D..b......M....)B..2J...)..o..m..M.t....wn./....+Wv....xkg....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\info_48[2] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 47 x 48, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4113
Entropy (8bit):	7.9370830126943375
Encrypted:	false
SSDEEP:	96:WNTJL8szf79M8FUjE39KJoUUuJPnvmKacs6Uq7qDMj1XPL:WNrzFoQSJPnvzs6rL
MD5:	5565250FCC163AA3A79F0B746416CE69
SHA1:	B97CC66471FCDEE07D0EE36C7FB03F342C231F8F
SHA-256:	51129C6C98A82EA491F89857C31146ECEC14C4AF184517450A7A20C699C84859
SHA-512:	E60EA153B0FECE4D311769391D3B763B14B9A140105A36A13DAD23C2906735EAAB9092236DEB8C68EF078E8864D6E288BEF7EF1731C1E9F1AD9B0170B95AC134
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/info_48.png
Preview:	.PNG........IHDR.../...0.......#.....IDATx^...pUU..{....KB........!....F......jp.Q.......Vg.F..m.Q....{...,m.@.56D...&$d!.<..}....s..K9.....{............[./<..T..I.I..JR)).9.k.N.%.E.W^}....Po..............X..;.=.P......./...+...9./..s.....9..\|........7v.`..V.....-^.$S[[[......K..z......3..3....5 ...0.."/n/.c...&.{.ht..?....A..I{.n.....\|....t......N}..%.v...:.E..i....`....a.k.mg.LX..fcFU.fO-..YEfd.}...~."......}l$....^.re..'^X..}.?.^U.G..... .30...X......f[.l0.P`..KC...[..[..6....~..i..Q.\|;x..T ..........s.5...n+.0..;...H#.2..#.M..m[^3x&E.Ya..\K..{[..M..g...yf0..~....M.]7..ZZZ:..a.O.G64]....9..l[..a....N,,.h......5...f.y...}...BX{.G^...?.c.......s^..P.(..G...t.0.:.X.DCs.....]vf...py).........x..>-..Be.a...G...Y!...z...g.{....d.s.o.....%.x......R.W.....Z.b,....!..6Ub....U.qY(/v..m.a...4.`Qr\.E.G..a)..t..e.j.W........C<.1.....c..l1w....]3%....tR;.,..3..-.NW.5...t..H..h..D..b......M....)B..2J...)..o..m..M.t....wn./....+Wv....xkg....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\init[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	4558
Entropy (8bit):	4.7605396129611135
Encrypted:	false
SSDEEP:	96:SXYemahaq7x6ayQBwYYzWAaQAtzaCYicYDR55aYYWMYPAY7DYo8/YTv5ptDYRzVm:SoaYEw6Z
MD5:	E3218B7A268AFA4C69AA0C287BAE583C
SHA1:	A89AACE8A123050ADD97A217B48153D438870DCA
SHA-256:	0F7D7EBFD1DE792854B1C5F6C734E23ACA243A004CDFB68E3569F392118C3BA8
SHA-512:	EEA8E4C2F7948C0F557F789A3668B9DC0AFC9449E8A7C3AC014E09BA4A7A47646CFD146CA6ACA11ACAB7292201CB3E62DD44BC47722D82F12053F25DD299F663
Malicious:	false
Reputation:	low
Preview:	aisresponse({"grouped_idps": [], "_type": "chooser", "authenticated": false, "possible_idps": {"urn:rogers:com:idp:prod": {"url": "", "logos": {"full": "http://bdugraphics.bellmedia.ca/rogers.png"}, "display_name": "Rogers", "name": "rogers"}, "urn:massillon:com:ccsa:idp:ccsatuc010:prod": {"url": "", "logos": {"full": ""}, "display_name": "Tuckersmith Communications", "name": "ccsatuc010"}, "urn:shaw:ca:idp:prod": {"url": "http://www.shaw.ca/", "logos": {"full": ""}, "display_name": "Shaw", "name": "Shaw"}, "urn:mts:ca:idp:prod": {"url": "", "logos": {"full": "http://tmngo-http.astral.edgesuite.net/ais/logo_mts.png"}, "display_name": "MTS", "name": "mts"}, "urn:cogeco:com:idp:saml:prod": {"url": "", "logos": {"full": ""}, "display_name": "Cogeco", "name": "cogeco"}, "urn:idp:clearcable:net:idp:st:prod": {"url": "", "logos": {"full": "http://tmngo-http.astral.edgesuite.net/ais/logo_start.tv.png"}, "display_name": "Start.TV", "name": "Clearcable"}, "urn:mts:ca:idp:staging": {"url": "", "

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\jquery.bxslider.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	50573
Entropy (8bit):	4.951740560735263
Encrypted:	false
SSDEEP:	768:WX6/gdowzCxV/QKl/oR//hm2dKZ5os7LzpVECNWmSqCivU7SOj:G6OowOx1l/L2dy5oMnfNWVqCivA
MD5:	B257E0969014ADF4D5836B545FD6CCFC
SHA1:	738B4DA885A7C17ABC896F2EF682A186FCFE07BB
SHA-256:	BDDBBA35635904ECA1D7F9EDC74BDBCBA04EC0F5A16286FDBD8F78FB0F7E0C6F
SHA-512:	0EAF824D4A2DD6A487778E2723D68C30B11904A33F55F2846476DC6234F5C0D52247C0BD906B9DB8E4530487FD6988CD3D6660FC2FCC4168CA6350B78FF91D1B
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/jquery.bxslider.min.js
Preview:	/*. BxSlider v4.1.2 - Fully loaded, responsive content slider. * http://bxslider.com. . Copyright 2014, Steven Wanderski - http://stevenwanderski.com - http://bxcreative.com. * Written while drinking Belgian ales and listening to jazz. . Released under the MIT license - http://opensource.org/licenses/MIT. */..;(function($){...var plugin = {};...var defaults = {....// GENERAL...mode: 'horizontal',...slideSelector: '',...infiniteLoop: true,...hideControlOnEnd: false,...speed: 500,...easing: null,...slideMargin: 0,...startSlide: 0,...randomStart: false,...captions: false,...ticker: false,...tickerHover: false,...adaptiveHeight: false,...adaptiveHeightSpeed: 500,...video: false,...useCSS: true,...preloadImages: 'visible',...responsive: true,...slideZIndex: 50,...wrapperClass: 'bx-wrapper',....// TOUCH...touchEnabled: true,...swipeThreshold: 50,...oneToOneTouch: true,...preventDefaultSwipeX: true,...preventDefaultSwipeY: false,....// PAGER...pager: true,...pagerType: 'full',...page

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\jquery.validate-1.12.0.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	20806
Entropy (8bit):	5.279939920727372
Encrypted:	false
SSDEEP:	384:QUprrB+Jx64b7alHUdS2L7AZ8hsSzN/tllEny+xzgX9N3tCwV/vyxMLgsqntUdAV:T+Jx6rlHUdS2gZfE/1Eny+xyaxMkRntZ
MD5:	D7C953A9036EF06A14E5F225D1CD0AE6
SHA1:	CBB570E080C44C019287989BF0A89B5E669FE42C
SHA-256:	80D9DF6A033C91C176960AF80250168863680188E01DBDCA5B7C53256E5AD769
SHA-512:	873160F644EFA219B5BAC9871046A3D9AB626E6DB6D6329554ED1D2F6DB20DB8FBB69B79BBC75671FB8CDA9E765FAD0028FE1E0844CF67A5D0F67EEDF38E8F0E
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/js/jquery.validate-1.12.0.min.js
Preview:	/! jQuery Validation Plugin - v1.12.0 - 4/1/2014. http://jqueryvalidation.org/. * Copyright (c) 2014 J.rn Zaefferer; Licensed MIT */.!function(a){a.extend(a.fn,{validate:function(b){if(!this.length)return void(b&&b.debug&&window.console&&console.warn("Nothing selected, can't validate, returning nothing."));var c=a.data(this[0],"validator");return c?c:(this.attr("novalidate","novalidate"),c=new a.validator(b,this[0]),a.data(this[0],"validator",c),c.settings.onsubmit&&(this.validateDelegate(":submit","click",function(b){c.settings.submitHandler&&(c.submitButton=b.target),a(b.target).hasClass("cancel")&&(c.cancelSubmit=!0),void 0!==a(b.target).attr("formnovalidate")&&(c.cancelSubmit=!0)}),this.submit(function(b){function d(){var d;return c.settings.submitHandler?(c.submitButton&&(d=a("<input type='hidden'/>").attr("name",c.submitButton.name).val(a(c.submitButton).val()).appendTo(c.currentForm)),c.settings.submitHandler.call(c,c.currentForm,b),c.submitButton&&d.remove(),!1):!0}return c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\key-reg[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 25 x 14, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1352
Entropy (8bit):	6.546847038071199
Encrypted:	false
SSDEEP:	24:n1he91WwylZ82lYSqMHiaTmAVZJIT3GyJ3VvTepeG+awm+WC1xcW7tamA1:1qQinNuipANIhJ357S/U1xZ4X
MD5:	E0FE60A5889DC1F5FB7CF3744F591656
SHA1:	BDB6B4875F6AC9F7ADD212B8131E4359A66E9272
SHA-256:	781C1ED83F363791EA20B59E16FB6372A4E434A9DE8EB77F80438547FCB03D8C
SHA-512:	E47F9B5CB2BE58AE1DED77F7E32ADFDD2412EABEA0BF9AEDF0536C03AC93970262F41FCFB1989032D5A2FC7B5E3FC76A389A6648020EBA32513B127082528F02
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/key-reg.png
Preview:	.PNG........IHDR..............:.@....tEXtSoftware.Adobe ImageReadyq.e<....iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="http://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="uuid:FDBA8EA504EAE0118ACED039322E0D38" xmpMM:DocumentID="xmp.did:5A21ED84036511E3A99C9218C4D760C3" xmpMM:InstanceID="xmp.iid:5A21ED83036511E3A99C9218C4D760C3" xmp:CreatorTool="Adobe Photoshop CS5.1 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CA6322622C0BE3118E639B1EC07677B2" stRef:documentID="uuid:FDBA8EA504EAE0118ACED039322E0D38"/> </rdf:Description> </rdf:RDF> </x:xmpmeta

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\launch-EN8508e1965b004de29de2dbd977d7156a.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	352491
Entropy (8bit):	5.365806458744456
Encrypted:	false
SSDEEP:	6144:mFSJwF3gFmWjD+tlBIwOXkdUsbdBkdUmTlWsdM:pA3gFmWjDSlTksbdBkamTlWsdM
MD5:	E29D77A8EC1A6D735B9EB26A6CFF808D
SHA1:	FAB761191C4D313C2A6A3DBCDB7644CAC9E492D8
SHA-256:	B324515D91DC14401794248A4C9C4602E16A99B53711A3CB053D37E4345CC20F
SHA-512:	474C9D9DE141C7A629DAC4498AEE72F901D52000780229F4F26B71CAC57FE0578507D994AAF31406CCB2FF141CD08ACE54DDC7623D14246DD2BA446019A0A88C
Malicious:	false
Reputation:	low
IE Cache URL:	https://assets.adobedtm.com/launch-EN8508e1965b004de29de2dbd977d7156a.min.js
Preview:	// For license information, see `https://assets.adobedtm.com/launch-EN8508e1965b004de29de2dbd977d7156a.js`..window._satellite=window._satellite\|\|{},window._satellite.container={buildInfo:{minified:!0,buildDate:"2021-03-15T17:32:40Z",environment:"production",turbineBuildDate:"2021-02-01T22:48:08Z",turbineVersion:"27.1.0"},dataElements:{sitePreviouslyAuthenticated:{defaultValue:"",cleanText:!0,modulePath:"core/src/lib/dataElements/javascriptVariable.js",settings:{path:"digitalData.user.sitePreviouslyAuthenticated"}},originalSiteAuthenticated:{defaultValue:"",cleanText:!0,modulePath:"core/src/lib/dataElements/javascriptVariable.js",settings:{path:"digitalData.user.originalSiteAuthenticated"}},subsection5:{defaultValue:"",cleanText:!0,modulePath:"core/src/lib/dataElements/javascriptVariable.js",settings:{path:"digitalData.page.subsection5"}},productName:{defaultValue:"",cleanText:!0,modulePath:"core/src/lib/dataElements/javascriptVariable.js",settings:{path:"digitalData.page.productName"}}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\mainnavigation-separator[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 2 x 34
Category:	downloaded
Size (bytes):	51
Entropy (8bit):	3.9957630869846947
Encrypted:	false
SSDEEP:	3:C0yJ/llnvhpCwdE:6MwdE
MD5:	28210EB8226F287A89602B1486D27B42
SHA1:	0C4FD6A211E6D81BC28564EFEBD634D96918BE26
SHA-256:	991435B5A157A342AFFD0DF59ADC550ABDE33EB2AF82FD5A9F03975A3FB155B7
SHA-512:	83A66C99D542C33166C23202BC100DFB378A6A96AE32B5892743D3F96C6F4B91F7EA32E6CD4B88CB41F4E0CA0305A6B4B6377FC78F51DE4537615DCB86CE772B
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/img/mainnavigation-separator.gif
Preview:	GIF89a.."..........!.......,......"....D..........;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\moatframe[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1705
Entropy (8bit):	5.531860359366191
Encrypted:	false
SSDEEP:	48:V+SiCucuqiTlBgaavwmpbDDRlsSEpvJEBrcm:8FJqQMZvJcSEty
MD5:	DD1A19CB8D13E4571D2B293C0A0D2CCF
SHA1:	18070DD5C894930A8AEF7117BF8D49BD4922A723
SHA-256:	05090F9390F5BC0CD23FE5F432037CC92D7CBCE1CED9BFE8FAF3D1C9ABAE85CD
SHA-512:	9103CA5B7E85BA307A366134146D9505A6CA8722878629678F680B790108AB9DE31ACEDCCA36AC79EC989194BEA55C2C08CD14A08CD0BC67841D16C115D4FCB2
Malicious:	false
Reputation:	low
IE Cache URL:	https://z.moatads.com/addthismoatframe568911941483/moatframe.js
Preview:	/Copyright (c) 2011, 2019, Oracle and/or its affiliates. All rights reserved./.(function(){try{var l=function(b){var a=!0;try{b.domain}catch(f){a=!1}return a},r=function(b){return b.replace(/:/g,"%3A").replace(/=/g,"%3D").replace(/,/g,"%2C")},q=function(b){try{var a;var f=b.data;if("string"!==typeof f)a=!1;else{var c=f.match(new RegExp("([a-z]+)"+d+"([a-z0-9.-]+)"+d+"([0-9]+)"+d+"([a-z]+)"+d+"([0-9]+)"+d+"(.+)","i"));a=c&&7===c.length&&c[1]===m&&c[2]===n&&-1!==c[6].indexOf("check")?!0:!1}if(a){var p;var h=window.top&&window.top.location&&window.top.location.href;p=h&&("string"!==.typeof h?0:/^(?:https?:\/\/)?[^.:\/]+(?:\.[^.:\/]+)/.test(h))?h:!1;if(p){var t,e=window.top.location.hostname.replace("www.","")+window.top.location.pathname;"string"===typeof e&&"/"===e.charAt(e.length-1)&&(e=e.substr(0,e.length-1));if(t=e){var g=JSON.stringify({available:!1,fullUrl:r(p),cleanUrl:r(t),urlSrc:5}),g=g.replace(/"(\w+)"\s*:/g,"$1:"),l=b.data.split(d),q=[m,n,k,u,l[4]\|\|k+1,g].join(d);b.source.pos

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\moatheader[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	209672
Entropy (8bit):	5.5651727869519645
Encrypted:	false
SSDEEP:	1536:PQ9SxdlaPvQIaMuP7PZTtLkSp4z2L5Wc/5MSIAbzUe8X1F+APLgYIx3rM+KJzUFo:Y9SxmevVQ1F9jYx3rMzaJU3IcBuJ4
MD5:	4DECBF3A68479EF79D93850528FD6B3F
SHA1:	F1A02CCF69429428A8BAB53E85E7746302A09E02
SHA-256:	FD5D7BDC3FCA8970C5A87052FD2CA8E847AB38CD8AD5A8CD8D7E62F0FB1C6BDA
SHA-512:	E47188C7EEBB1D9A90A840CDEFF79EBA61D93B024A1D46BE576BD2A3BB400AC687587544F32759BC75FA42C676E37CAF94FCDED2959A7A300F5B999771C31775
Malicious:	false
Reputation:	low
IE Cache URL:	https://z.moatads.com/bellmediaprebidheader755367530455/moatheader.js
Preview:	/Copyright (c) 2011, 2021, Oracle and/or its affiliates. All rights reserved./.try{(function(w,p){function Ba(){u.k.a.sxaz("trackingReady",{callback:Ba});ra=n.h;n.h++;n.i[ra]=!1;var a={};u.al.a(a);u.f.ag(a);u.w.l();u.l.e(u.j.e,100);u.ah.b();u.c.ax.c\|\|(u.c.ax.c=!0,n.dcsx&&(n.dcsx.ynds(window,"unload","unload-"+u.c.ax.a,"unloadFn"+u.c.ax.a),n.dcsx.ynds(window,"beforeunload","unload-"+u.c.ax.a,"beforeunloadFn"+u.c.ax.a)));n.swde.azsx("unload-"+u.c.ax.a,sa,{once:!0});u.k.a.azsx("allLocalAdsKilled",function(){n.swde.sxaz("unload-"+u.c.ax.a,{callback:sa})},{once:!0});u.au.c();u.au.d()}.var u={};p.floor(p.random()*p.pow(10,12));var S,ta,na,ra=0,oa={},M={},A={},V=[],z={},ca=!1,ua={15:"",12:"",6:"",7:""},va=function(){for(var a in M)M.hasOwnProperty&&M.hasOwnProperty(a)&&M[a]&&u.a.a(M[a]);for(a=0;a<V.length;a++)u.a.b(V[a]);for(var l in A)A.hasOwnProperty&&A.hasOwnProperty(l)&&A[l]&&(u.a.a(A[l].tid),A[l]=!1);M={};V=[];N=null;u.b=null;u.c.a=null},Ca=function(){u.d.a(null,0)\|\|u.d.b();va()};u.e=

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\n[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	4.754044635983997
Encrypted:	false
SSDEEP:	3:XlMNLV3xQAWUl/MrIHt69cJ7WRBJjG/uRGuFTfYXXv2hn:1AdxVWUlxtKcVWRBtLZgH8n
MD5:	74BE9094857CE6ECC43D6150335D92D6
SHA1:	D664D3F1CE63976D141B650D99FBCCDDB0F058A4
SHA-256:	FD11B9F1BA759B28899C93422761087216C48C0B114FF6B0D63F6F716A5F08A2
SHA-512:	2D5144B40087D3C5A4CC9B57C167BD16568616154D0D66272D25C04C687AC01EBD91ABA904B80BA0801481CA0D5B49FB56CB90ADC470852978999ACD7110F20A
Malicious:	false
Reputation:	low
IE Cache URL:	https://geo.moatads.com/n.js?e=35&ol=0&qn=(%2BIb%7Cj8o%3FJjDkk%7Bj12%3Ev%3EhhX%2FIX%5EpB1I%3Cq.bWol5%7D9%250m9%3FAd%5E8YDMt7%5EYa%5Dee%24%26X%258bNJqI011%5Dln13%2C(%3DN%7BqD%3D_11%5D2%24%3Cvmu!9%3FHa8h%3EdL7F%24%26FXJ9lrct2W.P%60n1%25y%5ETm_h(GJ25%3Dq%24%3BEtB8.%3AIO7v%3Ch%2Cqk%3BRk3Z.apc%3D%5EXa%5DLzXuI2mFjrRPP%3CV%3Cye%7Bzb%26mxjr%40%3F%3BggqhB3U4(%5BrU%24J)%2C4i8od%23pw%40%40bRS%3FIDzbPTR21KC&th=2859508757&tf=nMzjG----CHewJ-1rCAqD-P72zg-Id8O-&vi=444444&rc=0%2C2%2C2%2C1%2C1001431019%2C1%2C2%2C0%2Cprobably%2Cprobably&rb=1-vUphrZVsFcUVxxPYS2zXGycd%2FIKBUGUSV3C%2FvEJM65hND7UVt69nIRrqyNQFcZFf7egP&sc=2&os=&qp=00001&is=&iv=8&qt=0&gz=0&hh=0&hn=0&tw=null&qc=-8&qd=-8&qf=1280&qe=906&qh=1296&qg=1000&qm=420&qa=1280&qb=1024&qi=1280&qj=984&to=000&po=1-0220002012002220&vy=ot%24b%5Bh%40%22oDPRHj%5BG%2B1ck9L%22%251xbqddcBX%5EOC%2CNKxnD%2CYooX%25%24(%3DNqU%60WNCNmL5%25GF.pB&qr=0&url=https%3A%2F%2Ftoronto.ctvnews.ca%2F&pcode=bellmediaprebidheader755367530455&ql=7%5BLy)rXXRG%3A%3AJMhSA%5DB&qo=0&i=BELLMEDIA_PREBID_HEADER1&hp=1&wf=1&pxm=&vb=-1&kq=1&hq=0&hs=1&hu=0&hr=0&ht=0&dnt=0&bq=11&f=0&j=&t=1616166147396&de=405724908697&rx=121524783180&m=0&ar=e85cdf4-clean&iw=e718bb3&q=1&cb=0&cu=1616166147396&ll=2&lm=0&ln=0&em=0&en=0&d=undefined%3Aundefined%3Aundefined%3Aundefined&zGSRC=1&gu=https%3A%2F%2Ftoronto.ctvnews.ca%2F&id=1&ii=4&bo=undefined&bd=undefined&gw=bellmediaprebidheader755367530455&fd=1&ac=1&it=500&pe=1%3A-%3A-%3A0%3A0&fs=189893&na=618245613&cs=0&callback=MoatDataJsonpRequest_31735942
Preview:	MoatDataJsonpRequest_31735942({"nm": 492289, "nu": 934417, "dc": 142309, "n": 122636, "oh": 516898})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\n[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	100
Entropy (8bit):	4.741335195516004
Encrypted:	false
SSDEEP:	3:XlMNLV3xQAWMUShzVxQ9wHftsSHLSK8FcHfF0ClVTTx:1AdxVWMLusKSrSbF2t0INx
MD5:	BA97007BF8D7D76C80DAA3115CD42955
SHA1:	219C55A9D8013CD9A4EA7E725ED7DCE6B7B26D70
SHA-256:	2D1922E002E8D1DADD0B0B4ABD5D00F5F896A119E6B9F8B9B9B4421BC7AB41EC
SHA-512:	E90FA6A1432D2CEBA75CE3DA98EAB9D8D1756690BD82954154397F66CAAF94F37FEF5C5AC4F30463D13BF7C8BD075070B2C28C54DD5C82F2A030E8C34848C210
Malicious:	false
Reputation:	low
IE Cache URL:	https://geo.moatads.com/n.js?e=35&ol=0&qn=(%2BIb%7Cj8o%3FJjDkk%7Bj12%3Ev%3EhhX%2FIX%5EpB1I%3Cq.bWol5%7D9%250m9%3FAd%5E8YDMt7%5EYa%5Dee%24%26X%258bNJqI011%5Dln13%2C(%3DN%7BqD%3D_11%5D2%24%3Cvmu!9%3FHa8h%3EdL7F%24%26FXJ9lrct2W.P%60n1%25y%5ETm_h(GJ25%3Dq%24%3BEtB8.%3AIO7v%3Ch%2Cqk%3BRk3Z.apc%3D%5EXa%5DLzXuI2mFjrRPP%3CV%3Cye%7Bzb%26mxjr%40%3F%3BggqhB3U4(%5BrU%24J)%2C4i8od%23pw%40%40bRS%3FIDzbPTR21KC&th=2077627710&tf=nMzjG----CHewJ-1rCAqD-P72zg-Id8O-&vi=444444&rc=0%2C2%2C2%2C1%2C1001431019%2C1%2C2%2C0%2Cprobably%2Cprobably&rb=1-HQLfcc6yZ18Qbso8rTYhadb%2B%2FIKBUGUSV3C%2FvEJM65hND7UVt69nIRrqyNQFcZFf7egP&sc=2&os=&qp=00001&is=&iv=8&qt=0&gz=0&hh=0&hn=0&tw=null&qc=-8&qd=-8&qf=1280&qe=906&qh=1296&qg=1000&qm=420&qa=1280&qb=1024&qi=1280&qj=984&to=000&po=1-0220002012002220&vy=ot%24b%5Bh%40%22oDPRHj%5BG%2B1ck9L%22%251xbqddcBX%5EOC%2CNKxnD%2CYooX%25%24(%3DNqU%60WNCNmL5%25GF.pB&qr=0&url=https%3A%2F%2Ftoronto.ctvnews.ca%2Fmore%2Fbios%2Fsean-davidson-1.4670847&pcode=bellmediaprebidheader755367530455&ql=7%5BLy)rXXRG%3A%3AJMhSA%5DB&qo=0&i=BELLMEDIA_PREBID_HEADER1&hp=1&wf=1&pxm=&vb=-1&kq=1&hq=0&hs=1&hu=0&hr=0&ht=0&dnt=0&bq=11&f=0&j=&t=1616166157379&de=517675160063&rx=306834307178&m=0&ar=e85cdf4-clean&iw=e718bb3&q=1&cb=0&cu=1616166157379&ll=9&lm=0&ln=0&em=0&en=0&d=undefined%3Aundefined%3Aundefined%3Aundefined&zGSRC=1&gu=https%3A%2F%2Ftoronto.ctvnews.ca%2Fmore%2Fbios%2Fsean-davidson-1.4670847&id=1&ii=4&bo=undefined&bd=undefined&gw=bellmediaprebidheader755367530455&fd=1&ac=1&it=500&pe=1%3A-%3A-%3A0%3A0&fs=189893&na=135122573&cs=0&callback=MoatDataJsonpRequest_13177760
Preview:	MoatDataJsonpRequest_13177760({"oh": 576531, "dc": 298551, "n": 541643, "nm": 562490, "nu": 506635})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\n[3].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	99
Entropy (8bit):	4.665549585107359
Encrypted:	false
SSDEEP:	3:XlMNLV3xQAWKZGKN6V9gt4QmXkr0F3cL9Ovqhn:1AdxVW+dcLDQmLsUSh
MD5:	2ED7CF7F70070AF6CE7720911783009B
SHA1:	7D3634EE91FB9F8EADEDB2D94FCA485F358D3E29
SHA-256:	4ADF157000551F551EB763A85119CD1FD1363F2BC39ABCE43338F7CAD113807E
SHA-512:	04C8944D25D4ECE06EB14F529E19886AD053A0BEA92FBF4BE4F3293F97AE20AFB68AD7AAA8287837F3C692F49EFDD8E1B8EED004ED1369038BFFEB59599B1AF7
Malicious:	false
Reputation:	low
IE Cache URL:	https://geo.moatads.com/n.js?e=35&ol=0&qn=(%2BIb%7Cj8o%3FJjDkk%7Bj12%3Ev%3EhhX%2FIX%5EpB1I%3Cq.bWol5%7D9%250m9%3FAd%5E8YDMt7%5EYa%5Dee%24%26X%258bNJqI011%5Dln13%2C(%3DN%7BqD%3D_11%5D2%24%3Cvmu!9%3FHa8h%3EdL7F%24%26FXJ9lrct2W.P%60n1%25y%5ETm_h(GJ25%3Dq%24%3BEtB8.%3AIO7v%3Ch%2Cqk%3BRk3Z.apc%3D%5EXa%5DLzXuI2mFjrRPP%3CV%3Cye%7Bzb%26mxjr%40%3F%3BggqhB3U4(%5BrU%24J)%2C4i8od%23pw%40%40bRS%3FIDzbPTR21KC&th=2077627710&tf=nMzjG----CHewJ-1rCAqD-P72zg-Id8O-&vi=444444&rc=0%2C2%2C2%2C1%2C1001431019%2C1%2C2%2C0%2Cprobably%2Cprobably&rb=1-PkphrZVsFcUVxxPYS2zXGycd%2FIKBUGUSV3C%2FvEJM65hND7UVt69nIRrqyNQFcZFf7egP&sc=2&os=&qp=00001&is=&iv=8&qt=0&gz=0&hh=0&hn=0&tw=null&qc=-8&qd=-8&qf=1280&qe=906&qh=1296&qg=1000&qm=420&qa=1280&qb=1024&qi=1280&qj=984&to=000&po=1-0220002012002220&vy=ot%24b%5Bh%40%22oDPRHj%5BG%2B1ck9L%22%251xbqddcBX%5EOC%2CNKxnD%2CYooX%25%24(%3DNqU%60WNCNmL5%25GF.pB&qr=0&url=https%3A%2F%2Fwww.ctvnews.ca%2Fhealth%2Fcoronavirus%2F&pcode=bellmediaprebidheader755367530455&ql=7%5BLy)rXXRG%3A%3AJMhSA%5DB&qo=0&i=BELLMEDIA_PREBID_HEADER1&hp=1&wf=0&pxm=&vb=-1&kq=1&hq=0&hs=1&hu=0&hr=0&ht=0&dnt=0&bq=11&f=0&j=&t=1616166175888&de=207130822458&rx=808282021115&m=0&ar=e85cdf4-clean&iw=e718bb3&q=1&cb=0&cu=1616166175888&ll=17&lm=0&ln=0&em=0&en=0&d=undefined%3Aundefined%3Aundefined%3Aundefined&zGSRC=1&gu=https%3A%2F%2Fwww.ctvnews.ca%2Fhealth%2Fcoronavirus%2F&id=1&ii=4&bo=undefined&bd=undefined&gw=bellmediaprebidheader755367530455&fd=1&ac=1&it=500&pe=1%3A-%3A-%3A0%3A0&fs=189893&na=1541204868&cs=0&callback=MoatDataJsonpRequest_23998728
Preview:	MoatDataJsonpRequest_23998728({"oh": 900615, "dc": 28851, "n": 722805, "nm": 729898, "nu": 877917})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\navcancl[1] Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2713
Entropy (8bit):	4.1712007174415895
Encrypted:	false
SSDEEP:	24:r3avxU5hzsIVmVMeLmVMyHf63lboxMCLxvriN6LOAPAnQay78eLx5Tb87nVkEhML:upU0GVeLVGBXvrp4n/1a5TI7Ve/G79KX
MD5:	4BCFE9F8DB04948CDDB5E31FE6A7F984
SHA1:	42464C70FC16F3F361C2419751ACD57D51613CDF
SHA-256:	BEE0439FCF31DE76D6E2D7FD377A24A34AC8763D5BF4114DA5E1663009E24228
SHA-512:	BB0EF3D32310644285F4062AD5F27F30649C04C5A442361A5DBE3672BD8CB585160187070872A31D9F30B70397D81449623510365A371E73BDA580E00EEF0E4E
Malicious:	false
Reputation:	low
IE Cache URL:	res://ieframe.dll/navcancl.htm
Preview:	.<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">....<html>.... <head>.. <link rel="stylesheet" type="text/css" href="res://ieframe.dll/ErrorPageTemplate.css" />.... <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.... <title>Navigation Canceled</title>.... <script src="res://ieframe.dll/errorPageStrings.js" language="javascript" type="text/javascript">.. </script>.. <script src="res://ieframe.dll/httpErrorPagesScripts.js" language="javascript" type="text/javascript">.. </script>.. </head>.... <body onLoad="javascript:navCancelInit(); ">.... <table width="730" cellpadding="0" cellspacing="0" border="0">.... Error title -->.. <tr>.. <td id="infoIconAlign" width="60" align="left" valign="top" rowspan="2">.. <img src="res://ieframe.dll/info_48.png" id="infoIcon" alt="Info icon">..

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ontario2014-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	2883
Entropy (8bit):	5.245097695343798
Encrypted:	false
SSDEEP:	48:W/UX6C//UBT/UERT/UK3L5dpq/UERxJ/Ua/UB/Ufox/UeZwf2KL6AtxtKBUzukHv:xpEBA0A+5db0x2NefoOeMmayBUjf/f
MD5:	EE82F51E22C193F727B9B0AA310F0019
SHA1:	F846222D5E859AB40952C7511E16FC3E05180E1B
SHA-256:	C3B5076B7D56A5280C4EA7D38095284928FEF8FBA515EA8864E9DBAB06F3CD60
SHA-512:	C63AAA9FA4FB6EC65EED7D8A7D2ED3696F69FE1768A455F60E05763B89A302C0AC2EFFD2C7234AD811C6ACC0DFE0517B8E70246FD535F73B118E12FCE23E9B2C
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/ontario2014-7.523345
Preview:	.e-l {background:url("http://ctvnews.cookieless.ca/bellmedia/common/img/elections/resultHeader.gif") repeat-x scroll 0 0 #858585; width:938px}...e-l h2 { color: #FFFFFF;.. font-size: 14px;.. padding: 2px 10px;}.....pop-vote {margin-bottom: 5px; border-bottom: 1px solid #D1D1D1}...pop-vote:last-child {border-bottom: none}..span.LIB {background: url("http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_red.jpg") repeat-x 0 0 scroll #EA1B2B;..}....span.PQ {background:url("http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_dk-blue.jpg") repeat-x scroll 0 0 #0D3D85}....span.QS {background: url("http://ctvnews.cookieless.ca/bellmedia/common/img/elections/partyName-bg_orange.jpg") repeat-x scroll 0 0 #F46102}.....pop-vote span {font-size: 15px}....span.LIB, span.PC, span.GRN, span.NDP, span.OTH, span.IND, span.PQ, span.CAQ, span.QS {.. color: #FFFFFF; font-weight: bold;.. border-radius: 3px 3px 3px 3px;.. clear: none;.. display: bloc

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\osd[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	74999
Entropy (8bit):	5.464224560816962
Encrypted:	false
SSDEEP:	1536:e9KXKi9MqYyG+ULy5XZFfHW5KwI8SpFVSTYGp0JtNk:wVyJ25rFSpFTk
MD5:	8A189F37F0B347E0ED5992CB387A7480
SHA1:	2A0836A807C4A7C833268B9F32DC4CFC220B9640
SHA-256:	CA625F204331905ABF3B4D86A89DFB9799C63771723B9B15C5B54C1F9FB2B83C
SHA-512:	FA365ABBEAC18AF0F3C7CDCB4505464E8F406F7555DCB2A3B0C905CDE3E2CEA23C81CB4531029E936EAB2B4E9F818063018B4345298C2904B40A1DECC37E630D
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.googletagservices.com/activeview/js/current/osd.js?cb=%2Fr20100101
Preview:	(function(window,document){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function ea(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}function fa(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];return b?b.call(a):{next:aa(a)}}function t(a){if(!(a i

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\p[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\ping[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0950611313667666
Encrypted:	false
SSDEEP:	3:CUMllRPQEsJ9pse:Gl3QEsJLse
MD5:	AD4B0F606E0F8465BC4C4C170B37E1A3
SHA1:	50B30FD5F87C85FE5CBA2635CB83316CA71250D7
SHA-256:	CF4724B2F736ED1A0AE6BC28F1EAD963D9CD2C1FD87B6EF32E7799FC1C5C8BDA
SHA-512:	EBFE0C0DF4BCC167D5CB6EBDD379F9083DF62BEF63A23818E1C6ADF0F64B65467EA58B7CD4D03CF0A1B1A2B07FB7B969BF35F25F1F8538CC65CF3EEBDF8A0910
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........L..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\player-style-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	959
Entropy (8bit):	4.981342734130965
Encrypted:	false
SSDEEP:	24:xo7QrG3XFCrMnehJ/oqOB/WZln+r8u2oQ:27QKO//qhSV+O
MD5:	FE78E46F2F7B8876366329FA75191E2D
SHA1:	7CBB384339BD1FD1E5BD62D213205B93F41942BB
SHA-256:	3A1FBC571816CFA07266954B19EAF5FABC5A10878FAB8CC91CA8D60C4EA85A1F
SHA-512:	3FB1AD36C57717DF57D93FA8099B7CE1488B77625B52484B833A9465D1FD17AEC0627779B9E37BA98660A9ECC669275F5696D1F6684B6BCBEC79E6AF5E3BCA95
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/player-style-7.363763
Preview:	.leadership-group .shows-player {width: 620px}.....leadership-group .playa-playa {float: none}...leadership-group .listing-box {margin-left: 0; width: 620px; background: none}...leadership-group .playa-list {height: auto; overflow: visible; margin-bottom: 10px; border-bottom: 3px double #CDCDCD; padding-bottom: 10px}...full-wrap .playa-items {float: left; width: 180px;margin-right: 20px}...full-wrap .playa-items:first-child {margin-left: 20px}...full-wrap .playa-items:last-child {margin-right: 0}...leadership-group .playa-items h2 {font-size: 14px; line-height: 1.2; text-align: center}...leadership-group .playa-items h2 a {line-height: 1.2}...leadership-group .playa-items p {font-size: 0.75em; margin-left: 10px}..../* google plus overlay video player problem */..table.gc-bubbleDefault{background-color:white!important;}......div.vjs-current-time-display, div.vjs-time-divider span, div.vjs-duration-display {line-height: 50px!important}.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\pr[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	813
Entropy (8bit):	5.060378447378783
Encrypted:	false
SSDEEP:	12:0lctQWxs4wD19VMdQfCYKrA661a0r+Ykic6bfCYKkfSG1a0r+Yks2Uym1a0r+YkF:0mEPJzKrk1RnDLKy11Rn72A1RnDLKyY
MD5:	84844D1120152114D9292FC50F7E57DA
SHA1:	1A79C28EE044A9F4F7B2246D7DF7A33C933402F7
SHA-256:	77382E6A344CFD45D4BBBCC8E31E0DAF701AF674800EC19D23AC43F7F31E9014
SHA-512:	542A959DD7ADAC305CED3D77D2F44E2599E3A5868B160BE00E0C6AD8519B2F2F455951C0482D37D395239AFD1EE9574BC30BA5800140E3E1C2C09F0C148FD26B
Malicious:	false
Reputation:	low
Preview:	<html>.<head><meta name="referrer" content="no-referrer" /></head>.<body style="background-color:transparent">.<img width="1" height="1" src="https://s.ad.smaato.net/c/?adExInit=aps&redir=https%3A%2F%2Faax-eu.amazon-adsystem.com/s%2Fecm3%3Fex%3Dsmaato.com%26id%3D%24UID"/>.<iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="https://ib.adnxs.com/getuid?https://aax-eu.amazon-adsystem.com/s/ecm3?id=$UID&ex=districtm"></iframe>.<iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="https://ups.analytics.yahoo.com/ups/58252/sync?redir=true"></iframe>.<iframe width="1" height="1" frameborder="0" marginwidth="0" marginheight="0" src="https://ib.adnxs.com/getuid?https://aax-eu.amazon-adsystem.com/s/ecm3?id=$UID&ex=appnexus.com"></iframe>.</body></html>.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\removescrollforweather-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	108
Entropy (8bit):	4.4822957382991255
Encrypted:	false
SSDEEP:	3:NxzAAqKOAyNANeovFN1DEsFeBBUXVd3vFFO5FUzVcb:AAIVApvFNqsFjFFAIQ
MD5:	A1C61935A2E11CD766F6B48E62672EFE
SHA1:	96F8D07A9653310D2FE43C75517F68D1586310AD
SHA-256:	EF7B9B32C7AFDAB2DD36A61EB4E760BF6B79E23B30A2ED9D018128784FF9F0CF
SHA-512:	AA92FB9DFBBD797CC48F97EC04B8FAB19437346127D1F0B3261E8BB57AE1CC5B2F35A700358A7088B0C9C60937C48D59C6AD8F0CCFC548597AEBBED4E3853AF6
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/removescrollforweather-7.727530
Preview:	.weather_component + .iframe_element {.. overflow: hidden;.. width: 280px;.. height: 140px;..}.

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\runner[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	12598
Entropy (8bit):	5.333640345174584
Encrypted:	false
SSDEEP:	192:qzUTG4haDWBlv6O/wVcOfvUQ9kLukCgOky0ou0PGJG:qz4Bn60CEokLukBOky0Q
MD5:	EE62E165D3AFFC78617C9CB39E79601F
SHA1:	8CC5FA05C0FADD382F46C322915602C454913D48
SHA-256:	49E1DCEF611A905B866974D135554059ECD77A0AE022553178EC359EA0B64504
SHA-512:	1E3CDAF0C836F05C027BA12BFEFA402E708DC7F5267BE345A3973D268B33A1EB14FFC8CBAA0DB7239F38D639B56EA435B67C6125B943A14054037F3FAA03D9DA
Malicious:	false
Reputation:	low
IE Cache URL:	https://tpc.googlesyndication.com/sodar/sodar2/221/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b="undefined"!=typeof r.Symbol&&u(r.Symbol,"iterator")&&a[u(r.Symbol,"iterator")];return b?b.call(a):{next:m(a)}}var aa="function"==typeof Object.create?Object.create:function(a){function b(){}b.prototype=a;return new b},v="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var w=ba(this),x="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},y={};function

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\s[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	143
Entropy (8bit):	5.079318363208902
Encrypted:	false
SSDEEP:	3:PIy9JL/ZSGKHjJMzVJu+1vK3VYrSLIzECAXhxMAFjWAEtv0Gb:TJL/sGeMRJVSOGLIoDXhxVFjWAEd0Gb
MD5:	E4E31B474D3E0B577B3C8856E91F8659
SHA1:	A81311F7FCFA9B6B23A24D4E5C976D5F75B1B9B7
SHA-256:	18088C10E79C926292732AF98A0CE470E90F3FBCBA4BB4896AB3310C2D94E421
SHA-512:	A07961EB39C4CD4E39EE19E2C675E64E5BA5367DAA18E2F76A23772ABD62F46B002E6BE8FB0F35A70616941178FACC8DF579C4A68E5811B74313C12806AAFAE3
Malicious:	false
Reputation:	low
IE Cache URL:	https://googleads.g.doubleclick.net/pagead/drt/s?v=r20120211
Preview:	<!DOCTYPE HTML PUBLIC>.<html>. <head>. <meta http-equiv="refresh" content="0;url=https://www.google.com/pagead/drt/ui" />. </head>.</html>

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\shares[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	134
Entropy (8bit):	4.607802251332622
Encrypted:	false
SSDEEP:	3:kXQRVWsalKc0i2UUD9RMQ9KTMTJrHQKCIAXtPchB+I:UQzNaLC1qZT4rwZIAd0hB+I
MD5:	8352D1EC4222C93EB14798082EE91A17
SHA1:	25C56E685AA353CCDFBF23F4F55D28E091E8596F
SHA-256:	FBEA8A4A6C037CD400AB87FFAA12571A9CCD3428B6C3F161AD184B9ACDDDCCC9
SHA-512:	28F35D97D51AF8880FD3EC746E9607D96412EEE8A661DECE4F73E4314668A8ADE63C04463A50D2FFF532A47C46512570A904E0CBEBF94F3C3772DC5EB00E4A85
Malicious:	false
Reputation:	low
IE Cache URL:	https://api-public.addthis.com/url/shares.json?url=https%3A%2F%2Ftoronto.ctvnews.ca%2Fontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784&callback=_ate.cbs.sc_httpstorontoctvnewscaontarioslashesgatheringsizesforentireprovinceasalarmbellsringovercovid19spike151117840
Preview:	_ate.cbs.sc_httpstorontoctvnewscaontarioslashesgatheringsizesforentireprovinceasalarmbellsringovercovid19spike151117840({"shares":0});

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\site.min.1f6309c5b560f598957e2961529a7c8a[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	126
Entropy (8bit):	4.544236791896168
Encrypted:	false
SSDEEP:	3:glKZmJMWBm2KEJ6vglTvZmJMM+EGEJMM:4qmWfLE0v4mWE2M
MD5:	1F6309C5B560F598957E2961529A7C8A
SHA1:	4A092D5E19E19B967081838EE3A054A66FD53636
SHA-256:	5B0AD9A446E4CCFB1AA5662839400C42F98AF359DC45A76092CFB858F4D819B8
SHA-512:	0FCB117073F564B41A0EA54AAC7880F36E70FF1458AB29D3548A30C6E6BFCC817F402E9BC36E4A2046B5E03B0F02C0C9DC807046F78DC6B0C6F5829DB41D4065
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/core/wcm/components/breadcrumb/v2/breadcrumb/clientlibs/site.min.1f6309c5b560f598957e2961529a7c8a.css
Preview:	.cmp-breadcrumb{display:inline-block;list-style:none;padding:0}..cmp-breadcrumb__item{display:inline-block;vertical-align:top}

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\site.min.31b147033ec499dcb56dcf5fbff95c90[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3660
Entropy (8bit):	5.283632596885211
Encrypted:	false
SSDEEP:	96:hTXk0R23c09CiZCbWUEKmPDuSUuzNh7Jd7OfXMx317VruHUr:hTX7D0xZCbjmPDuSUuzNhJdifcx317VT
MD5:	31B147033EC499DCB56DCF5FBFF95C90
SHA1:	01E1BD85FA083BADDA48670332BB34C083E4499C
SHA-256:	DA3E78F4225487EE999EA8121B64DE9E82C5955C86485A9F4E8A5C7D4A4AAFE7
SHA-512:	48914291D37427E9E3E20A1ED9DBA3B6DA643BF22BD7A8E9B3C58860C582A4DF0EE0D5C111BCA8B451942C33A637F05B96D66AB49EFDCB77F297E70D27D4B035
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/core/wcm/components/tabs/v1/tabs/clientlibs/site.min.31b147033ec499dcb56dcf5fbff95c90.js
Preview:	Element.prototype.matches\|\|(Element.prototype.matches=Element.prototype.msMatchesSelector\|\|Element.prototype.webkitMatchesSelector);Element.prototype.closest\|\|(Element.prototype.closest=function(p){var f=this;if(!document.documentElement.contains(f))return null;do{if(f.matches(p))return f;f=f.parentElement\|\|f.parentNode}while(null!==f&&1===f.nodeType);return null});.(function(){function p(c){function f(b){b.element.removeAttribute("data-cmp-is");h(b.element);e._active=m(e._elements.tab);e._elements.tabpanel&&(q(),t());window.Granite&&window.Granite.author&&window.Granite.author.MessageChannel&&(new window.Granite.author.MessageChannel("cqauthor",window)).subscribeRequestMessage("cmp.panelcontainer",function(a){a.data&&"cmp-tabs"===a.data.type&&a.data.id===e._elements.self.dataset.cmpPanelcontainerId&&"navigate"===a.data.operation&&(e._active=a.data.index,q())})}.function m(b){if(b)for(var a=0;a<b.length;a++)if(b[a].classList.contains(k.active.tab))return a;return 0}function h(b){e._ele

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\site.min.7dbac4340e8358c10d20370b35feb8cb[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	2693084
Entropy (8bit):	4.76869047708466
Encrypted:	false
SSDEEP:	1536:tQnQpL7H/xCi8gQbA8Yxi7rmPFCFlr2wHyyKhQz1mfRdQadQpMtbhcjhN1YZ:TRBi7L9U
MD5:	7DBAC4340E8358C10D20370B35FEB8CB
SHA1:	6915D0C083CA7783351E4BE72AF33F63F186DC3E
SHA-256:	9FB578EA756BE75CAA44C19061DF1C53CBE026F5058A6BC256053C3286E2B757
SHA-512:	3C46BF9280A27F66F3AA404FBC28192E80468691C339989B97D9273A5144DC1A0381A9B995C81861A09623A0D1E84CF4A74B3493F8D2E33CF5CE6634D9D3A66A
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/etc.clientlibs/bmdaem-domains/news/clientlibs/clientlib-brands/ctvnews/site.min.7dbac4340e8358c10d20370b35feb8cb.css
Preview:	.clearfix:after{clear:both;content:"";display:block}.full-width{margin-left:calc(50% - 50vw);margin-right:calc(50% - 50vw);width:calc(100vw - 10px)}@-webkit-keyframes circle-pulse{0%{border-radius:100%;-webkit-transform:scale(1);transform:scale(1)}to{opacity:0;-webkit-transform:scale(0);transform:scale(0)}}@keyframes circle-pulse{0%{border-radius:100%;-webkit-transform:scale(1);transform:scale(1)}to{opacity:0;-webkit-transform:scale(0);transform:scale(0)}}.c-weatherAlerts .show{display:block;max-height:300px;overflow-y:auto}.c-weatherAlerts__alerts__downArrow{margin-left:8px}.c-weatherAlerts__alerts__downArrow:before{color:#2c2c2c;content:"\e9b3";font-family:webiconfont-v7,webIcons;font-size:9pt;margin-top:2px;position:absolute}.c-weatherAlerts__alerts h3{color:#2c2c2c;font-family:CTV sans bold,Helvetica,Arial,sans-serif;font-size:14px;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;font-weight:400;margin-left:20px}.c-weatherAlerts__alerts h3:before{color:#eb0000;c

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\spacer[1].gif Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.142069457963608
Encrypted:	false
SSDEEP:	3:CU1urkltxlHh/:gg/
MD5:	DB04C7B378CB2DB912C3BA8A5A774EE3
SHA1:	DEE34BD86C3484D31002182AA2B7CAA4699126B8
SHA-256:	98B3D9D20E032F90ACA49E9B116225D539FF6FBDB7E42C3C363F63896AC03D2A
SHA-512:	826225FC21717D8861A05B9D2F959539AAD2D2B131B2AFED75D88FBCA535E1B0D5A0DA8AC69713A0876A0D467848A37A0A7F926AEAFAD8CF28201382D16466AB
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.agkn.com/spacer.gif?fc=mm_e
Preview:	GIF89a.............!.......,...........D..;

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\tag[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	downloaded
Size (bytes):	3167
Entropy (8bit):	5.3816921996405584
Encrypted:	false
SSDEEP:	96:oQFJ+tYduMgDK47Ck9tdD6dQZ7ty0ypGS7GMAT/:z+EuMgD/uk9tdD6dSty0yp97GDT
MD5:	F53F55CBAB099BE3A970B446A66C496A
SHA1:	F9B7E0859ADD30EE343F2008E1BEA13A5DA8F1F2
SHA-256:	DC82DE33871A9ED40A5379ED264DD0456D9BF58839286B913231648F527BC72B
SHA-512:	A3D76C23CC361B72186ADC1551DDF9990B81373EA0FBF89EDA75D3384057ECE3799DDA8C29E773BF30C9DF25ED48427C1B4FC5A4519A855184394DA980F09A3E
Malicious:	false
Reputation:	low
IE Cache URL:	https://js.agkn.com/prod/v0/tag.js
Preview:	function agknTagBuilder(){var n,t="-1",e="-1",r="-1",i="-1",a="-1",o="-1",c="-1",g="",d="",s=1,u=1,h="iframe",f={},l=null,p=null,w=0,m=this,T=function(n){return String(n).replace(/&/g,"&").replace(/"/g,""").replace(/'/g,"'").replace(/</g,"<").replace(/>/g,">")},v=function(s){var u="{";u+=k("bpid",t),u+=","+k("loc",l),u+=","+k("gdpr",g),u+=","+k("gdpr_consent",d),p\|\|(p="-1"),u+=","+k("ref",p),u+=","+k("cid",o),u+=","+k("sid",a),u+=","+k("gen",e),u+=","+k("age",r),u+=","+k("cat",i),u+=","+k("brd",c);for(var h in f){var w=k(h,f[h]);n(w).length+s+n(u).length<2e3&&(u+=","+w)}return u+="}"},k=function(n,t){return'"'+n+'":"'+t+'"'},y=function(){var e="http"+("https:"==window.location.protocol?"s":"")+"://",r="/"+h+"/8613/",i=e+"d.agkn.com"+r+"?che="+Math.floor(1e9*Math.random())+"&gdpr="+g+"&gdpr_consent="+d+"&ref="+n(p)+"&bpid="+t+"&c=";return i+=n(v(i.length)),i.length>=2e3&&(i="%"==i.charAt(1998)?i.substr(0,1998):"%"==i.charAt(1999)?i.substr(0,1999):i.substr(0,2e3),"%"==

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\the-pope-mini-player-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	416
Entropy (8bit):	4.911011819638892
Encrypted:	false
SSDEEP:	12:1JZYG8kEYa0kANKqKq0aGIz1XYo0Z0TiIz1XYolKJivLalk+v:1nt8n02ad1Io0Z0Tp1IolKR7
MD5:	8EF5F41AE2FA4A20D25199DE78B353E8
SHA1:	7EA8E85BBADD082355B80CC7D43DFB6E4A912A5E
SHA-256:	C317BCC91AB1893A88024CAA034BC6992F66391DF25C349A647A811A5FA9B329
SHA-512:	EAE385FEB35B14B966971469609620E4CE405952992432F3098B1014D5B46DC69B41DB3C52B86B11B5644CE174729A46CC2E05F55515BFE25801BC91A7A928AB
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/the-pope-mini-player-7.377289
Preview:	.mediaplayerwrapper.popePlaya {width: 300px; height: 168px; margin-top: 5px}.....columnsplitter h4.popeTitle{text-transform: none; color: #006699; margin: 5px 0; padding: 0; text-align: center; line-height: 1.2}....p.popeText {font-size: 12px; margin: 5px 0; padding: 0; text-align: center; line-height: 1.2}.....pope-group.budget .full-wrap {width: 520px; margin: 0 auto}.....liveSched {margin-top: -6px}.......

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\toronto-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	1157
Entropy (8bit):	5.0932927050475785
Encrypted:	false
SSDEEP:	24:lORrkZJ42n+l0N9qpzvPEyDsIB/uTr3fP65vL8ajf:lORIZJ4c+lHpz3EyDsGGfK5T8az
MD5:	F4D6FC73DADA6C9EA171E7182981118C
SHA1:	D7352A7D48379272176C6C135FEAD33030600DAC
SHA-256:	63FE1F755C74D1C262BCEF4A292F5E60440472A550F23769482A8D0FEDBDB0C7
SHA-512:	89FB3D2A3F18C88517458A01670A4A6F932B8F25AC58E0374D59A350738F1E6BDD1A6A9F4CAC7793180588241A940A7C3CDF0FBDC7DC66CA0CA8242410195A88
Malicious:	false
Reputation:	low
IE Cache URL:	https://toronto.ctvnews.ca/cmlink/toronto-7.292462
Preview:	.content .content-wrapper {.. padding-top: 0px;..}.....gig-footer {display: block!important}....div.MyNews h3 {padding: 0 0 0.45em}.....FB-Embed h3 {font-size: 0.9em;.. text-transform: uppercase; padding: 0.5em 0;}.....FB-Embed .fb-post.fb_iframe_widget {margin-left: 30px}..../* google plus overlay video player problem */..table.gc-bubbleDefault{background-color:white!important;}.....summer-getaway .teaserText.normal {width: 620px}.....columnsplitter .facebookElement {border-top: none; margin-top: 0}.....to-right .facebookElement {border-top: 0}.....promo-300x58 .teaserTitle {background: url("https://static.ctvnews.ca/bellmedia/common/img/grey-dot.gif") no-repeat scroll 0 0.5em transparent; padding-left: 10px}...columnsplitter .promo-300x58 li.dc {margin-bottom: 0}.....content-secondary .ad-story .sponsored {right: 72px; top: 0}...content-secondary .ad-story .bn-headline h2 {margin-top: 27px; display:inline-block}.....banner .content-wrapper {background-image: url(https://toro

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\tsn-widget-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.8033814944415
Encrypted:	false
SSDEEP:	3:Nx/pyy/pyTNiSGsNRfFUZJLSovYRyMMLAXLLn/pWfKLqmFEFPLMsaVKYSov8n:1ZR4thRt6bARo8/pYKLqm+JL2bkn
MD5:	1D0144E285E17778FA31AA227968202E
SHA1:	4340B00BA189B8F5E213139E201EDC91502BF3C7
SHA-256:	924531E7FEF035BADD4808357DB24125052C332EC6E718CB46D8979189AB0158
SHA-512:	04443E1661E310BF2635D90299196C270F56D3D08E89F976C190E59D79C77CAEEED9C666B4428D4691A12DA11B7AB9F5DFBB1D57DFB7C2DD83B454B7DC0054CE
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/tsn-widget-7.701032
Preview:	.BNNVideoFeedLeft, .BNNVideoFeedRight {.. min-height: 150px!important;..}.....BNNVideoFeedContainer a, div.BNNVideoHorizontal h3 a {.. color: #000!important;..}.....

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\us-election-7[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	654
Entropy (8bit):	4.769374047400683
Encrypted:	false
SSDEEP:	12:aPnObUokEXObUokElkTbUokEAlCbUokE6zHzo8qCbUokEiAKTMVbUokE86zHYJR:a/Q1XQ1lw1ic16Lqc1wm1860
MD5:	FEAD83FB8833D6285AE93755323DAC15
SHA1:	352BAAA06851D4CA0CA0C875CE9E8E0A91CD3236
SHA-256:	41805BC03F2D2C623D3FF50D6B24B6FDDF18455E2F22FE8CF450119E6AF77579
SHA-512:	1E3205B994A2760342CE09066118C8F887EC3B8A59237E8F9E1F7C13D6ABFE2FF72413A25389589781679CD36E8AB8601001887B2DA4B202C713D3C67379ED5A
Malicious:	false
Reputation:	low
IE Cache URL:	https://www.ctvnews.ca/cmlink/us-election-7.686940
Preview:	/.video-header .content-wrapper .columnsplitter.threeColumns .col1, .video-header .content-wrapper .columnsplitter.threeColumns .col2 {overflow: visible; margin-right: 0; }.....video-header .content-wrapper .columnsplitter.threeColumns .column {overflow: visible; padding-right: 10px; width: 300px}.....video-header .content-wrapper .columnsplitter.threeColumns li.dc .teaser {width: 100%!important; margin-right: 0}.....video-header .content-wrapper .columnsplitter.threeColumns .teaserText.smallVersion {width: 45%}.....video-header .content-wrapper .columnsplitter.threeColumns ul.linklist li.dc .teaser-image-inlineLeft {margin-right: 10px}/...

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\v2[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	271
Entropy (8bit):	5.000391433080935
Encrypted:	false
SSDEEP:	6:p3xVW+dcJ9Ok9FQE1X+rL87LVecm2g9XBqMCc:p3xVWg49j9F9u+Lkcm20XBqMCc
MD5:	B830D2C6F20A5A3CC6720881C08099CF
SHA1:	EF84A4E7C158AE1FA5F1FF8A7E2FC40C29137DB2
SHA-256:	EF08C3F534F92325FC5F8993FB6419F6EFE0B8959A1EAB32EF2D5A1616EA4EA6
SHA-512:	FAC3083AFB41DD2BC218F28E349CAA69B32B6FC967904F2D82E3FEB745FB1023AD5DAF732D32A32226B3F0A0737D6A5BC8282A7F3841DB3F909FB2A5119188EB
Malicious:	false
Reputation:	low
IE Cache URL:	https://mb.moatads.com/yi/v2?ol=0&qn=(%2BIb%7Cj8o%3FJjDkk%7Bj12%3Ev%3EhhX%2FIX%5EpB1I%3Cq.bWol5%7D9%250m9%3FAd%5E8YDMt7%5EYa%5Dee%24%26X%258bNJqI011%5Dln13%2C(%3DN%7BqD%3D_11%5D2%24%3Cvmu!9%3FHa8h%3EdL7F%24%26FXJ9lrct2W.P%60n1%25y%5ETm_h(GJ25%3Dq%24%3BEtB8.%3AIO7v%3Ch%2Cqk%3BRk3Z.apc%3D%5EXa%5DLzXuI2mFjrRPP%3CV%3Cye%7Bzb%26mxjr%40%3F%3BggqhB3U4(%5BrU%24J)%2C4i8od%23pw%40%40bRS%3FIDzbPTR21KC&th=2077627710&tf=nMzjG----CHewJ-1rCAqD-P72zg-Id8O-&vi=444444&rc=0%2C2%2C2%2C1%2C1001431019%2C1%2C2%2C0%2Cprobably%2Cprobably&rb=1-PkphrZVsFcUVxxPYS2zXGycd%2FIKBUGUSV3C%2FvEJM65hND7UVt69nIRrqyNQFcZFf7egP&sc=2&os=&qp=00001&is=&iv=8&qt=0&gz=0&hh=0&hn=0&tw=null&qc=-8&qd=-8&qf=1280&qe=906&qh=1296&qg=1000&qm=420&qa=1280&qb=1024&qi=1280&qj=984&to=000&po=1-0220002012002220&vy=ot%24b%5Bh%40%22oDPRHj%5BG%2B1ck9L%22%251xbqddcBX%5EOC%2CNKxnD%2CYooX%25%24(%3DNqU%60WNCNmL5%25GF.pB&qr=0&url=https%3A%2F%2Fwww.ctvnews.ca%2Fhealth%2Fcoronavirus%2F&pcode=bellmediaprebidheader755367530455&callback=MoatNadoAllJsonpRequest_23998728
Preview:	MoatNadoAllJsonpRequest_23998728({"oh": 248243, "nu": 325982, "dc": 322035, "n": 326312, "nm": 52038, "s": true, "pcode": "bellmediaprebidheader755367530455", "c": ["moat_safe", "gs_covid19", "gs_health_misc"], "ct": 0, "g": 0.0015187263488769531, "yi": {"_pbd": false}})

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\webfont[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	8379
Entropy (8bit):	4.580133383901767
Encrypted:	false
SSDEEP:	192:6zyUigVa7AxY5FeQeEe7ePexeLeU9IeNNxerRqKBl7s2c6Ps0O+M:oeScR
MD5:	747B9F56AA83EC1AA06E99AB31494446
SHA1:	8AA45798E0D5361F1F8AF9459AA05E35ACDED451
SHA-256:	2D2E665AC9964E2CB3DAD87ACD9DA254754EC2A7047DD06639F1E6DB3AFA612D
SHA-512:	8792817214D03F1A807B97EC76A9FF09A0A72581D27684FD1FEE8F61CC1873A31F8C5629F83D984DEE4E2480E7B8671759081667505DB3A8BA3EAF991F864373
Malicious:	false
Reputation:	low
Preview:	.icon-social-reddit-fill:before{content:"\e9b7";color:#ff4500}.icon-social-media-plus-fill:before{content:"\e908"}.icon-social-media-plus-line:before{content:"\e9c6"}.icon-RSS:before{content:"\e9c7"}.icon-social-instagram:before{content:"\e9c8"}.icon-social-linkedin:before{content:"\e9c9"}.icon-arrow-up-small:before{content:"\e9b4"}.icon-arrow-down-small:before{content:"\e9b5"}.icon-chevron-up-small:before{content:"\e9b2"}.icon-chevron-down-small:before{content:"\e9b3"}.icon-reddit:before{content:"\e90e";color:#ff4500}.icon-info-withoutcircle:before{content:"\e90b";color:#fff}.icon-info:before{content:"\e909";color:#4a4a4a}.icon-facebook:before{content:"\e9ad";color:#055385}.icon-directmessage:before{content:"\e9b9";color:#4a4a4a}.icon-copyurl:before{content:"\e9ba";color:#4a4a4a}.icon-twitter:before{content:"\e9bb";color:#1da1f2}.icon-bullet_arrow:before{content:"\e9b1"}.icon-arrow-dia-left-down-small:before{content:"\e9ae"}.icon-arrow-right:before{content:"\e9af"}.icon-arrow-dia-righ

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\webfont[2].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	8379
Entropy (8bit):	4.580133383901767
Encrypted:	false
SSDEEP:	192:6zyUigVa7AxY5FeQeEe7ePexeLeU9IeNNxerRqKBl7s2c6Ps0O+M:oeScR
MD5:	747B9F56AA83EC1AA06E99AB31494446
SHA1:	8AA45798E0D5361F1F8AF9459AA05E35ACDED451
SHA-256:	2D2E665AC9964E2CB3DAD87ACD9DA254754EC2A7047DD06639F1E6DB3AFA612D
SHA-512:	8792817214D03F1A807B97EC76A9FF09A0A72581D27684FD1FEE8F61CC1873A31F8C5629F83D984DEE4E2480E7B8671759081667505DB3A8BA3EAF991F864373
Malicious:	false
Reputation:	low
IE Cache URL:	https://static.ctvnews.ca/bellmedia/common/css/election/webfont.css
Preview:	.icon-social-reddit-fill:before{content:"\e9b7";color:#ff4500}.icon-social-media-plus-fill:before{content:"\e908"}.icon-social-media-plus-line:before{content:"\e9c6"}.icon-RSS:before{content:"\e9c7"}.icon-social-instagram:before{content:"\e9c8"}.icon-social-linkedin:before{content:"\e9c9"}.icon-arrow-up-small:before{content:"\e9b4"}.icon-arrow-down-small:before{content:"\e9b5"}.icon-chevron-up-small:before{content:"\e9b2"}.icon-chevron-down-small:before{content:"\e9b3"}.icon-reddit:before{content:"\e90e";color:#ff4500}.icon-info-withoutcircle:before{content:"\e90b";color:#fff}.icon-info:before{content:"\e909";color:#4a4a4a}.icon-facebook:before{content:"\e9ad";color:#055385}.icon-directmessage:before{content:"\e9b9";color:#4a4a4a}.icon-copyurl:before{content:"\e9ba";color:#4a4a4a}.icon-twitter:before{content:"\e9bb";color:#1da1f2}.icon-bullet_arrow:before{content:"\e9b1"}.icon-arrow-dia-left-down-small:before{content:"\e9ae"}.icon-arrow-right:before{content:"\e9af"}.icon-arrow-dia-righ

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\PEJLKQA8\widgets[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	97892
Entropy (8bit):	5.182853024618601
Encrypted:	false
SSDEEP:	1536:NC4PzC7TEHd2NqDrbGvbCDkcOpO+Jjoo7sgeu8ryM2gSeS/:tziE9ucKJvjwNFS/
MD5:	965FCFC23C3459AFE3EBF42B92F31E6D
SHA1:	58534C361D8075239384536D7E67B2A667885636
SHA-256:	0CCADAC47F8DB7D9086CB5D1A3230580EE43E7DB056734068CE3785376E90500
SHA-512:	7A29E9C28245E99422C470017D23685D7B9FCAB2969E74A12A5820BA38C89753EE289F601942C55BF29AC3595485E0BBF61F369F8598A370766B9FEFCE75696E
Malicious:	false
Reputation:	low
IE Cache URL:	https://platform.twitter.com/widgets.js
Preview:	Function&&Function.prototype&&Function.prototype.bind&&(/(MSIE ([6789]\|10\|11))\|Trident/.test(navigator.userAgent)\|\|(window.__twttr&&window.__twttr.widgets&&window.__twttr.widgets.loaded&&window.twttr.widgets.load&&window.twttr.widgets.load(),window.__twttr&&window.__twttr.widgets&&window.__twttr.widgets.init\|\|function(t){function e(e){for(var n,i,o=e[0],s=e[1],a=0,c=[];a<o.length;a++)i=o[a],r[i]&&c.push(r[i][0]),r[i]=0;for(n in s)Object.prototype.hasOwnProperty.call(s,n)&&(t[n]=s[n]);for(u&&u(e);c.length;)c.shift()()}var n={},r={1:0};function i(e){if(n[e])return n[e].exports;var r=n[e]={i:e,l:!1,exports:{}};return t[e].call(r.exports,r,r.exports,i),r.l=!0,r.exports}i.e=function(t){var e=[],n=r[t];if(0!==n)if(n)e.push(n[2]);else{var o=new Promise(function(e,i){n=r[t]=[e,i]});e.push(n[2]=o);var s,a=document.getElementsByTagName("head")[0],u=document.createElement("script");u.charset="utf-8",u.timeout=120,i.nc&&u.setAttribute("nonce",i.nc),u.src=function(t){return i.p+"js/"+({0:"moment~ti

C:\Users\user\AppData\Local\Temp\~DF0CE78D99C11524C3.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	325230
Entropy (8bit):	2.5244282680079597
Encrypted:	false
SSDEEP:	1536:+xvfB/fB1nXD0kRyxkVZkVqoMz5ZZrdGXTA/XT2suxO0:+LnXD0kEkVZkVqoMzbZrvSsuxO0
MD5:	63B16E9561DCDF9EA9C732AADF27B9B9
SHA1:	4AEF30EDB81378B33452D4E52D052086D8BC6D64
SHA-256:	52D84E8FDD2510E804AEFC9E46AB6B9C0685FF6273072396DAE0328AB9F49ACE
SHA-512:	87CD675DAC57DBCC357B1C8FC6C852783DCDCCAF1D4D3AC5108321B59AE251C192D448F56DFBC01982D2B8D3714A6D42A6AFD01C585399571C2F10FB0FB9FC11
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFC13CA9D2E6915C31.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13029
Entropy (8bit):	0.4805346705512099
Encrypted:	false
SSDEEP:	12:c9lCg5/9lCgeK9l26an9l26an9l8fRx9l8fRR9lTq0a/LnMQB:c9lLh9lLh9lIn9lIn9lox9loR9lWB1
MD5:	A0B50BA33A9ECCFCD8E7B73845F233F3
SHA1:	53BD9DE49785EC357B39B2B96AF8798B530DD1D1
SHA-256:	F5BD135BD327C877E9DCB9621B3CFEBEBC37E2D845B7A1474056A7A4E44D9CFE
SHA-512:	833032993B4AA322659DC9909123EA63740FDAD276C3251B674D0A276230CFCCFF9647787B4CA43990AD96BA22FA2881149E7004E6354B211D40B0601A8A4379
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFD65E7D3A0AD51BFB.TMP Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	0.46576980468174894
Encrypted:	false
SSDEEP:	48:kBqoxxJhHWSVSEabQUsil5+llu10v1lu9i0:kBqoxDhHWSVSE+psiiXFvnc
MD5:	C59953602777681B1A93F1E20D87EEC5
SHA1:	D542271B74CBEAC1946CF0F1395E0046AB2C3D60
SHA-256:	AC43F80740BCEF0CAB29AFDF52F0103847C88A537B2854F0B285E13DB584FA6B
SHA-512:	4D195FD86926E0465D180BBF6EA87E073CDACCA5C4BAC0D7F8EC0EF028B302AA288E89F892DD3344665CD8E42671F978DD0DD738C56F5DEEBA3D097FAC8CB8ED
Malicious:	false
Reputation:	low
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	5830
Entropy (8bit):	4.640799434289993
Encrypted:	false
SSDEEP:	96:rWwibtibWibUib0ib8ibzibDfibDCribDC3ibDCEibDCIlibDChlibDC:rWwi5iyi4iQi4ifinfinuinoinJin/la
MD5:	410501A1D0E084128B749FACCCA2AC33
SHA1:	960317A92E8D29859C30F5B3A8EAA61E6D898FE2
SHA-256:	EFE5813AE67C711D12F0468DE1CBE8DCAEC68B1C7CCAA840C83E4A06D2B1618B
SHA-512:	A885B491CB78B4D46AF257A257B0B516F6186326A642D20BCDA7ADBE19ACFFA0C02AD4F26277EAC4694ADFDBC4A0F2120A45D2E82DE694D5416CDF1971BCD703
Malicious:	false
Reputation:	low
Preview:	.....(TCSO........settings......gain.@I............<TCSO........settings......gain.@I.........echosuppression........STCSO........settings......gain.@I.........echosuppression.....defaultmicrophone.........fTCSO........settings......gain.@I.........echosuppression.....defaultmicrophone......defaultcamera.........xTCSO........settings......gain.@I.........echosuppression.....defaultmicrophone......defaultcamera......defaultaudio..........TCSO........settings......gain.@I.........echosuppression.....defaultmicrophone......defaultcamera......defaultaudio......defaultklimit.@Y.............TCSO........settings......gain.@I.........echosuppression.....defaultmicrophone......defaultcamera......defaultaudio......defaultklimit.@Y.........defaultalways.........TCSO........settings......gain.@I.........echosuppression.....defaultmicrophone......defaultcamera......defaultaudio......defaultklimit.@Y.........defaultalways.....windowlessDisable.........TCSO........settings......gain.@I.........echosu

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\3Y03MAR0TJ4K403INXOU.temp Download File
Process:	C:\Program Files\internet explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	5149
Entropy (8bit):	3.1764130194532263
Encrypted:	false
SSDEEP:	48:fQdi+PlIAbC9GrIoE6AsASFcodi+PlIAbh683GrIoE6AczcPdi+PlIAbx9GrIoEJ:SPlJW9SRAJAPlJL3SRAtPlJd9SRAf
MD5:	146C1D04860CF38BA1462C810DF86846
SHA1:	413A3CC1ACCCBC6C25F112B66A586AD79191DC95
SHA-256:	D90ACD59CB7A084286BA09EB9638E2DFFCC101C405B08EB0807A435611A8C8FE
SHA-512:	F8CC1F3EFBD5B1715FCFDA0959209BE171AF16E0C367A3B0E7028A501A4475D5EA2D26AE5E48BA16262EE4981597789E50546551912C59BD5F3356C18527B094
Malicious:	false
Reputation:	low
Preview:	...................................FL..................F.@.. .....@.>...V.........?.c................................P.O. .:i.....+00.../C:\.....................1.....>Q\u..PROGRA~1..t......L.>Q.u....E...............J......~..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....l.1......L.J..INTERN~1..T......L.sR8x..............................i.n.t.e.r.n.e.t. .e.x.p.l.o.r.e.r.....f.2......L.9 .iexplore.exe..J......L.JsR7x.....R..........x.............i.e.x.p.l.o.r.e...e.x.e.......^...............-.......]...........=!.a.....C:\Program Files\internet explorer\iexplore.exe....-.p.r.i.v.a.t.e...C.:.\.W.i.n.d.o.w.s.\.S.Y.S.T.E.M.3.2.\.I.E.F.R.A.M.E...d.l.l.........%SystemRoot%\SYSTEM32\IEFRAME.dll...................................................................................................................................................................................................................................%.S.y.s.t.e.m.R.o.o.t.%.\.S.Y.S.T.E.M.3.2.\.I

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2021 08:01:48.643343925 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.643640995 CET	49715	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.646143913 CET	49716	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:48.646217108 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:48.687622070 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:48.687652111 CET	443	49716	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:48.687715054 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:48.687750101 CET	49716	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:48.688276052 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.688354015 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.688797951 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:48.689004898 CET	49716	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:48.690291882 CET	443	49715	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.690366030 CET	49715	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.691000938 CET	49715	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.691112995 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.727386951 CET	49728	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:48.730144978 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:48.730493069 CET	443	49716	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:48.730741024 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:48.730784893 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:48.730811119 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:48.730834961 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:48.734672070 CET	443	49716	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:48.734714031 CET	443	49716	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:48.734731913 CET	49716	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:48.734760046 CET	49716	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:48.735960960 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.736567020 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.736612082 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.736665964 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.736721039 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.737592936 CET	443	49715	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.737790108 CET	443	49715	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.737833023 CET	443	49715	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.737874985 CET	49715	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.737905025 CET	49715	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.739931107 CET	443	49715	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.739972115 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.740025997 CET	49715	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.740051985 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.745439053 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:48.772433996 CET	443	49728	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:48.772532940 CET	49728	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:48.790571928 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:48.790703058 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:48.811300039 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.811980963 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.812192917 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.848320007 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:48.856167078 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.856942892 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.856982946 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.857032061 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.857064009 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.857074976 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.857101917 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.857158899 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.857291937 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.857857943 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.857901096 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.857912064 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.857939959 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.857969046 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.857980013 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.857999086 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.858032942 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.859159946 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.859220982 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.859224081 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.859272957 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.860333920 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.860377073 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:48.860397100 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.860424042 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:48.895436049 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:48.895488024 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:48.895576000 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:48.896116018 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:48.896158934 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:48.896193027 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:48.896213055 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.002279997 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:49.011991978 CET	49728	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.019738913 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.047228098 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:49.053874016 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.056898117 CET	443	49728	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.057972908 CET	443	49728	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.058028936 CET	443	49728	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.058074951 CET	443	49728	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.058089018 CET	49728	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.058131933 CET	49728	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.058137894 CET	49728	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.064176083 CET	49715	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:49.065252066 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.065359116 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.069371939 CET	49716	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.088387012 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.095283985 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.095451117 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.095562935 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.095607996 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.095664024 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.110836983 CET	443	49715	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:49.110887051 CET	443	49716	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.110970974 CET	443	49716	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.111051083 CET	49716	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.111105919 CET	443	49716	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.111148119 CET	443	49715	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:49.111186028 CET	49716	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.111215115 CET	49715	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:49.111217022 CET	443	49715	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:49.111330986 CET	49715	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:49.111339092 CET	49728	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.134236097 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.134301901 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.134356976 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.134365082 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.134377003 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.134418964 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.134428024 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.134475946 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.134489059 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.134536028 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.134550095 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.134598017 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.134612083 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.134664059 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.134674072 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.134740114 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.134744883 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.134795904 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.134807110 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.134856939 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.134869099 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.134917974 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.134929895 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.134979010 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.134990931 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.135039091 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.135052919 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.135099888 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.135113955 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.135162115 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.135174990 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.135235071 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.135241032 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.135296106 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.135356903 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.135418892 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.135478973 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.135540009 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.135592937 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.135857105 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.156795025 CET	443	49728	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:49.156929016 CET	49728	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:49.158699036 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.159482002 CET	49715	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:49.160193920 CET	49716	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.172635078 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.172657013 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.172698021 CET	49715	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:49.172765017 CET	49716	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.179428101 CET	49733	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.179517984 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.200443029 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.200491905 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.200655937 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.201704025 CET	443	49716	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.201749086 CET	443	49716	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.201811075 CET	49716	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.206125021 CET	443	49715	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:49.206176043 CET	443	49715	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:49.206243038 CET	49715	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:49.216202021 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.220874071 CET	443	49733	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.220930099 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.220987082 CET	49733	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.221007109 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.221448898 CET	443	49715	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:49.232753038 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.232815981 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.232861042 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.232878923 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.232897997 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.232948065 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.232964993 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.233026981 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.233031034 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.233112097 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.233169079 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.233428001 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.233747959 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.233812094 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.233882904 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.233896971 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.234697104 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.234771967 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.234813929 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.235013008 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.235632896 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.235682964 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.235733986 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.235754013 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.236623049 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.236674070 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.236694098 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.236727953 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.237569094 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.237613916 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.237668991 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.237688065 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.238568068 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.238605022 CET	49733	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.238626003 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.238658905 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.238672018 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.238795042 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.239504099 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.239547968 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.239603043 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.239623070 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.240505934 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.240592003 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.240647078 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.240669012 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.241455078 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.241518974 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.241605997 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.241626978 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.242422104 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.242463112 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.242533922 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.242552996 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.243397951 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.243428946 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.243495941 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.243511915 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.244373083 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.244429111 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.244478941 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.244498968 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.245311975 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.245354891 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.245398045 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.245415926 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.246283054 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.246326923 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.246366978 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.246386051 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.247306108 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.247374058 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.256747961 CET	443	49716	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.274882078 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.274943113 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.274993896 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.275022030 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.275288105 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.275347948 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.275394917 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.275407076 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.276276112 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.276344061 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.276361942 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.276492119 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.277277946 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.277334929 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.277359962 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.277440071 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.278201103 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.278254986 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.278290033 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.278300047 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.279186010 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.279239893 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.279282093 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.279294968 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.279932976 CET	443	49733	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.280088902 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.280148983 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.280203104 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.280251980 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.280258894 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.281120062 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.281183958 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.281229973 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.281241894 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.282064915 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.282116890 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.282160044 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.282171011 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.283138037 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.283198118 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.283250093 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.283256054 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.283997059 CET	443	49733	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.284055948 CET	443	49733	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.284068108 CET	49733	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.284111023 CET	49733	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.284176111 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.284229994 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.284281015 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.284287930 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.284992933 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.285036087 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.285096884 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.285109043 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.285860062 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.285907984 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.285922050 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.285957098 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.285958052 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.285983086 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:01:49.286065102 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.286072016 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:01:49.329859972 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.329983950 CET	49733	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.337110996 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.338273048 CET	49733	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.338962078 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.371249914 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.371365070 CET	443	49733	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.371516943 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.371557951 CET	443	49733	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.371576071 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.371596098 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.371607065 CET	49733	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.371634007 CET	443	49733	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.371645927 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.371681929 CET	49733	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.378525972 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.378573895 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.378643990 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.379620075 CET	443	49733	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.379664898 CET	443	49733	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.379719019 CET	49733	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.389059067 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.389110088 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.389125109 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.389163971 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.389168024 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.389216900 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.389219046 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.389264107 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.405417919 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.405884027 CET	49733	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:49.487543106 CET	443	49733	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:49.488634109 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:50.759571075 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.759682894 CET	49737	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.822880030 CET	443	49737	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.823642969 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.823714972 CET	49737	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.824227095 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.838196039 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:50.838299036 CET	49740	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:50.844861984 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.844943047 CET	49737	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.856518984 CET	49744	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:50.860404015 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:50.861753941 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.861835957 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.901943922 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:50.902096987 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:50.902441025 CET	443	49744	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:50.902539968 CET	49744	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:50.902578115 CET	443	49740	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:50.903779984 CET	49740	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:50.904781103 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:50.907059908 CET	49749	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:50.907207966 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:50.907231092 CET	443	49746	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:50.907250881 CET	443	49737	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.907308102 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:50.907358885 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.908236980 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:50.908370018 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.908441067 CET	49740	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:50.908525944 CET	49744	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:50.908582926 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:50.908715963 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.910173893 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:50.910398006 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.910597086 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.911977053 CET	443	49737	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.912007093 CET	443	49737	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.912035942 CET	443	49737	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.912200928 CET	49737	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.912297964 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.912327051 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.912398100 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.912405968 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.912959099 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.915040016 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:50.916332006 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:50.917083979 CET	49752	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:50.920317888 CET	49753	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:50.932375908 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.932671070 CET	49737	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.933800936 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.934170961 CET	49737	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.934264898 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.952975035 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:50.953126907 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:50.954019070 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:50.954514027 CET	443	49749	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:50.954554081 CET	443	49744	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:50.954608917 CET	49749	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:50.955123901 CET	49749	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:50.956557989 CET	443	49746	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:50.956708908 CET	443	49746	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:50.956744909 CET	443	49746	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:50.956799984 CET	443	49746	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:50.956840038 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.956881046 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.957535028 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:50.957823992 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:50.957875967 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:50.957931042 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:50.957958937 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.957961082 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:50.958017111 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.958076954 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:50.958306074 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:50.959120035 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:50.960092068 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:50.960124969 CET	443	49746	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:50.960215092 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.960573912 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.962462902 CET	443	49753	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:50.965085030 CET	49753	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:50.967334986 CET	443	49744	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:50.967386007 CET	443	49744	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:50.967438936 CET	443	49744	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:50.967602015 CET	49744	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:50.967628002 CET	49744	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:50.968905926 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.969367027 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.969541073 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.969772100 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:50.969839096 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:50.969862938 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:50.969922066 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:50.969952106 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:50.971937895 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:50.973201990 CET	443	49740	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:50.976119995 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:50.976155043 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:50.976218939 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:50.976272106 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:50.976325035 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:50.979804039 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:50.980072021 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:50.980381966 CET	443	49740	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:50.980412006 CET	443	49740	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:50.980475903 CET	443	49740	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:50.980499983 CET	443	49752	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:50.980562925 CET	49740	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:50.980571985 CET	49740	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:50.980607986 CET	49752	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:50.988922119 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:50.991807938 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:50.995269060 CET	443	49737	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.995301008 CET	443	49737	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.995459080 CET	49737	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.996175051 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.996196985 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.996279955 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.996582985 CET	443	49737	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.996738911 CET	49737	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.997515917 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:50.997603893 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:50.999095917 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.000763893 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:51.000929117 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.002028942 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.002079964 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.002365112 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.002707005 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.002757072 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.002793074 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.002799034 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.002805948 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.002851963 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.002875090 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.002928019 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.002947092 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.002979040 CET	443	49749	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.003020048 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.003036976 CET	443	49749	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.003061056 CET	49749	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.003087997 CET	49749	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.005973101 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:51.006005049 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:51.006088018 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:51.008167982 CET	49753	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.008285046 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.008305073 CET	49752	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.008387089 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:51.008585930 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:51.008591890 CET	49737	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:01:51.010935068 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:51.015652895 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.015882969 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.015893936 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.015955925 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.015964985 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.015985966 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.016021013 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.016124964 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.021559000 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.023494005 CET	49755	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.024321079 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.024624109 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.024893045 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.025015116 CET	49744	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.025417089 CET	49740	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:51.025599957 CET	49744	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.026874065 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.027519941 CET	49740	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:51.027555943 CET	49749	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.028044939 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.028597116 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.028600931 CET	49749	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.029084921 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.030936003 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.032217026 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.032234907 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.034986973 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.035008907 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.035051107 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.035123110 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:51.035144091 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:51.035592079 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.035613060 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.036217928 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:51.036493063 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.036526918 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.036624908 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.036640882 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.036761999 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.036793947 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.036823034 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.036890984 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:51.036917925 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.036947966 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.037007093 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.037035942 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.037319899 CET	443	49746	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.037482977 CET	443	49746	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.037544012 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.037564993 CET	443	49746	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.037655115 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.038026094 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.038053989 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.038218975 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:51.038273096 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.038300991 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.038362026 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.038738966 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.039308071 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.039341927 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.039433002 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:51.039540052 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.039573908 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.039799929 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.040571928 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.040613890 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.040858030 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:51.040887117 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.040915966 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.041007996 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.041855097 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.041887999 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.042206049 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.042239904 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.042284966 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:51.042324066 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.043272972 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.043302059 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.043571949 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.043603897 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.043641090 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:51.043678999 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.044380903 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.044408083 CET	443	49714	99.86.163.177	192.168.2.5
Mar 19, 2021 08:01:51.044621944 CET	443	49746	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.044637918 CET	443	49746	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.044733047 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.044770002 CET	49714	443	192.168.2.5	99.86.163.177
Mar 19, 2021 08:01:51.044807911 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.044836044 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.044924974 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.046160936 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.046190023 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.046267033 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.047455072 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.047485113 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.047573090 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.048827887 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.048856020 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.048978090 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.050076008 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.050098896 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.050184965 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.050386906 CET	443	49753	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.051522970 CET	443	49753	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.051552057 CET	443	49753	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.051615000 CET	443	49753	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.051641941 CET	443	49753	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.051652908 CET	49753	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.051692963 CET	49753	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.051820040 CET	443	49753	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.051894903 CET	49753	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.057048082 CET	49753	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.057455063 CET	49753	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.065040112 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:51.065064907 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:51.065155029 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:51.068190098 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.070763111 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.070794106 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.070952892 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.071135998 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.071234941 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.071316004 CET	443	49744	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.071345091 CET	443	49744	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.071474075 CET	49744	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.071547985 CET	443	49744	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.071569920 CET	443	49752	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.071726084 CET	49744	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.072482109 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.072515965 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.072572947 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.072635889 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:51.072715998 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.072945118 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:51.072988987 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.073025942 CET	443	49752	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.073084116 CET	443	49752	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.073115110 CET	443	49752	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.073138952 CET	49752	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.073162079 CET	49752	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.073184013 CET	49752	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.073492050 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.073679924 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.074122906 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.074338913 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.074376106 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.074424982 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.074444056 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:51.074481964 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.074496984 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.074955940 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.075150013 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.075201988 CET	443	49749	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.075228930 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.075313091 CET	49749	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.075997114 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.076268911 CET	443	49749	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.076385021 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.078560114 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:51.078612089 CET	49749	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.078737974 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:51.078763962 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:51.078891039 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:51.081948996 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.082122087 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.083199978 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:51.083384991 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.083621979 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.083630085 CET	49749	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.083642006 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.083815098 CET	49744	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.085556030 CET	443	49746	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.086997986 CET	443	49755	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.087218046 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.087244034 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.087299109 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.087316990 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.087335110 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.087351084 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.087366104 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.087394953 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.087409973 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.087425947 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.087438107 CET	49755	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.087471008 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.087511063 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.087517977 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.087829113 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.088603020 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.089270115 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.089293957 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.089312077 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.089329004 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.089411974 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.089441061 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.089797974 CET	443	49740	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:51.089811087 CET	443	49740	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:51.090065002 CET	49740	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:51.091816902 CET	443	49740	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:51.091945887 CET	49740	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:51.092459917 CET	49740	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:01:51.092494011 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.092519999 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.092535019 CET	443	49754	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.092569113 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.092641115 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.093843937 CET	49755	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.094253063 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.095823050 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.095846891 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.095922947 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.098838091 CET	443	49753	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.098876953 CET	443	49753	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.098962069 CET	443	49753	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.098984003 CET	49753	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.099061012 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.099102974 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.099129915 CET	49753	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.099149942 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.099163055 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.100219965 CET	49753	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:01:51.112487078 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:51.114999056 CET	443	49737	52.50.244.146	192.168.2.5
Mar 19, 2021 08:01:51.117033958 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.117055893 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.117134094 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.118623018 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.118644953 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.118720055 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.121889114 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.121912003 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.121984005 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.122936010 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.122961044 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.123236895 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.124033928 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.124057055 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.124171019 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.130642891 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.134819984 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.134905100 CET	443	49744	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.135106087 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.135127068 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.135150909 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.135170937 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.135217905 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.135219097 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.135232925 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.135241032 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.135265112 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.135284901 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.135325909 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.135338068 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.135454893 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.135519028 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.139225006 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.139259100 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.139364958 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.140383005 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.143296957 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.143345118 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.144051075 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.146743059 CET	443	49753	34.120.133.55	192.168.2.5
Mar 19, 2021 08:01:51.147173882 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.147226095 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.149158001 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.151177883 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.151293993 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:01:51.156898022 CET	443	49755	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.157632113 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.157740116 CET	443	49754	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.157874107 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.158127069 CET	443	49755	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.158164024 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.158186913 CET	443	49755	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.158202887 CET	49755	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.158246040 CET	443	49755	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.158271074 CET	49755	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.158282995 CET	443	49755	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.158569098 CET	49755	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.159459114 CET	443	49754	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.159503937 CET	443	49754	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.159542084 CET	443	49754	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.159571886 CET	443	49754	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.159610033 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.159640074 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.159643888 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.168039083 CET	49752	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.170819998 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.170876980 CET	49752	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.171979904 CET	443	49749	178.250.2.130	192.168.2.5
Mar 19, 2021 08:01:51.172605038 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.175167084 CET	49755	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.187547922 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:51.191276073 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.199078083 CET	443	49740	54.72.67.237	192.168.2.5
Mar 19, 2021 08:01:51.222121954 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.222460032 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.222522974 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.222548962 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.223110914 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.223128080 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.223432064 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.225414038 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.231143951 CET	443	49752	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.231179953 CET	443	49752	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.231302977 CET	49752	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.231976032 CET	49752	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.233733892 CET	443	49752	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.234556913 CET	443	49754	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.234679937 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.234704971 CET	49752	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:51.238720894 CET	443	49755	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.239135027 CET	443	49754	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.239154100 CET	443	49754	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:51.239264965 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.239285946 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.239314079 CET	49755	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:51.241688967 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.242485046 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.267375946 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:51.288201094 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.289215088 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.291217089 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.291248083 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.291336060 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.291829109 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.291886091 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.313112974 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:01:51.313271999 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:01:51.332564116 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.335241079 CET	443	49752	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:51.368453026 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.368482113 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:01:51.368586063 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:01:51.453299046 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:51.473330975 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.491411924 CET	49757	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.494846106 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:51.504884005 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:51.504911900 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:51.504970074 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:51.504998922 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:51.505085945 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:51.505106926 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:51.505140066 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:51.505152941 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:51.505604982 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:51.505635023 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:51.505693913 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:51.506602049 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:51.506632090 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:51.506691933 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:51.506714106 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:51.507570982 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:51.507602930 CET	443	49732	104.26.3.116	192.168.2.5
Mar 19, 2021 08:01:51.507668018 CET	49732	443	192.168.2.5	104.26.3.116
Mar 19, 2021 08:01:51.519906998 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.520095110 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.522885084 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.537601948 CET	443	49757	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.538722038 CET	49757	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.539239883 CET	49757	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.569437981 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.582218885 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.582251072 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.582269907 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.582309008 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.582341909 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.585324049 CET	443	49757	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.587368965 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.588114023 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.588232040 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.597903967 CET	443	49757	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.597940922 CET	443	49757	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.597951889 CET	443	49757	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.598057985 CET	49757	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.602102995 CET	49757	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.611068964 CET	49757	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.624134064 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.624454975 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.634468079 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.634500980 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.634593010 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.634639025 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.634939909 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.637026072 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.640371084 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.648555040 CET	443	49757	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.648581028 CET	443	49757	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.648637056 CET	49757	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.648658037 CET	49757	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.649472952 CET	49757	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.653281927 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.653304100 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.653325081 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.653348923 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.653363943 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.653409004 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.653422117 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.655716896 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.655747890 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.655833960 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.657249928 CET	443	49757	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.657875061 CET	49757	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.658977985 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.659024954 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.659120083 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.659140110 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.663142920 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.663208961 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.663305044 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.663336992 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.666075945 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.666129112 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.666174889 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.666212082 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.667061090 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.667740107 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.681643963 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.681678057 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.681737900 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.683408976 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.683496952 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.683512926 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.684096098 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.686229944 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.686278105 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.686321974 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.686364889 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.691854000 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.699928999 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.699970961 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.700057983 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.701323032 CET	443	49757	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.701499939 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.701539040 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.701575041 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.701618910 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.704749107 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.704823017 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.704830885 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.706703901 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.707452059 CET	49764	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.707730055 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.708126068 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.708177090 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.708204031 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.708224058 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.708573103 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.709096909 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.709444046 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.709500074 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.709542036 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.709573030 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.709604025 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.709697008 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.709738016 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.709768057 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.709817886 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.709836006 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.711317062 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.711365938 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.711396933 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.711436987 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.714631081 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.714694023 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.714775085 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.717904091 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.717962980 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.717995882 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.718015909 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.718238115 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.718370914 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.720446110 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.721128941 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.721189976 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.721268892 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.724406004 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.724453926 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.724524975 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.728718996 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.728780985 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.728823900 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.728846073 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.729190111 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.730997086 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.731048107 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.731067896 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.731102943 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.731525898 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.734394073 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.734440088 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.734498978 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.735985041 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.736042976 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.736077070 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.736123085 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.738276005 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.738321066 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.738374949 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.741719007 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.741767883 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.741799116 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.741820097 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.743300915 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.743360996 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.743386030 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.743505955 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.747029066 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.747251034 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.747330904 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.748162031 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.748208046 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.748296022 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.748313904 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.750206947 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.750243902 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.750277996 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.750297070 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.751673937 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.751894951 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.751976967 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.755958080 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.756027937 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.756062984 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.756093979 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.756133080 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.756174088 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.756177902 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.756522894 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.758100986 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.758146048 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.758202076 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.758574963 CET	443	49764	178.250.0.157	192.168.2.5
Mar 19, 2021 08:01:51.758615971 CET	443	49765	178.250.0.157	192.168.2.5
Mar 19, 2021 08:01:51.758693933 CET	49764	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.758729935 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.759344101 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.759418011 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.759603977 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.759656906 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.759855032 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.759887934 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.759955883 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.760154963 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.760185957 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.760242939 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.760356903 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.761456966 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.763298035 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.763350964 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.763370991 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.763377905 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.763396978 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.763403893 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.763438940 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.763448954 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.763470888 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.763504028 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.763520002 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.763556004 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.763575077 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.763580084 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.763613939 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.763689041 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.763735056 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.763776064 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.763818979 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.765469074 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.766046047 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.766107082 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.766124010 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.766365051 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.767579079 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.767638922 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.767714024 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.769314051 CET	49764	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.769460917 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.769505978 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.769521952 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.769561052 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.770013094 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.770608902 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.770817041 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.770888090 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.770948887 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.770987034 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.771048069 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.771050930 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.771100998 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.771126986 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.772119045 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.774286032 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.774338007 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.774350882 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.774384022 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.774409056 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.774420977 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.774518967 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:51.775480986 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.775532007 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.775571108 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.775593996 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.777323008 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.777407885 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.778213978 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:51.820404053 CET	443	49764	178.250.0.157	192.168.2.5
Mar 19, 2021 08:01:51.820447922 CET	443	49764	178.250.0.157	192.168.2.5
Mar 19, 2021 08:01:51.820473909 CET	49764	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.820502043 CET	49764	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.820708036 CET	443	49765	178.250.0.157	192.168.2.5
Mar 19, 2021 08:01:51.820749044 CET	443	49765	178.250.0.157	192.168.2.5
Mar 19, 2021 08:01:51.820771933 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.820868015 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.830359936 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:51.833245993 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.833640099 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.833827972 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.835206032 CET	49764	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.835573912 CET	49764	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.848148108 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.853765011 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:51.884537935 CET	443	49765	178.250.0.157	192.168.2.5
Mar 19, 2021 08:01:51.884603024 CET	443	49765	178.250.0.157	192.168.2.5
Mar 19, 2021 08:01:51.884629965 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.884685040 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.885893106 CET	443	49764	178.250.0.157	192.168.2.5
Mar 19, 2021 08:01:51.885948896 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.885962009 CET	49764	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.885976076 CET	443	49764	178.250.0.157	192.168.2.5
Mar 19, 2021 08:01:51.886356115 CET	49764	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.886732101 CET	443	49765	178.250.0.157	192.168.2.5
Mar 19, 2021 08:01:51.886840105 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.903070927 CET	49764	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:01:51.936090946 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:51.936139107 CET	49769	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:51.940854073 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:51.940956116 CET	49771	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:51.976526022 CET	443	49765	178.250.0.157	192.168.2.5
Mar 19, 2021 08:01:51.994571924 CET	443	49764	178.250.0.157	192.168.2.5
Mar 19, 2021 08:01:52.063019991 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.063097000 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.063102007 CET	443	49769	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.063162088 CET	49769	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.067884922 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.067981005 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.068083048 CET	443	49771	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.068301916 CET	49771	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.103905916 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.132601976 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.132786036 CET	49769	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.132883072 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.133341074 CET	49771	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.150082111 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.150105953 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.150141954 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.150167942 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.150176048 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.150192976 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.150222063 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.150223017 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.150229931 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.150257111 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.150281906 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.150285959 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.150306940 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.150336981 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.150352955 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.151148081 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.151180029 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.151228905 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.151257992 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.151767015 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.151823044 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.151912928 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.151973963 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.152590990 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.152621984 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.152676105 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.152699947 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.153434038 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.153460979 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.153493881 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.153517008 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.154095888 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.154124022 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.154146910 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.154165030 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.154172897 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.154177904 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.154185057 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.154200077 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.154225111 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.154232025 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.154242039 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.154253960 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.154278040 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.154280901 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.154313087 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.154334068 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.154473066 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.154539108 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.154638052 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.154711008 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.155215025 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.155242920 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.155301094 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.155980110 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.156045914 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.156100988 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.156227112 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.156721115 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.156779051 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.156852007 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.156930923 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.157468081 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.157533884 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.157609940 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.157660961 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.157687902 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.159774065 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.159868002 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.159903049 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.160084009 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.163311005 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.163345098 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.163372993 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.163398027 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.163409948 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.163424969 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.163433075 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.163451910 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.163456917 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.163496017 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.163513899 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.163932085 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.163959980 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.164011955 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.164041996 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.164589882 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.164618969 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.164648056 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.164670944 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.165443897 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.165534973 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.165879965 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.165956974 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.191966057 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:01:52.192091942 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:01:52.259558916 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.259687901 CET	443	49769	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.259757996 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.260278940 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.260305882 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.260329962 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.260349035 CET	443	49771	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.260360003 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.260391951 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.260428905 CET	443	49769	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.260454893 CET	443	49769	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.260473013 CET	443	49769	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.260504961 CET	49769	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.260525942 CET	49769	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.260529995 CET	49769	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.260550976 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.260580063 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.260597944 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.260622025 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.260658979 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.260664940 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.261271954 CET	443	49771	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.261301994 CET	443	49771	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.261318922 CET	443	49771	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.261363029 CET	49771	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.261409044 CET	49771	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.269272089 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.269601107 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.269800901 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.273452044 CET	49769	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.273828983 CET	49769	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.278094053 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.278497934 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.278623104 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.284863949 CET	49771	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.285281897 CET	49771	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.396456003 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.396512032 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.396548986 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.396594048 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.396622896 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.396626949 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.397114038 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.397351980 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.397424936 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.397505999 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.400705099 CET	443	49769	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.400743961 CET	443	49769	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.400769949 CET	443	49769	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.400820971 CET	49769	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.400857925 CET	49769	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.401812077 CET	49769	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:01:52.405292034 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.405344963 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.405368090 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.405405998 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.405453920 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.405510902 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.406367064 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.406418085 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.406492949 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.412100077 CET	443	49771	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.412142992 CET	443	49771	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.412201881 CET	49771	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.412225962 CET	49771	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.412559986 CET	443	49771	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.412693977 CET	49771	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.413729906 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.414264917 CET	49771	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:01:52.565629959 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.569475889 CET	443	49769	52.73.84.222	192.168.2.5
Mar 19, 2021 08:01:52.581702948 CET	443	49771	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.581741095 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:01:52.654203892 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.654320955 CET	49780	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.695816040 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.695862055 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.695966959 CET	49780	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.697354078 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.697463036 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.701402903 CET	49780	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.705634117 CET	49783	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.705750942 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.722825050 CET	49785	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.722872972 CET	49786	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.732969046 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.732969999 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.733053923 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.733093977 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.733139038 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.733166933 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.739077091 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.739610910 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.739641905 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.739660978 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.739707947 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.739741087 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.742844105 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.743396044 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.743427992 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.743448973 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.743537903 CET	49780	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.743576050 CET	49780	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.743678093 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.744005919 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.744215965 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.746886015 CET	49780	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.747226954 CET	49780	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.764422894 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:52.768265963 CET	443	49783	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.768713951 CET	443	49784	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.768754959 CET	49783	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.768852949 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.772568941 CET	49783	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.772630930 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.774494886 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:52.775192976 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.775290966 CET	443	49793	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.775366068 CET	443	49791	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.775398970 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.775527954 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.775533915 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.775697947 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.775768995 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.775808096 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.775840044 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.775882006 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.775887012 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.776416063 CET	443	49785	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:52.776492119 CET	49785	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.776523113 CET	443	49786	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:52.776597023 CET	49786	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.781394958 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.781714916 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.782685995 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.785135031 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.785356998 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.785373926 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.785439014 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.785603046 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.785619974 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.785638094 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.785657883 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.785677910 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.785832882 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.786014080 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.788042068 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.788322926 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.788640976 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.788657904 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.788716078 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.788729906 CET	49780	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.788733006 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.788790941 CET	49780	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.788975954 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.788995028 CET	49785	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.789064884 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.789103031 CET	49786	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.789192915 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.791073084 CET	49780	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.812000990 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:01:52.812441111 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:52.812860966 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:52.823230982 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.823625088 CET	443	49793	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.824781895 CET	443	49793	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.824827909 CET	443	49793	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.824862003 CET	443	49793	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.824889898 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.824923992 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.824935913 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.824984074 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.825037956 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.825076103 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.825078964 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.825098038 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.825831890 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.825875998 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.825911999 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.825937986 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.825969934 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.828133106 CET	443	49796	185.33.221.52	192.168.2.5
Mar 19, 2021 08:01:52.828988075 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:52.829437017 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:52.830122948 CET	443	49791	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.830734015 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.831269026 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.831535101 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.831578016 CET	443	49791	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.831629038 CET	443	49791	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.831672907 CET	443	49791	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.831693888 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.831727028 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.832005978 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.832056046 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.832060099 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.832094908 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.832142115 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.832242012 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.832279921 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.832309008 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.832319975 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.832329035 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.832364082 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.832454920 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.833816051 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.834063053 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.834453106 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.834682941 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.835227013 CET	443	49783	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.835536003 CET	443	49784	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.837032080 CET	443	49783	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.837071896 CET	443	49783	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.837104082 CET	443	49783	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.837137938 CET	443	49783	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.837167978 CET	49783	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.837176085 CET	443	49784	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.837181091 CET	49783	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.837209940 CET	443	49784	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.837241888 CET	443	49784	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.837271929 CET	443	49784	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.837332964 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.837351084 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.837357998 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.837560892 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.837769032 CET	49783	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.838808060 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.841593027 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.841876030 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.842124939 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.842514038 CET	443	49785	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:52.842525005 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.842686892 CET	443	49786	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:52.842744112 CET	443	49785	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:52.842766047 CET	443	49785	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:52.842822075 CET	49785	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.843019962 CET	443	49786	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:52.843040943 CET	443	49786	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:52.843077898 CET	49786	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.843112946 CET	49786	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.849579096 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.849744081 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.860795975 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:01:52.860838890 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:01:52.860918999 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:52.867338896 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:52.867485046 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:52.876333952 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.876432896 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.876552105 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.877371073 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.880462885 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.881689072 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.881773949 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.882431984 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.883145094 CET	443	49796	185.33.221.52	192.168.2.5
Mar 19, 2021 08:01:52.883374929 CET	443	49796	185.33.221.52	192.168.2.5
Mar 19, 2021 08:01:52.883410931 CET	443	49796	185.33.221.52	192.168.2.5
Mar 19, 2021 08:01:52.883464098 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:52.883481026 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:52.904992104 CET	443	49784	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.907257080 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.907440901 CET	443	49784	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.907481909 CET	443	49784	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.907525063 CET	443	49784	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.907529116 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.907546997 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.907574892 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.912393093 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.912518024 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.913306952 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.913403034 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.916201115 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.916460037 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.923583984 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.924422979 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.925363064 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.926961899 CET	49783	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.928280115 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.928339958 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.928422928 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.928679943 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.928685904 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.932151079 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.936429977 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.936454058 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:52.936501026 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.936531067 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.936558008 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.936964989 CET	49785	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.937220097 CET	49785	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.937630892 CET	49786	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.937896013 CET	49786	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.939074039 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:52.939682007 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.939733028 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.939800024 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.939815044 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.941320896 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.941658974 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.943922997 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:52.945851088 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.945915937 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.945924997 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.947169065 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.959640980 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.965342045 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.966774940 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.967988968 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.970788002 CET	443	49791	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.971139908 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.976949930 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.977510929 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.983480930 CET	443	49793	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:52.984926939 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:52.986799002 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:01:52.988241911 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:52.989434004 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.990108013 CET	443	49783	34.248.172.235	192.168.2.5
Mar 19, 2021 08:01:52.990374088 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.990458012 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.990464926 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.990490913 CET	49783	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:01:52.990519047 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.990539074 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.990591049 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.990603924 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.990660906 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.990712881 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.990715981 CET	443	49796	185.33.221.52	192.168.2.5
Mar 19, 2021 08:01:52.990767002 CET	443	49785	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:52.990863085 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:52.990902901 CET	49785	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.991661072 CET	443	49786	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:52.991769075 CET	443	49786	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:52.991822004 CET	49786	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:52.996290922 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.997169018 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.997239113 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.997312069 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.997328997 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.997409105 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.997445107 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.997503996 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:52.997524977 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.997562885 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:52.999875069 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:53.000286102 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:53.001358032 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:53.001622915 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.007782936 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.008563995 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.009166002 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.009181976 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.009349108 CET	443	49754	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:53.009438038 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:53.009907007 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:53.010112047 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.010137081 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:53.010628939 CET	443	49791	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.011334896 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:53.014616966 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.014875889 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:53.014946938 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.021770954 CET	443	49791	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.021812916 CET	443	49791	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.022079945 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:53.023226023 CET	443	49793	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.029324055 CET	443	49785	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:53.032917023 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:53.032995939 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.040375948 CET	443	49786	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:53.040441990 CET	443	49786	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:53.040524960 CET	49786	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:53.047966003 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:01:53.049129963 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:53.049180984 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:53.049279928 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:01:53.057780027 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:01:53.057828903 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:01:53.057928085 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:53.059093952 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:01:53.059190035 CET	443	49785	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:53.059252977 CET	443	49785	185.33.221.14	192.168.2.5
Mar 19, 2021 08:01:53.059286118 CET	49785	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:53.059312105 CET	49785	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:01:53.060333967 CET	443	49793	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.060385942 CET	443	49793	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.060513020 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:53.060590982 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.060646057 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.060722113 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:53.063592911 CET	443	49796	185.33.221.52	192.168.2.5
Mar 19, 2021 08:01:53.069367886 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.069457054 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.069467068 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:53.069791079 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:53.073615074 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:53.074158907 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.074846983 CET	443	49796	185.33.221.52	192.168.2.5
Mar 19, 2021 08:01:53.076329947 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:53.076395988 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.076447964 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:53.076448917 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:53.076452017 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.076478958 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.076721907 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:53.079010010 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:53.079529047 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.092740059 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:01:53.093188047 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:01:53.095855951 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.095931053 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:53.095942020 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:53.096101999 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:53.097198963 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:01:53.108166933 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.108300924 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.117192030 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.119127035 CET	49803	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.119414091 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.120140076 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.120203972 CET	49806	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.123123884 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.123583078 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.169078112 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.169271946 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.172075033 CET	443	49806	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.172185898 CET	49806	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.172578096 CET	443	49803	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.172713995 CET	49803	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.172871113 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.173017025 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.185590982 CET	443	49809	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.185703039 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.185776949 CET	443	49810	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.186031103 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.210006952 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.218234062 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.224904060 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:53.235491037 CET	443	49799	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.235534906 CET	443	49800	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.235584974 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.235599995 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.236397028 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.238696098 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.238707066 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.273610115 CET	443	49809	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.273684025 CET	443	49809	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.273746014 CET	443	49809	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.273767948 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.273808002 CET	443	49809	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.273860931 CET	443	49809	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.273865938 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.277714968 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.282126904 CET	443	49810	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.282191992 CET	443	49810	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.282243013 CET	443	49810	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.282294035 CET	443	49810	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.282316923 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.282335997 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.282341003 CET	443	49810	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.282341957 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.285330057 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.285442114 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.287053108 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.287127018 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.287192106 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.287221909 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.287250042 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.287333012 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.287390947 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.287410021 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.287446022 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.301343918 CET	49806	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.301979065 CET	49803	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.304209948 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.304374933 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.304647923 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.304910898 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.305191040 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.305306911 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.305638075 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.309778929 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.310832977 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.340115070 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:53.340348959 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.353490114 CET	443	49806	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.353657007 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.353717089 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.353743076 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.353776932 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.353986979 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.354048967 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.354156971 CET	443	49806	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.354216099 CET	443	49806	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.354285955 CET	443	49806	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.354305983 CET	49806	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.354350090 CET	443	49806	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.354406118 CET	443	49806	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.354407072 CET	49806	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.355420113 CET	443	49803	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.355503082 CET	49806	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.356132984 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.356218100 CET	443	49803	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.356292963 CET	443	49803	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.356293917 CET	49803	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.356359959 CET	443	49803	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.356415033 CET	443	49803	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.356417894 CET	49803	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.356527090 CET	49803	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.358640909 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.359075069 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.359929085 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.359989882 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.360042095 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.360048056 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.360089064 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.360100985 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.360106945 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.360650063 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.361021042 CET	49806	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.363023996 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.363090992 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.363121033 CET	49806	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.363149881 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.363182068 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.363198042 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.363205910 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.365729094 CET	443	49799	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.365844011 CET	443	49800	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.366777897 CET	443	49800	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.366868019 CET	443	49800	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.366902113 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.366949081 CET	443	49800	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.366982937 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.367028952 CET	443	49800	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.367091894 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.367115021 CET	443	49799	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.367197990 CET	443	49799	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.367223024 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.367276907 CET	443	49799	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.367336988 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.367347956 CET	443	49799	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.367408991 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.367466927 CET	443	49810	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.367542028 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.367582083 CET	443	49810	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.367636919 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.368135929 CET	443	49810	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.368304014 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.371948957 CET	443	49809	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.372021914 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.372879982 CET	443	49809	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.373187065 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.373195887 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.377150059 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.377185106 CET	49803	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.379559040 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.379565954 CET	49803	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.385164022 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.386203051 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.386575937 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.392781973 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:01:53.394440889 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.394824028 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.395004988 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.395026922 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.395313978 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.403059959 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.413100004 CET	443	49806	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.413151979 CET	443	49806	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.413227081 CET	49806	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.413264036 CET	49806	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.415070057 CET	443	49806	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.415378094 CET	49806	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.415406942 CET	49806	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:01:53.430733919 CET	443	49803	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.430768967 CET	443	49803	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.430815935 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.430845976 CET	49803	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.430870056 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.430996895 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.432763100 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.432770014 CET	49803	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.432984114 CET	443	49803	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.433058977 CET	49803	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.433084011 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.433304071 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.435501099 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.439378023 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.440717936 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:53.464822054 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.471966982 CET	443	49806	35.244.174.68	192.168.2.5
Mar 19, 2021 08:01:53.475636959 CET	443	49810	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.494724989 CET	443	49809	54.78.254.47	192.168.2.5
Mar 19, 2021 08:01:53.500808001 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.500901937 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.521673918 CET	443	49799	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.521729946 CET	443	49799	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.521785021 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.521822929 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.521881104 CET	443	49799	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.522278070 CET	443	49800	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.522322893 CET	443	49800	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.522372961 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.522391081 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.522413015 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.522437096 CET	443	49800	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.523121119 CET	443	49799	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.523202896 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.523549080 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.528749943 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:53.530914068 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:53.531029940 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.532597065 CET	443	49803	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.532675028 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:53.564893007 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.565079927 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.566159964 CET	443	49818	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.566373110 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.581729889 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.581789970 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.581809044 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.581851006 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.581964970 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.585485935 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.585721016 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.594691992 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.599891901 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:01:53.600842953 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.601473093 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.603291988 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.641352892 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.649169922 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.649259090 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.649279118 CET	49825	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.664385080 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.665205956 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.666156054 CET	443	49818	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.666496992 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.666558027 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.666616917 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.666620970 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.666667938 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.666673899 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.666719913 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.667082071 CET	443	49818	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.667141914 CET	443	49818	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.667179108 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.667197943 CET	443	49818	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.667201042 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.667249918 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.667260885 CET	443	49818	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.667392015 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.685292006 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.685636997 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.685810089 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.685924053 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.688510895 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.688889980 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.689187050 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.695235014 CET	443	49825	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.697411060 CET	49825	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.701776028 CET	49825	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.710439920 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.722945929 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.722990036 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.723009109 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.723016977 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.723058939 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.723073006 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.734941006 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.735266924 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.735472918 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.735770941 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.747621059 CET	443	49825	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.749310017 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.749337912 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.749362946 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.749507904 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.749557972 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.749643087 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.750081062 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.750143051 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.750154018 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.750216007 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.752615929 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.752729893 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.753032923 CET	443	49799	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.754276037 CET	443	49818	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.754302025 CET	443	49818	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.754326105 CET	443	49818	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.754399061 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.754415989 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.756421089 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.757272959 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.760301113 CET	443	49825	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.760354996 CET	443	49825	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.760391951 CET	443	49825	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.760423899 CET	49825	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.760462046 CET	49825	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.769243002 CET	443	49800	34.205.120.60	192.168.2.5
Mar 19, 2021 08:01:53.779231071 CET	49825	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.781302929 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.781354904 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.781450987 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.782259941 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.782742977 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.782773972 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.782906055 CET	49825	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.784867048 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:53.798449993 CET	49828	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:53.802366972 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.802398920 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.802414894 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.802484035 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.802515030 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.802937984 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.802995920 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.803143978 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.803401947 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.803476095 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.803498983 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.803527117 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.803580046 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.825500011 CET	443	49825	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.825531960 CET	443	49825	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.825608015 CET	49825	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.828891039 CET	443	49825	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.829164982 CET	49825	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.834558964 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.840537071 CET	443	49796	185.33.221.52	192.168.2.5
Mar 19, 2021 08:01:53.840954065 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:53.849680901 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.852142096 CET	443	49828	185.33.221.52	192.168.2.5
Mar 19, 2021 08:01:53.853229046 CET	49828	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:53.861838102 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.863224983 CET	443	49818	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.867178917 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.867763042 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:53.867889881 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:53.872368097 CET	49828	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:53.872419119 CET	49829	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.873248100 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.882889986 CET	49825	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:01:53.884648085 CET	49831	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.887893915 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:53.888890982 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:53.889120102 CET	49832	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.889795065 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.917974949 CET	443	49829	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:53.918121099 CET	49829	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.918325901 CET	443	49830	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:53.918410063 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.918783903 CET	49829	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.919287920 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.926213026 CET	443	49828	185.33.221.52	192.168.2.5
Mar 19, 2021 08:01:53.926234961 CET	443	49828	185.33.221.52	192.168.2.5
Mar 19, 2021 08:01:53.926285028 CET	49828	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:53.927514076 CET	443	49831	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:53.927608967 CET	49831	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.931231976 CET	49828	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:53.931786060 CET	443	49832	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:53.931870937 CET	49832	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.933356047 CET	49831	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.933587074 CET	49832	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.934420109 CET	443	49825	216.58.215.226	192.168.2.5
Mar 19, 2021 08:01:53.943586111 CET	443	49796	185.33.221.52	192.168.2.5
Mar 19, 2021 08:01:53.943671942 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:01:53.948659897 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.954310894 CET	443	49754	54.195.23.91	192.168.2.5
Mar 19, 2021 08:01:53.954396963 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:01:53.958935976 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:53.959036112 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:53.964281082 CET	443	49829	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:53.964322090 CET	443	49830	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:53.964363098 CET	443	49829	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:53.964401007 CET	443	49829	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:53.964437008 CET	49829	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.964462042 CET	443	49829	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:53.964483023 CET	49829	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.964519978 CET	443	49830	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:53.964531898 CET	49829	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.964572906 CET	443	49830	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:53.964601040 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.964617968 CET	443	49830	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:53.964634895 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.964668989 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.966312885 CET	443	49829	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:53.966357946 CET	443	49830	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:53.966398001 CET	49829	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.966414928 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.975553036 CET	443	49831	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:53.975934029 CET	443	49832	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:53.977171898 CET	443	49831	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:53.977230072 CET	443	49831	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:53.977276087 CET	49831	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.977298021 CET	443	49831	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:53.977307081 CET	49831	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.977384090 CET	49831	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.977857113 CET	443	49832	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:53.977916002 CET	49832	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.977947950 CET	443	49832	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:53.977998018 CET	49832	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.978023052 CET	443	49832	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:53.978085041 CET	49832	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.985313892 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.985552073 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.985712051 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.988368034 CET	49831	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.988912106 CET	49831	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:53.989334106 CET	49829	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.989629984 CET	49829	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:53.989942074 CET	49832	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:54.016736031 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:54.016829014 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:54.024332047 CET	443	49828	185.33.221.52	192.168.2.5
Mar 19, 2021 08:01:54.030550003 CET	443	49830	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:54.030584097 CET	443	49830	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:54.030683041 CET	443	49830	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:54.030715942 CET	443	49830	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:54.030745983 CET	443	49831	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:54.030801058 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:54.030859947 CET	49831	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:54.030869961 CET	443	49830	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:54.030930996 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:54.031285048 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:54.033984900 CET	443	49832	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:54.034076929 CET	49832	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:54.034575939 CET	443	49831	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:54.034662962 CET	443	49829	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:54.034714937 CET	49831	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:54.034933090 CET	443	49829	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:54.034950018 CET	443	49829	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:54.035064936 CET	49829	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:54.035099983 CET	443	49829	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:54.035171032 CET	49829	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:54.035602093 CET	49829	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:54.038453102 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:54.053843975 CET	443	49830	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:54.053937912 CET	49830	443	192.168.2.5	13.226.169.83
Mar 19, 2021 08:01:54.055932999 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:54.076514006 CET	443	49830	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:54.081056118 CET	443	49829	13.226.169.83	192.168.2.5
Mar 19, 2021 08:01:54.107260942 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:54.107337952 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:54.124645948 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:01:54.124743938 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:01:54.237212896 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:54.237257957 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:54.237294912 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:54.237330914 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:54.331182957 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:54.331238031 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:54.331262112 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:54.331298113 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:54.358072042 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:54.358118057 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:54.358159065 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:54.358200073 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:54.445341110 CET	443	49791	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:54.445373058 CET	443	49791	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:54.445435047 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:54.445573092 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:55.008867025 CET	443	49793	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:55.008923054 CET	443	49793	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:55.008999109 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:55.009469032 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:55.023703098 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:55.023766041 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:01:55.023809910 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:55.025286913 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:01:55.227612972 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:55.291975021 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:55.292023897 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:55.292121887 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:55.292157888 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:55.649808884 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.654069901 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.691795111 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.691948891 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.695960045 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.696044922 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.711261034 CET	443	49831	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:55.711318970 CET	443	49831	18.156.0.31	192.168.2.5
Mar 19, 2021 08:01:55.711486101 CET	49831	443	192.168.2.5	18.156.0.31
Mar 19, 2021 08:01:55.825812101 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.825927973 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.826667070 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.826742887 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.828830957 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.828924894 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.830939054 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.831012964 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.831037998 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.831060886 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.835160017 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.835227966 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.835273981 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.835297108 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.839416027 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.839488029 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.839494944 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.839529037 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.843596935 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.843666077 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.867716074 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.867826939 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.868273020 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.868315935 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.868359089 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.868402004 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.871207952 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.871251106 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.871287107 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.871314049 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.874517918 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.874567032 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.874636889 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.876844883 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.877468109 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.877513885 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.877538919 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.877558947 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.880261898 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.880306005 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:55.880348921 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:55.880373955 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.008440971 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:56.046109915 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.062021017 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:56.062571049 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:56.062659979 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:56.064310074 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:56.070283890 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.088083029 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.088123083 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.088179111 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.088215113 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.112322092 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.112529039 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.112548113 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.112618923 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.112860918 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.112893105 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.112926006 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.112951040 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.114384890 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.114430904 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.114491940 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.114592075 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.115751028 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.115780115 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.115830898 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.115859985 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.116458893 CET	49834	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.117100954 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.117139101 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.117172003 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.117199898 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.118503094 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.118535995 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.118582010 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.118611097 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.119221926 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.119889021 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.119924068 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.119988918 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.120019913 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.121376038 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.121507883 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.121527910 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.121584892 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.122904062 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.122987032 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.122997046 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.123051882 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.124131918 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.124193907 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.124228001 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.124258995 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.125684023 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.125763893 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.125787020 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.125819921 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.126948118 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.127022028 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.127053976 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.127089977 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.128334999 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.128408909 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.128434896 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.128465891 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.128709078 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:56.128802061 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:56.129748106 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.129817963 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.129853964 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.129894018 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.131202936 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.131267071 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.131309032 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.131347895 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.132482052 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.132529974 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.132566929 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.132595062 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.138130903 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:56.154211044 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.154264927 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.154333115 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.154367924 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.154696941 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.154758930 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.154759884 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.154803991 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.155968904 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.156009912 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.156042099 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.156076908 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.157102108 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.157138109 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.157196045 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.157207966 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.158312082 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.158354044 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.158395052 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.158413887 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.159472942 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.159539938 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.159579039 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.159622908 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.160571098 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.160633087 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.160638094 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.160685062 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.161700964 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.161792994 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.161932945 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.161951065 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.162575006 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.162636042 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.162729979 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.162745953 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.163554907 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.163619041 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.163633108 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.163885117 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.164402008 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.164469004 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.164558887 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.164572001 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.164747000 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.164863110 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.165312052 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.165366888 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.165493965 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.165508986 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.166264057 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.166321993 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.166336060 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.166508913 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.167428970 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.167495966 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.167496920 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.167715073 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.167943001 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.168000937 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.168051958 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.168056965 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.168724060 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.168837070 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.168952942 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.168967962 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.169569016 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.169635057 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.169641018 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.169692993 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.170253992 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.170360088 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.170521021 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.170543909 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.171024084 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.171091080 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.171098948 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.171143055 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.171773911 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.171835899 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.171835899 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.171891928 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.172477007 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.172523975 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.172544956 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.172569036 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.173188925 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.173228979 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.173248053 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.173254967 CET	443	49834	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.173271894 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.173319101 CET	49834	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.173913956 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.173953056 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.173983097 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.174009085 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.174582958 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.174659014 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.174665928 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.174712896 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.175322056 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.175375938 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.175388098 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.175422907 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.176076889 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.176141024 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.176177025 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.176229954 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.176759005 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.176819086 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.176855087 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.176928997 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.177256107 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.177316904 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.177316904 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.177364111 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.177903891 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.177961111 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.177967072 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.178005934 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.178572893 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.178625107 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.178627014 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.178672075 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.179208040 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.179261923 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.179598093 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.179651022 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.179889917 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.179950953 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.179953098 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.180000067 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.195858002 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.195909023 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.195939064 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.195971012 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.196212053 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.196249008 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.196265936 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.196278095 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.196293116 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.196320057 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.197177887 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.197220087 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.197252035 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.197264910 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.197292089 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.197295904 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.198076963 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.198132038 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.198142052 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.198174953 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.198177099 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.198224068 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.199004889 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.199064016 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.199088097 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.199105024 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.199109077 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.199194908 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.200010061 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.200047016 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:01:56.200086117 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.200112104 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:01:56.202136993 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.202441931 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:56.202517033 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:56.205189943 CET	49834	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.247760057 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.248214960 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.248258114 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.248296976 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.248347044 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.250184059 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.250216961 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.250286102 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.250329971 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.250680923 CET	443	49834	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.250830889 CET	443	49834	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.250864983 CET	443	49834	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.250915051 CET	49834	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.250946999 CET	49834	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.252799034 CET	443	49834	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.252840996 CET	443	49834	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.252926111 CET	49834	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.252957106 CET	49834	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.257906914 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.258233070 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.258419037 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.261399031 CET	49834	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.261703968 CET	49834	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.303574085 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.303674936 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.303879976 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.304781914 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.304848909 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.304867983 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.304918051 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.306862116 CET	443	49834	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.306930065 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.306984901 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.306998968 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.307049036 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.307053089 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.307092905 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.307097912 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.307137012 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.307143927 CET	443	49834	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.307197094 CET	443	49834	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.307281971 CET	49834	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.307303905 CET	443	49834	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.307353020 CET	49834	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.308228970 CET	49834	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.308649063 CET	49835	443	192.168.2.5	99.86.159.26
Mar 19, 2021 08:01:56.353665113 CET	443	49834	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.354152918 CET	443	49835	99.86.159.26	192.168.2.5
Mar 19, 2021 08:01:56.371042013 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:56.398164988 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.398296118 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.435481071 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:01:56.435594082 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:01:56.439975977 CET	443	49836	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.440006018 CET	443	49837	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.440049887 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.440098047 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.441303015 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.441330910 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.483247042 CET	443	49837	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.483303070 CET	443	49836	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.484951973 CET	443	49837	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.484997034 CET	443	49837	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.485032082 CET	443	49837	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.485055923 CET	443	49837	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.485054970 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.485090971 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.485093117 CET	443	49836	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.485095978 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.485107899 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.485126972 CET	443	49836	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.485157013 CET	443	49836	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.485173941 CET	443	49836	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.485178947 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.485224009 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.485229015 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.485234022 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.488387108 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.488667011 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.496889114 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.497212887 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.530570030 CET	443	49836	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.530725002 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.532495022 CET	443	49836	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.532599926 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.539208889 CET	443	49837	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.539277077 CET	443	49837	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.539354086 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.540666103 CET	443	49837	3.126.239.96	192.168.2.5
Mar 19, 2021 08:01:56.540890932 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:01:56.541558027 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:56.542027950 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:56.595520020 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:56.595671892 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:56.595750093 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:56.596031904 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:56.596110106 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:56.597565889 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:56.661698103 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:56.663367033 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:56.663388968 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:01:56.663448095 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:56.663489103 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:01:56.664709091 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:56.718928099 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:56.718966961 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:56.719069004 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:56.719125032 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:56.867171049 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:01:56.921511889 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:01:56.921606064 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:01.130059958 CET	443	49749	178.250.2.130	192.168.2.5
Mar 19, 2021 08:02:01.130122900 CET	443	49749	178.250.2.130	192.168.2.5
Mar 19, 2021 08:02:01.130172968 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:02:01.130220890 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:02:01.130264044 CET	49749	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:02:01.130290985 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:02:01.130309105 CET	49749	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:02:01.130322933 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:02:01.322448015 CET	49748	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:02:01.322627068 CET	49749	443	192.168.2.5	178.250.2.130
Mar 19, 2021 08:02:01.371690989 CET	443	49749	178.250.2.130	192.168.2.5
Mar 19, 2021 08:02:01.371830940 CET	443	49748	178.250.2.130	192.168.2.5
Mar 19, 2021 08:02:01.934077978 CET	443	49765	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:01.934142113 CET	443	49765	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:01.934288025 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:01.934317112 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:01.952120066 CET	443	49764	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:01.952172995 CET	443	49764	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:01.952265978 CET	49764	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:01.955867052 CET	49764	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:02.684919119 CET	49765	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:02.686916113 CET	49764	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:02.736929893 CET	443	49765	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:02.739479065 CET	443	49764	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:03.037693977 CET	443	49786	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:03.037751913 CET	443	49786	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:03.037772894 CET	49786	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:03.037816048 CET	49786	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:03.057682037 CET	443	49785	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:03.057723999 CET	443	49785	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:03.057770014 CET	49785	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:03.057813883 CET	49785	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:03.095422983 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:03.095506907 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:03.095547915 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:03.095597982 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:03.095707893 CET	49795	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:03.143394947 CET	443	49795	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:03.940546989 CET	443	49796	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:03.940581083 CET	443	49796	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:03.940644026 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:03.940673113 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:06.843995094 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:06.971134901 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:06.971688986 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:06.971729040 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:06.971867085 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:06.975080013 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:17.131283045 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.132188082 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.258312941 CET	443	49852	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.258409977 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.259061098 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.259604931 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.259708881 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.260231018 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.386131048 CET	443	49852	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.387001038 CET	443	49852	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.387032032 CET	443	49852	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.387056112 CET	443	49852	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.387079000 CET	443	49852	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.387116909 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.387159109 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.387643099 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.388580084 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.388605118 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.388628006 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.388649940 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.388683081 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.388711929 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.391567945 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.392005920 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.392124891 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.392273903 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.392494917 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.518747091 CET	443	49852	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.518765926 CET	443	49852	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.518903017 CET	443	49852	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.518918037 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.518961906 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.519612074 CET	443	49852	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.519634962 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.519639015 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.519682884 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.519692898 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.519747972 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.519777060 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.519799948 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.519850016 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.520339966 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:17.687899113 CET	443	49852	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:17.687964916 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:21.846430063 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:21.974248886 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:21.974281073 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:21.974356890 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:21.974402905 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:26.285459042 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:02:26.295676947 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:26.337033987 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:02:26.337138891 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:02:26.422620058 CET	443	49852	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:26.422915936 CET	443	49852	34.234.127.242	192.168.2.5
Mar 19, 2021 08:02:26.422988892 CET	49852	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:02:27.081221104 CET	443	49836	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:27.081254005 CET	443	49837	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:27.081331015 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:27.081340075 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:27.528610945 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:02:27.539764881 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:02:27.565455914 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.566443920 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:27.592171907 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:02:27.599884987 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:02:27.599910975 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:02:27.599993944 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:02:27.600023985 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:02:27.603609085 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:27.610974073 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:27.611020088 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:27.611068010 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:02:27.611125946 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:02:27.612026930 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.612957001 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:27.631906986 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.631948948 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.632028103 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.632061005 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.632328987 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.632373095 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.632399082 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.632421970 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.633121967 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.633162022 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.633199930 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.633225918 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.633956909 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.634000063 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.634032011 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:27.634032011 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.634057999 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.634110928 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:27.634692907 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.634732008 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.634763956 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.634787083 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.635545969 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.635586977 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.635618925 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.635646105 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.636288881 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.636329889 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.636363029 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.636410952 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.637054920 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.637096882 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.637129068 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.637154102 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.637840033 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.637914896 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.639117956 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.691329002 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:27.934319973 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:27.982744932 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:27.982815981 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:27.982877970 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:27.982938051 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:27.983010054 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:28.029448986 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.047892094 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.047939062 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.048099041 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.048239946 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.048276901 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.048304081 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.048326969 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.048332930 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.049052954 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.049098969 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.049191952 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.049213886 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.049818993 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.049858093 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.049896002 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.049921036 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.050623894 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.050668001 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.050764084 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.051426888 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.051469088 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.052181959 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.052220106 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.052257061 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.052313089 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.052977085 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.053020000 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.053760052 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.053802013 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.053842068 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.053891897 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.054553986 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.054594994 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.055371046 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.055421114 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.055458069 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.055506945 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.056185961 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.056309938 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.056602955 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.056896925 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.056942940 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.056988001 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.057038069 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.057703972 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.057744026 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.057908058 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.058482885 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.058523893 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.058752060 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.059276104 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.059325933 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.060082912 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.060126066 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.060131073 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.060198069 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.060854912 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.060898066 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.061259031 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.061640978 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.061691046 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.062371969 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.062393904 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.064325094 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.064434052 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.064513922 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.064536095 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.065268040 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.065304995 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.065349102 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.065418005 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.066049099 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.066092014 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.066304922 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.066864967 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.066909075 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.067619085 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.067642927 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.067682028 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.067774057 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.068427086 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.068470955 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.069225073 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.069267988 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.069302082 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.069339991 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.069992065 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.070040941 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.070074081 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.070096016 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.070787907 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.070837021 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.070909023 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.071566105 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.071604013 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.072354078 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.072396040 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.072427034 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.072448969 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.073153973 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.073302984 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.073760033 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.073920012 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.074124098 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.080487013 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.080620050 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.080657005 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.080658913 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.081422091 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.081442118 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.081485987 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.081775904 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.082196951 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.082250118 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.082463980 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.082986116 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.083029985 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.083549976 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.083774090 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.083817959 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.083997011 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.084556103 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.084594011 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.085351944 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.085418940 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.085458040 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.086136103 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.086173058 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.086182117 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.088618040 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.090055943 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:28.143362999 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:28.349071026 CET	49869	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.349132061 CET	49868	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.399676085 CET	443	49868	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:28.399703979 CET	443	49869	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:28.399847031 CET	49868	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.399991989 CET	49869	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.400521040 CET	49868	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.401159048 CET	49869	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.451129913 CET	443	49868	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:28.451617956 CET	443	49869	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:28.451726913 CET	49869	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.451731920 CET	49868	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.452241898 CET	49869	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.452570915 CET	49868	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.455805063 CET	49868	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.455823898 CET	49869	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.456027985 CET	49868	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.507782936 CET	443	49868	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:28.507829905 CET	443	49868	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:28.507858038 CET	443	49869	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:28.507883072 CET	443	49869	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:28.507949114 CET	49868	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.508045912 CET	49869	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.508192062 CET	49868	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.508241892 CET	49869	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.508907080 CET	443	49868	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:28.510097027 CET	49868	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:28.599453926 CET	443	49868	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:28.599510908 CET	443	49869	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:31.497003078 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:31.497184038 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:31.624241114 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:02:31.624716997 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:02:31.624742031 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:02:31.624860048 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:31.625348091 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:31.625401974 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:31.625406027 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:31.625586033 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:31.625725031 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:32.084439039 CET	443	49837	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:32.084489107 CET	443	49836	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:32.084527969 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:32.084594965 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:36.970041037 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:02:37.027369976 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:02:37.027848959 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:02:38.259129047 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:02:38.330147982 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:02:38.330182076 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:02:38.330317974 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:02:38.556636095 CET	443	49868	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:38.556704044 CET	443	49868	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:38.556745052 CET	443	49869	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:38.556782961 CET	443	49869	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:38.556822062 CET	49868	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:38.556870937 CET	49868	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:38.557338953 CET	49869	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:39.253484011 CET	49869	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:39.253936052 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:02:39.254097939 CET	49868	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:39.304030895 CET	443	49869	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:39.304363966 CET	443	49868	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:39.359507084 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:39.793731928 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:39.793752909 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:39.793845892 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:02:39.793886900 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:02:40.065313101 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:40.096883059 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:40.111654997 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:40.129869938 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:40.130136967 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:40.130207062 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:40.130619049 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:40.131000996 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:40.165101051 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:40.165311098 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:40.182327986 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:40.360225916 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:40.385704994 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:40.432256937 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:40.511428118 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:40.511504889 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:40.511511087 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:40.511559963 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:40.542125940 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:40.542210102 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:40.542248964 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:40.542273045 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:41.853615046 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:41.854748964 CET	49879	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:41.904062033 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:41.904150963 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:41.905039072 CET	443	49879	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:41.905121088 CET	49879	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:41.910300970 CET	49879	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:41.910491943 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:41.961173058 CET	443	49879	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:41.961215019 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:41.961262941 CET	49879	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:41.961292982 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:41.961879969 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:41.961891890 CET	49879	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:41.964456081 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:41.964838028 CET	49879	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:41.964965105 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:42.015024900 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:42.015080929 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:42.015119076 CET	443	49879	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:42.015157938 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:42.015163898 CET	443	49879	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:42.015674114 CET	49879	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:42.015675068 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:42.015779018 CET	49879	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:42.016352892 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:42.016438007 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:42.088376999 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:42.091814995 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:42.106482983 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:42.106534958 CET	443	49879	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:42.216396093 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:42.216471910 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:42.216542006 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:42.216590881 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:42.219600916 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:02:42.219650030 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:02:42.219736099 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:42.219758034 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:42.967109919 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.967180967 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.967677116 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.967726946 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.968099117 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.968128920 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.968535900 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.968563080 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.969011068 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.969032049 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.969553947 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.969602108 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.971061945 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.971138954 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.972179890 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:42.991494894 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:42.991539955 CET	49796	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:42.995841026 CET	49828	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:42.997754097 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:43.000804901 CET	49785	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.000853062 CET	49785	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.001281023 CET	49786	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.001327038 CET	49786	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.006970882 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.007514954 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.009133101 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.009485960 CET	443	49789	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.009557009 CET	49789	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.010107040 CET	443	49794	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.010179996 CET	49794	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.010279894 CET	443	49793	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.010337114 CET	49793	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.010653019 CET	443	49792	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.010724068 CET	49792	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.010859966 CET	443	49790	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.010921001 CET	49790	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.012146950 CET	443	49791	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.012299061 CET	49791	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.013850927 CET	443	49883	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.013883114 CET	443	49884	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.013976097 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.014008999 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.014868975 CET	443	49885	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.014982939 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.016684055 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.016844988 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.017018080 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.045306921 CET	443	49796	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:43.049734116 CET	443	49828	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:43.049818993 CET	49828	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:43.051549911 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:43.051654100 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:43.054586887 CET	443	49785	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.055066109 CET	443	49786	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.059165001 CET	443	49883	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.059243917 CET	443	49885	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.059355021 CET	443	49884	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.060698032 CET	443	49883	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.060740948 CET	443	49883	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.060775042 CET	443	49883	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.060811996 CET	443	49884	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.060858011 CET	443	49884	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.060864925 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.060878992 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.060898066 CET	443	49884	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.060900927 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.060906887 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.060914993 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.060926914 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.060937881 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.061009884 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.061117887 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.061187029 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.061255932 CET	443	49885	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.061295033 CET	443	49885	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.061322927 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.061330080 CET	443	49885	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.061363935 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.061382055 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.062587976 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.062752962 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.070835114 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:43.078785896 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.078985929 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.079765081 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.083153009 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.083225012 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.083349943 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.084606886 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.084731102 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.085695982 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.116364002 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:43.124680042 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:43.124713898 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:43.124866009 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:43.125549078 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:43.125900030 CET	443	49885	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.125946999 CET	443	49884	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.126015902 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.126032114 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.126576900 CET	443	49883	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.126668930 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.128137112 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:43.132491112 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.132528067 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.132628918 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.132785082 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.132822990 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.132888079 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.133439064 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.133694887 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.133766890 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.136650085 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.136693001 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.136734962 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.141084909 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.141618013 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.141721964 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.164792061 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:43.164916039 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:43.165621042 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:43.166146994 CET	443	49884	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.166616917 CET	443	49885	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.167344093 CET	443	49883	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.181535006 CET	443	49883	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.181571007 CET	443	49883	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.181727886 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.181763887 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.181781054 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:43.185869932 CET	443	49885	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.185906887 CET	443	49885	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.185986996 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.186038971 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.194679976 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.195070028 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.195298910 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.213458061 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:43.213586092 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:43.214219093 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:43.216929913 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:43.216950893 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:43.251936913 CET	443	49884	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.251960993 CET	443	49884	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:43.252043962 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.252088070 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:43.264332056 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:43.264360905 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:43.264486074 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:43.264549971 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:43.265436888 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:43.271279097 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.271305084 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.271401882 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.271426916 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.275666952 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.275697947 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.275774002 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.275796890 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.311062098 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.311098099 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:43.311197996 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.311229944 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:43.312798023 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:43.360800982 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:43.362253904 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:43.362543106 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:43.410077095 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:43.410109997 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:43.410166979 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:43.410222054 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:43.439572096 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:43.452337980 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:43.462821960 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:43.462949991 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:43.504504919 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:43.504543066 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:43.504642963 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:43.504678965 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:43.615066051 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:02:43.621087074 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:02:43.624792099 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:43.624949932 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:43.627872944 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:02:43.634429932 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:43.675457954 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:02:43.679147959 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:02:43.679239988 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:02:43.679246902 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:02:43.679383039 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:02:43.679442883 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:02:43.679498911 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:02:43.679763079 CET	49805	443	192.168.2.5	35.244.174.68
Mar 19, 2021 08:02:43.688492060 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:43.688577890 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:43.690402031 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:43.690474033 CET	443	49810	54.78.254.47	192.168.2.5
Mar 19, 2021 08:02:43.691179991 CET	443	49810	54.78.254.47	192.168.2.5
Mar 19, 2021 08:02:43.691318035 CET	49810	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:02:43.720081091 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:43.733500957 CET	443	49805	35.244.174.68	192.168.2.5
Mar 19, 2021 08:02:43.742727041 CET	443	49799	34.205.120.60	192.168.2.5
Mar 19, 2021 08:02:43.743799925 CET	443	49799	34.205.120.60	192.168.2.5
Mar 19, 2021 08:02:43.743916988 CET	49799	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:02:43.745254040 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:43.754602909 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:43.754693031 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:43.781492949 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:43.784557104 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:43.784672022 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:43.791403055 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:43.811753035 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:43.811803102 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:43.811940908 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:43.811990976 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:43.812172890 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:43.812211990 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:43.812263966 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:43.812290907 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:43.813028097 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:43.813302994 CET	49824	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:43.828680038 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:43.848903894 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.848944902 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.849292040 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.849320889 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.850500107 CET	49891	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.851488113 CET	49892	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.863718987 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:43.865428925 CET	443	49824	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:43.870914936 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:43.877933979 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:43.878042936 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:43.890903950 CET	443	49837	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:43.891032934 CET	49837	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.891045094 CET	443	49836	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:43.891123056 CET	49836	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.892314911 CET	443	49891	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:43.892461061 CET	49891	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.893035889 CET	443	49892	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:43.893093109 CET	49891	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.893124104 CET	49892	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.894133091 CET	49892	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.927942991 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:43.928050995 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:43.934916019 CET	443	49891	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:43.934962034 CET	443	49891	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:43.935044050 CET	49891	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.935049057 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:43.935120106 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:43.935693026 CET	443	49892	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:43.935736895 CET	443	49892	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:43.935796022 CET	49892	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.947377920 CET	49891	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.949525118 CET	49891	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.950520039 CET	49892	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.991446972 CET	443	49891	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:43.993207932 CET	443	49891	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:43.993345976 CET	49891	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:43.998918056 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:43.999485016 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:44.034893036 CET	443	49892	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:44.053121090 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:44.053185940 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:44.053467035 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:44.053545952 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:44.054280996 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:44.055699110 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:02:44.121754885 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:02:44.121802092 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:02:44.121908903 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:02:44.121958017 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:02:44.123717070 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:44.178412914 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:44.178461075 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:44.178495884 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:44.178529978 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:44.213119030 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:44.213175058 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:44.213202000 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:44.213228941 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:44.213238955 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:44.213268995 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:44.213275909 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:44.213279963 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:44.215840101 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:44.234420061 CET	443	49883	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:44.234477043 CET	443	49883	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:44.234611034 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:44.234648943 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:44.255244970 CET	443	49884	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:44.255284071 CET	443	49884	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:44.255340099 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:44.255378008 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:44.263551950 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:45.132951021 CET	443	49885	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:45.133009911 CET	443	49885	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:45.133136034 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:45.133199930 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:47.459908009 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:02:47.512114048 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:02:47.515818119 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:02:48.531923056 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:02:48.538383007 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:02:48.602137089 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:48.604506016 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:02:48.604530096 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:02:48.604641914 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:02:48.713474989 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:48.715956926 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:48.759537935 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:48.777133942 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:48.777338028 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:48.777468920 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:48.777544975 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:48.777570963 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:48.777622938 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:48.791992903 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:48.792162895 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:48.794301033 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:48.845278025 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:48.928519964 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:48.928845882 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:48.975431919 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:49.063605070 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:49.063683987 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:49.063702106 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:49.063745975 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:49.079549074 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:49.079595089 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:49.079679012 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:49.081723928 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:49.110358953 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:49.110379934 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:49.110538960 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:02:49.299041033 CET	443	49728	192.229.233.25	192.168.2.5
Mar 19, 2021 08:02:49.299170971 CET	49728	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:02:49.439759016 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:49.491085052 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:49.494785070 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:49.494884014 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:49.618887901 CET	443	49728	192.229.233.25	192.168.2.5
Mar 19, 2021 08:02:49.618896008 CET	443	49728	192.229.233.25	192.168.2.5
Mar 19, 2021 08:02:49.619026899 CET	49728	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:02:49.623548985 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:49.634900093 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:49.751211882 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:02:49.751249075 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:02:49.751403093 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:49.751447916 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:49.762644053 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:49.762686968 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:49.762758970 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:49.762800932 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:49.923401117 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:49.926476955 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:49.930810928 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:49.931991100 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:49.932209015 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:49.971683025 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:49.985799074 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:49.985838890 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:50.017534971 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:50.021370888 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:50.025636911 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:50.043620110 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:50.043653011 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:50.043750048 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:50.043781042 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:50.050201893 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:50.050229073 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:50.050343990 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:50.055263042 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:50.055286884 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:50.055382967 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:50.064306021 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:50.064901114 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:50.111756086 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:50.111774921 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:50.111955881 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:50.118639946 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:50.123486996 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:50.123603106 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:50.142329931 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:50.170506954 CET	49891	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:50.189971924 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:50.215235949 CET	443	49891	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:50.215446949 CET	49891	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:50.314352989 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:50.314378023 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:50.314503908 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:50.322006941 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:50.322359085 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:50.363075018 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:50.363956928 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:50.419501066 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:50.419512987 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:50.419662952 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:50.421786070 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:02:50.450058937 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:50.479211092 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:50.489516973 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:02:50.489535093 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:02:50.489653111 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:02:50.492624044 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:50.498390913 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.498404026 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.544034004 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:50.544836998 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:50.546709061 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:50.546720028 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:50.546874046 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:50.890726089 CET	443	49737	52.50.244.146	192.168.2.5
Mar 19, 2021 08:02:50.890763998 CET	443	49737	52.50.244.146	192.168.2.5
Mar 19, 2021 08:02:50.890782118 CET	443	49737	52.50.244.146	192.168.2.5
Mar 19, 2021 08:02:50.890836954 CET	49737	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:02:50.890872002 CET	49737	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:02:50.891777039 CET	49737	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:02:50.910352945 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.910398006 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.910665035 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:50.910669088 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.910700083 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.910780907 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:50.911432981 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.911468029 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.911587000 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:50.912184000 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.912219048 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.912302971 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:50.912971020 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.912990093 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.913059950 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:50.914375067 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.914567947 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:50.914870024 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:50.954221010 CET	443	49737	52.50.244.146	192.168.2.5
Mar 19, 2021 08:02:50.961525917 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:50.968782902 CET	443	49740	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:50.968801022 CET	443	49740	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:50.968894958 CET	49740	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:02:50.971122026 CET	49740	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:02:51.003380060 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.035557985 CET	443	49740	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:51.045005083 CET	443	49752	52.50.156.162	192.168.2.5
Mar 19, 2021 08:02:51.045023918 CET	443	49752	52.50.156.162	192.168.2.5
Mar 19, 2021 08:02:51.045165062 CET	49752	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:02:51.045355082 CET	49752	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:02:51.049531937 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.067548990 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.067574978 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.068006992 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.068595886 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.068617105 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.069426060 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.070736885 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.070756912 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.071216106 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.072945118 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.072966099 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.074245930 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.075134039 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.075155020 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.075299025 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.077230930 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.077251911 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.077363014 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.079406023 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.079427958 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.079771996 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.081548929 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.081569910 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.082096100 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.083730936 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.083746910 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.085432053 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.085843086 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.085859060 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.086527109 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.088063002 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.088078976 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.088253021 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.090174913 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.090399981 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.092463017 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:51.109504938 CET	443	49752	52.50.156.162	192.168.2.5
Mar 19, 2021 08:02:51.144299984 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:51.389862061 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:02:51.389991045 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:02:51.963782072 CET	443	49755	54.195.23.91	192.168.2.5
Mar 19, 2021 08:02:51.963917017 CET	49755	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:02:52.063810110 CET	443	49879	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:52.063862085 CET	443	49879	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:52.063937902 CET	49879	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:52.063963890 CET	49879	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:52.064148903 CET	49879	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:52.118592024 CET	443	49879	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:53.110215902 CET	443	49784	34.248.172.235	192.168.2.5
Mar 19, 2021 08:02:53.110238075 CET	443	49783	34.248.172.235	192.168.2.5
Mar 19, 2021 08:02:53.110377073 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:02:53.112226963 CET	49783	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:02:53.225924969 CET	443	49803	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:53.225958109 CET	443	49803	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:53.226079941 CET	49803	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:53.247241020 CET	49803	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:53.300690889 CET	443	49803	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:53.446937084 CET	443	49809	54.78.254.47	192.168.2.5
Mar 19, 2021 08:02:53.446959972 CET	443	49809	54.78.254.47	192.168.2.5
Mar 19, 2021 08:02:53.447098970 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:02:53.447277069 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:02:53.447287083 CET	49809	443	192.168.2.5	54.78.254.47
Mar 19, 2021 08:02:53.509258032 CET	443	49809	54.78.254.47	192.168.2.5
Mar 19, 2021 08:02:53.633150101 CET	443	49818	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:53.633173943 CET	443	49818	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:53.633322954 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:53.633373976 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:53.633708954 CET	49818	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:53.699017048 CET	443	49818	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:53.727240086 CET	443	49800	34.205.120.60	192.168.2.5
Mar 19, 2021 08:02:53.727268934 CET	443	49800	34.205.120.60	192.168.2.5
Mar 19, 2021 08:02:53.727441072 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:02:53.727468967 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:02:53.728223085 CET	49800	443	192.168.2.5	34.205.120.60
Mar 19, 2021 08:02:53.855302095 CET	443	49800	34.205.120.60	192.168.2.5
Mar 19, 2021 08:02:53.961158037 CET	443	49754	54.195.23.91	192.168.2.5
Mar 19, 2021 08:02:53.961272955 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:02:54.966886997 CET	49716	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:02:54.967077971 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:02:55.009800911 CET	443	49716	104.19.149.54	192.168.2.5
Mar 19, 2021 08:02:55.009856939 CET	49716	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:02:55.032644033 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:02:55.035696030 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:02:56.149913073 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:02:56.150959015 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:02:56.216211081 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:56.220570087 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:56.220599890 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:02:56.220685005 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:02:56.220726967 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:02:56.226219893 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:02:56.226246119 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:02:56.226344109 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:02:56.226376057 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:02:56.820635080 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:02:56.820678949 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:02:56.820708036 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:02:56.820836067 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:02:56.820904970 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:02:56.830656052 CET	49763	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:02:56.872314930 CET	443	49763	185.60.216.19	192.168.2.5
Mar 19, 2021 08:02:56.908502102 CET	49744	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:56.954653025 CET	443	49744	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:56.954883099 CET	49744	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:56.961464882 CET	443	49755	54.195.23.91	192.168.2.5
Mar 19, 2021 08:02:56.961678028 CET	49755	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:02:57.029931068 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:57.030328989 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:57.030623913 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:57.075738907 CET	443	49746	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:57.075954914 CET	49746	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:57.076590061 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:57.094517946 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:57.094558954 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:57.094578981 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:57.094686031 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:57.094719887 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:57.096108913 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:57.097232103 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:57.097347021 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:57.147367001 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:57.153311968 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:02:57.153367043 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:02:57.153422117 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:02:57.153527975 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:02:57.156543016 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:02:57.195357084 CET	49762	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:02:57.234172106 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:02:57.234272003 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.234384060 CET	49753	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.235980988 CET	49893	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.236906052 CET	49894	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.238127947 CET	443	49762	185.60.216.19	192.168.2.5
Mar 19, 2021 08:02:57.275984049 CET	443	49751	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.276026964 CET	443	49753	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.276122093 CET	49751	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.276148081 CET	49753	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.277297974 CET	443	49893	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.277434111 CET	49893	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.278414965 CET	443	49894	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.278525114 CET	49894	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.278945923 CET	49893	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.299221039 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:02:57.299258947 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:02:57.299365044 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:02:57.299401999 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:02:57.312705994 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:57.315918922 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:57.320184946 CET	443	49893	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.328254938 CET	443	49893	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.328464031 CET	49893	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.330040932 CET	49893	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.334064007 CET	49893	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.334274054 CET	49893	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.363418102 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:57.364439011 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:57.364515066 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:57.371503115 CET	443	49893	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.371589899 CET	49893	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.376286030 CET	443	49893	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.376444101 CET	49893	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.379791975 CET	49893	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.384188890 CET	49894	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.384435892 CET	443	49893	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.384526014 CET	49893	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.384907961 CET	49893	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.426935911 CET	443	49893	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.426968098 CET	443	49894	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.433574915 CET	443	49893	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.434679985 CET	443	49894	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.434844971 CET	49894	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.473983049 CET	49894	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.476294041 CET	49894	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.517534018 CET	443	49894	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.517695904 CET	49894	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.517946005 CET	49894	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.518733978 CET	443	49894	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.518826008 CET	49894	443	192.168.2.5	34.120.133.55
Mar 19, 2021 08:02:57.519221067 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:57.519242048 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:02:57.519298077 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:57.519335985 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:02:57.565640926 CET	443	49894	34.120.133.55	192.168.2.5
Mar 19, 2021 08:02:57.843555927 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:02:57.843580961 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:02:57.843605042 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:02:57.843672037 CET	49780	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:02:57.843708992 CET	49780	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:02:57.844177961 CET	49780	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:02:57.887201071 CET	443	49780	185.60.216.35	192.168.2.5
Mar 19, 2021 08:02:58.117686987 CET	443	49784	34.248.172.235	192.168.2.5
Mar 19, 2021 08:02:58.117815971 CET	49784	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:02:58.120650053 CET	443	49783	34.248.172.235	192.168.2.5
Mar 19, 2021 08:02:58.120724916 CET	49783	443	192.168.2.5	34.248.172.235
Mar 19, 2021 08:02:58.188688993 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:58.240498066 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:58.240519047 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:02:58.241303921 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:02:58.393574953 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:58.397026062 CET	49895	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:58.400661945 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:58.431258917 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:58.432183027 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:58.432518005 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:58.432729006 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:58.434478998 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.434514046 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.435214043 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.435240984 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.435725927 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.435767889 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.438905954 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.440484047 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.440491915 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.440593004 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.442109108 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.442222118 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.452210903 CET	443	49895	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:58.452343941 CET	49895	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:58.453489065 CET	49895	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:58.455946922 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:58.477891922 CET	443	49885	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.477941036 CET	49885	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.478928089 CET	443	49884	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.478990078 CET	49884	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.479402065 CET	443	49883	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.479460001 CET	49883	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.481328964 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:58.481345892 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:58.482728004 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.482835054 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.483572960 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.483805895 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.483872890 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.483880043 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.483935118 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.484118938 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.484170914 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.485529900 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.485599041 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.486078024 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.486346960 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.486358881 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:58.486423016 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.486721992 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:58.487407923 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.487756014 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.488279104 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:58.489001989 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.496471882 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.508583069 CET	443	49895	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:58.508812904 CET	443	49895	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:58.508905888 CET	49895	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:58.510691881 CET	49895	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:58.512801886 CET	49895	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:58.526731968 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.527544975 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.528073072 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.528090954 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.528105974 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.528201103 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.528239965 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.528681993 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.528698921 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.528714895 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.528742075 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.528775930 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.528855085 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.529293060 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.530148029 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.530168056 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.530179024 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.530199051 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.530215979 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.530229092 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.530232906 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.530286074 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.530848980 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.530996084 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.531810999 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.532221079 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.532226086 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.532274008 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.532279015 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.532289028 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.532331944 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.535902023 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.537024021 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.537282944 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:58.537571907 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.537626028 CET	49895	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:58.537885904 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.538074970 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:58.538244009 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:58.538820982 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.538839102 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.538852930 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.538882971 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.538913965 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.539707899 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.539879084 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.542862892 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.547646046 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.547949076 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.548361063 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:58.548376083 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:58.548429966 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:58.553308010 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.553685904 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.566360950 CET	443	49895	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:58.572443962 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:58.572457075 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:58.572506905 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:58.572539091 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:58.574031115 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.574549913 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.574613094 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.575864077 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:58.575887918 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:02:58.575931072 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:58.575963020 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:02:58.577483892 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.577533960 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.578685045 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.578749895 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.582088947 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.582163095 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.585578918 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:58.585592985 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:58.585602999 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:58.585659027 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:58.585676908 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:58.585798025 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:58.589355946 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.589411974 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.590770960 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:58.592247963 CET	443	49895	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:58.592325926 CET	49895	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:58.594888926 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.594954014 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.618962049 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.620332003 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.624320030 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.626832008 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:02:58.626929045 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:02:58.629229069 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.632344007 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.632374048 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.632420063 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.632452965 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.634974003 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.635435104 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:58.635521889 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:58.646636963 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.646656990 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.646725893 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.648561001 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.648591995 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.648643970 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.648688078 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.654462099 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.665842056 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.665879011 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.665960073 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.665991068 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.668735027 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.668766975 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.668781996 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.668813944 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.673027039 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.673058987 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.673100948 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.673142910 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.685301065 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:58.685331106 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:58.688929081 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.691001892 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.692603111 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.694216013 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.696727037 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.732532024 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.734108925 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.738312006 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.739161015 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.739804029 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:58.752870083 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.752902031 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.753000975 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.753022909 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.770092964 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.776400089 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.787532091 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.787558079 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.787592888 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.787619114 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.792687893 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.792711020 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.792776108 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.792800903 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.795439005 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.795464039 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.795505047 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.795536041 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.798196077 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.798223972 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.798264027 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.798294067 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.800801992 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.800832987 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.800859928 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.800888062 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.801088095 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:58.801142931 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:58.801152945 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:02:58.801199913 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:02:58.803863049 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:58.803885937 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:58.803993940 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:58.855526924 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.857345104 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.859721899 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.862529993 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.864794016 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.866897106 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.891742945 CET	49769	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:58.891961098 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:58.897950888 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.900037050 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.901304960 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.904040098 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.906471968 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.908483028 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.909476042 CET	49771	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:58.912306070 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:58.955936909 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.955981970 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.956089020 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.956116915 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.957804918 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.957842112 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.957958937 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.960051060 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.960083008 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.960172892 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.960202932 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.962126017 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.962157965 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.962276936 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.962320089 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.966708899 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.966744900 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.966785908 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.966813087 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.975992918 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:58.976429939 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.976470947 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:02:58.976541996 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.976571083 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:02:58.979168892 CET	443	49754	54.195.23.91	192.168.2.5
Mar 19, 2021 08:02:58.979286909 CET	49754	443	192.168.2.5	54.195.23.91
Mar 19, 2021 08:02:59.011982918 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:59.018845081 CET	443	49769	52.73.84.222	192.168.2.5
Mar 19, 2021 08:02:59.018985033 CET	49769	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:59.019443989 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:02:59.019483089 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:02:59.019529104 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:59.019557953 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:02:59.030102968 CET	49892	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:59.030667067 CET	49891	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:59.031749010 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:59.032749891 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:59.035090923 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:59.036711931 CET	443	49771	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:59.036823034 CET	49771	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:59.040451050 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:59.040484905 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:59.040572882 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:59.040621996 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:59.071908951 CET	443	49892	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:59.071940899 CET	443	49892	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:59.071997881 CET	49892	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:59.072061062 CET	49892	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:59.074265003 CET	443	49891	3.126.239.96	192.168.2.5
Mar 19, 2021 08:02:59.074856997 CET	49891	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:02:59.076303005 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:59.077153921 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:59.099806070 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:02:59.099984884 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:02:59.106945992 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:02:59.106969118 CET	443	49797	52.95.116.38	192.168.2.5
Mar 19, 2021 08:02:59.107059956 CET	49797	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:02:59.111725092 CET	49757	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:59.111990929 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:59.124838114 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:02:59.124852896 CET	443	49798	52.95.116.38	192.168.2.5
Mar 19, 2021 08:02:59.124938011 CET	49798	443	192.168.2.5	52.95.116.38
Mar 19, 2021 08:02:59.158303022 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:59.158884048 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:59.160341024 CET	443	49757	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:59.160459995 CET	49757	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:59.160737991 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:59.160758018 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:59.212371111 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:59.212403059 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:59.212515116 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:59.212841034 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:59.214593887 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:02:59.214608908 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:59.279366970 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:02:59.279390097 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:02:59.279465914 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:02:59.324134111 CET	49904	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.325681925 CET	49905	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.327541113 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:59.369771004 CET	443	49904	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.370227098 CET	49904	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.370961905 CET	443	49905	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.371006966 CET	49904	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.371067047 CET	49905	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.381540060 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:59.381587029 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:02:59.381680965 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:59.381731987 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:02:59.403568029 CET	49905	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.416302919 CET	443	49904	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.416382074 CET	443	49904	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.416404963 CET	443	49904	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.416485071 CET	49904	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.418442011 CET	443	49904	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.418462038 CET	443	49904	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.418531895 CET	49904	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.429650068 CET	49904	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.430130959 CET	49904	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.430327892 CET	49904	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.448847055 CET	443	49905	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.449019909 CET	443	49905	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.449053049 CET	443	49905	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.449114084 CET	49905	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.450896025 CET	443	49905	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.450918913 CET	443	49905	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.450984001 CET	49905	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.454449892 CET	49905	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.454902887 CET	49905	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.476660013 CET	443	49904	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.476687908 CET	443	49904	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.476841927 CET	443	49904	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.476939917 CET	443	49904	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.477016926 CET	443	49904	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.477031946 CET	49904	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.477082014 CET	49904	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.477566957 CET	49904	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.477679014 CET	443	49904	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.477761984 CET	49904	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.500957012 CET	443	49905	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.501080036 CET	443	49905	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.501143932 CET	443	49905	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.501166105 CET	49905	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.501203060 CET	49905	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.501463890 CET	443	49905	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.501481056 CET	443	49905	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.501539946 CET	49905	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.501925945 CET	49905	443	192.168.2.5	13.226.169.41
Mar 19, 2021 08:02:59.522813082 CET	443	49904	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.547143936 CET	443	49905	13.226.169.41	192.168.2.5
Mar 19, 2021 08:02:59.675353050 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:59.675378084 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:59.675488949 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:59.675498962 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:59.675518990 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:59.675535917 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:59.675558090 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:59.676153898 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:02:59.725254059 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:02:59.736325979 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:02:59.864168882 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:59.864192963 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:02:59.864603996 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:03:00.090373039 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:03:00.090392113 CET	443	49899	52.28.203.152	192.168.2.5
Mar 19, 2021 08:03:00.090461969 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:03:00.090517044 CET	49899	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:03:00.136218071 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:03:00.136250019 CET	443	49897	52.28.203.152	192.168.2.5
Mar 19, 2021 08:03:00.136357069 CET	49897	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:03:00.280528069 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:03:00.280560970 CET	443	49901	52.28.203.152	192.168.2.5
Mar 19, 2021 08:03:00.280658960 CET	49901	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:03:00.315839052 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:03:00.315879107 CET	443	49900	52.28.203.152	192.168.2.5
Mar 19, 2021 08:03:00.315912962 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:03:00.315944910 CET	49900	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:03:00.326864958 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:03:00.382765055 CET	443	49717	104.19.149.54	192.168.2.5
Mar 19, 2021 08:03:00.382857084 CET	49717	443	192.168.2.5	104.19.149.54
Mar 19, 2021 08:03:00.383152962 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:03:00.383173943 CET	443	49896	52.28.203.152	192.168.2.5
Mar 19, 2021 08:03:00.383295059 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:03:00.383344889 CET	49896	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:03:00.662576914 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:03:00.662625074 CET	443	49898	52.28.203.152	192.168.2.5
Mar 19, 2021 08:03:00.662683964 CET	49898	443	192.168.2.5	52.28.203.152
Mar 19, 2021 08:03:01.052665949 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:03:01.060154915 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:03:01.110949993 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:01.110979080 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:01.111001968 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:01.111054897 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:01.111078978 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:01.111367941 CET	49779	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:01.123850107 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:03:01.124725103 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:03:01.124748945 CET	443	49736	52.50.244.146	192.168.2.5
Mar 19, 2021 08:03:01.124836922 CET	49736	443	192.168.2.5	52.50.244.146
Mar 19, 2021 08:03:01.127672911 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:03:01.127695084 CET	443	49741	54.72.67.237	192.168.2.5
Mar 19, 2021 08:03:01.127801895 CET	49741	443	192.168.2.5	54.72.67.237
Mar 19, 2021 08:03:01.152885914 CET	443	49779	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:01.671715975 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:01.675518990 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:03:01.718364000 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:01.735579967 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:01.735630035 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:01.735658884 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:01.735771894 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:01.735800982 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:01.736402988 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:01.742014885 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:03:01.743710995 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:03:01.787343979 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:01.872140884 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.872802019 CET	49728	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.872836113 CET	49728	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.874130964 CET	49906	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.874789953 CET	49907	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.918709040 CET	443	49728	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:01.919600964 CET	443	49906	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:01.919712067 CET	49906	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.920123100 CET	443	49729	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:01.920202017 CET	49729	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.920314074 CET	443	49907	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:01.920396090 CET	49907	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.921433926 CET	49906	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.921530962 CET	49907	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.969132900 CET	443	49906	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:01.969183922 CET	443	49907	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:01.969933987 CET	443	49907	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:01.969985962 CET	443	49907	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:01.970024109 CET	443	49907	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:01.970061064 CET	443	49906	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:01.970088959 CET	49907	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.970099926 CET	443	49906	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:01.970134020 CET	443	49906	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:01.970134974 CET	49907	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.970171928 CET	49906	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.970194101 CET	49906	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.970196962 CET	49906	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.989362955 CET	49906	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.989974976 CET	49906	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:01.992993116 CET	49907	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:02.022767067 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:03:02.034785032 CET	443	49906	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:02.034912109 CET	49906	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:02.035682917 CET	443	49906	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:02.036145926 CET	49906	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:02.038533926 CET	443	49907	192.229.233.25	192.168.2.5
Mar 19, 2021 08:03:02.038652897 CET	49907	443	192.168.2.5	192.229.233.25
Mar 19, 2021 08:03:02.052129030 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:03:02.081499100 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:03:02.081710100 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:03:02.081809044 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:03:02.169481993 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:03:02.258796930 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:03:02.258882999 CET	443	49747	99.86.162.13	192.168.2.5
Mar 19, 2021 08:03:02.258974075 CET	49747	443	192.168.2.5	99.86.162.13
Mar 19, 2021 08:03:03.284105062 CET	49912	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.284948111 CET	49913	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.305109024 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:03:03.325691938 CET	443	49912	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.325848103 CET	49912	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.326267958 CET	443	49913	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.326327085 CET	49913	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.328233004 CET	49912	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.355557919 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:03:03.358942032 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:03:03.359029055 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:03:03.369661093 CET	443	49912	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.369837999 CET	443	49912	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.369915009 CET	49912	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.397703886 CET	49912	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.401519060 CET	49912	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.401738882 CET	49912	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.440257072 CET	443	49912	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.440294027 CET	443	49912	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.440359116 CET	49912	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.443835974 CET	443	49912	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.443862915 CET	443	49912	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.443944931 CET	49912	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.444196939 CET	443	49912	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.444248915 CET	49912	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.444516897 CET	443	49912	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.444562912 CET	49912	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.454078913 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:03:03.455636024 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:03:03.456880093 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:03:03.457628012 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:03:03.458250999 CET	49895	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:03:03.481843948 CET	49913	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.482518911 CET	49912	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.507635117 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:03.509115934 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:03.510238886 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:03.523139000 CET	443	49913	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.523276091 CET	443	49913	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.523334026 CET	49913	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.548291922 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:03:03.552190065 CET	443	49895	185.33.221.52	192.168.2.5
Mar 19, 2021 08:03:03.564842939 CET	443	49912	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.566941977 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:03.566960096 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:03.567003012 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:03:03.567030907 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:03:03.569869995 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:03.569888115 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:03.569955111 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:03:03.618561983 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:03.618581057 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:03.618629932 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:03:03.618660927 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:03:03.723575115 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:03:03.726108074 CET	49913	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.731667995 CET	49913	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.733328104 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:03.733371973 CET	49915	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:03.767442942 CET	443	49913	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.767502069 CET	443	49913	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.767693043 CET	49913	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.770973921 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:03:03.772933960 CET	443	49913	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.772960901 CET	443	49913	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:03.773089886 CET	49913	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.777266026 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:03.777292967 CET	443	49915	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:03.777431011 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:03.780776024 CET	49915	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:03.786684036 CET	49913	443	192.168.2.5	185.60.216.19
Mar 19, 2021 08:03:03.787077904 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:03.787286997 CET	49915	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:03.831150055 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:03.831219912 CET	443	49915	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:03.833642960 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:03.833713055 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:03.833749056 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:03.833786964 CET	443	49915	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:03.833820105 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:03.833825111 CET	443	49915	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:03.833853960 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:03.833857059 CET	443	49915	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:03.833888054 CET	49915	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:03.833920002 CET	49915	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:03.868113995 CET	443	49913	185.60.216.19	192.168.2.5
Mar 19, 2021 08:03:04.015688896 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.017656088 CET	49915	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.020240068 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:03:04.060288906 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.060445070 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.061759949 CET	443	49915	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.061880112 CET	49915	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.066081047 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.067622900 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:03:04.110435963 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.110466957 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.110486031 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.110502005 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.110503912 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.110519886 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.110538006 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.110555887 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.110563993 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.110569954 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.110572100 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.110588074 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.110594988 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.110605955 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.110608101 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.110637903 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.110686064 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.112471104 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.112502098 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.112550974 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.112571001 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.114330053 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.114366055 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.114423037 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.114439011 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.315469980 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:03:04.336061001 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:03:04.386470079 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.431284904 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.431354046 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.431374073 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.431392908 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.431406975 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.431437969 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.431446075 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.431493044 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.431921959 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.431973934 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.431977987 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.432015896 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.433705091 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.433760881 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.433785915 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.433823109 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.435575962 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.435633898 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.435645103 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.435688019 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.437247038 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.437303066 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.437336922 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.437367916 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.439017057 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.439069986 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.439080954 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.439116001 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.440830946 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.440885067 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.440908909 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.440943956 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.442586899 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.442631960 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.442667961 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.442706108 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.443269014 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:03:04.443299055 CET	443	49768	52.73.84.222	192.168.2.5
Mar 19, 2021 08:03:04.443342924 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:03:04.443368912 CET	49768	443	192.168.2.5	52.73.84.222
Mar 19, 2021 08:03:04.444271088 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.444330931 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.444346905 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.444386959 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.446058989 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.446096897 CET	443	49914	151.101.1.194	192.168.2.5
Mar 19, 2021 08:03:04.446124077 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.446135044 CET	49914	443	192.168.2.5	151.101.1.194
Mar 19, 2021 08:03:04.464289904 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:03:04.464325905 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:03:04.464427948 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:03:04.464626074 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:03:04.531863928 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:03:04.532007933 CET	49895	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:03:04.532449007 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:03:04.532589912 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:03:04.533324003 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:03:04.533572912 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:03:04.580015898 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:03:04.580065012 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:03:04.580105066 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:03:04.580167055 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:03:04.580780983 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:03:04.580811977 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:03:04.580895901 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:03:04.581027985 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:03:04.585709095 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:03:04.585740089 CET	443	49895	185.33.221.52	192.168.2.5
Mar 19, 2021 08:03:04.586155891 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:03:04.586252928 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:03:04.587735891 CET	443	49895	185.33.221.52	192.168.2.5
Mar 19, 2021 08:03:04.587847948 CET	49895	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:03:04.624147892 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:04.635451078 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.635523081 CET	49919	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.671025991 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:04.671073914 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:04.677026033 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.677073956 CET	443	49919	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.677203894 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.677261114 CET	49919	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.678330898 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.678518057 CET	49919	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.719655037 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.719887972 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.719964981 CET	443	49919	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.719966888 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.720132113 CET	443	49919	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.720187902 CET	49919	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.722822905 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.723303080 CET	49919	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.724941969 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.725172997 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.725265980 CET	49919	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.764185905 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.764302969 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.764363050 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.764554977 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.764734983 CET	443	49919	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.764893055 CET	443	49919	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.764959097 CET	49919	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.765080929 CET	49919	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.766226053 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.766258001 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.766341925 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.766655922 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.766681910 CET	443	49919	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.766721010 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.766896009 CET	443	49919	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.766957045 CET	49919	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.794130087 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:03:04.794163942 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:03:04.794222116 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:03:04.794265032 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:03:04.804347038 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.804466963 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:04.845748901 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:04.847260952 CET	443	49919	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.083404064 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:03:05.148176908 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:03:05.148211002 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:03:05.148289919 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:03:05.148318052 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:03:05.231764078 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.231843948 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.231918097 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.231966972 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.232076883 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.232117891 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.232141018 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.232166052 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.232819080 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.232862949 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.232887983 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.232932091 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.233547926 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.233598948 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.233622074 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.233647108 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.234304905 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.234354973 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.234375000 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.234411001 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.235080004 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.235143900 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.235285044 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.250262976 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.260205984 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.281713963 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.291935921 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.292071104 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.301908016 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.302071095 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.318468094 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:03:05.369262934 CET	49891	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:03:05.372946024 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:03:05.373142958 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:03:05.375513077 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:03:05.376197100 CET	49926	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:03:05.412630081 CET	443	49891	3.126.239.96	192.168.2.5
Mar 19, 2021 08:03:05.412725925 CET	49891	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:03:05.415015936 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.415061951 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.415101051 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.415123940 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.415203094 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.415213108 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.417002916 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.417042971 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.417157888 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.417711020 CET	443	49926	3.126.239.96	192.168.2.5
Mar 19, 2021 08:03:05.417834997 CET	49926	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:03:05.421220064 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.421350956 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.421664953 CET	49926	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:03:05.423300982 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.423408031 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.423418045 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.423475981 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.427444935 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.427486897 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.427577019 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.427619934 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.439898968 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:03:05.440108061 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:03:05.456594944 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.456655979 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.456806898 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.456881046 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.458372116 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.458416939 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.458483934 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.458518982 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.461807013 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.461849928 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.461894035 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.461926937 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.463268042 CET	443	49926	3.126.239.96	192.168.2.5
Mar 19, 2021 08:03:05.463299990 CET	443	49926	3.126.239.96	192.168.2.5
Mar 19, 2021 08:03:05.463464975 CET	49926	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:03:05.465007067 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.465046883 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.465092897 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.465130091 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.466916084 CET	49926	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:03:05.467803001 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.467844009 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.467897892 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.467935085 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.468862057 CET	49926	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:03:05.470565081 CET	443	49918	185.60.216.35	192.168.2.5
Mar 19, 2021 08:03:05.470668077 CET	49918	443	192.168.2.5	185.60.216.35
Mar 19, 2021 08:03:05.508601904 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.510409117 CET	443	49926	3.126.239.96	192.168.2.5
Mar 19, 2021 08:03:05.511373997 CET	443	49926	3.126.239.96	192.168.2.5
Mar 19, 2021 08:03:05.511471987 CET	49926	443	192.168.2.5	3.126.239.96
Mar 19, 2021 08:03:05.522449017 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.554764032 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.558845997 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:03:05.559243917 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:03:05.569173098 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.572653055 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.572747946 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.572747946 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.572803974 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.572864056 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.572921991 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.573048115 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.610306978 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.610392094 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.611341953 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.611371040 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.611397982 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.611423016 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.612622023 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:03:05.613101959 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:03:05.613183975 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:03:05.613212109 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:03:05.613312960 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:03:05.621197939 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:03:05.621972084 CET	49756	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.623245955 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.668541908 CET	443	49756	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.686276913 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:03:05.686310053 CET	443	49750	52.50.156.162	192.168.2.5
Mar 19, 2021 08:03:05.686418056 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:03:05.686506033 CET	49750	443	192.168.2.5	52.50.156.162
Mar 19, 2021 08:03:05.688601971 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:03:05.742753029 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:03:05.742783070 CET	443	49804	18.132.239.61	192.168.2.5
Mar 19, 2021 08:03:05.742867947 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:03:05.742911100 CET	49804	443	192.168.2.5	18.132.239.61
Mar 19, 2021 08:03:05.862807035 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:03:05.866664886 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:03:05.887026072 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.928157091 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:03:05.928292990 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:03:05.931399107 CET	443	49819	34.246.207.243	192.168.2.5
Mar 19, 2021 08:03:05.931507111 CET	49819	443	192.168.2.5	34.246.207.243
Mar 19, 2021 08:03:05.933087111 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.947884083 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:05.948705912 CET	49928	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:05.951486111 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.951538086 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.951589108 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.951606035 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.952601910 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.952652931 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.952671051 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.952707052 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.954715967 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.954760075 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.954803944 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.954822063 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.956816912 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.956857920 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.956886053 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.956919909 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.958909035 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.958952904 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.959000111 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.959014893 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.960999012 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.961050987 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.961071014 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.961123943 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.963138103 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.963181019 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.963246107 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.963598013 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.965183973 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.965224981 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.965270042 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.965282917 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.967325926 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.967370033 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.967406034 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.967457056 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.969402075 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.969453096 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.969487906 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.969527960 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.971510887 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.971554995 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.971575022 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.971625090 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.973601103 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.973643064 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.973697901 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.973711014 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.975687027 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.975730896 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.975791931 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.975809097 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.977787971 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.977829933 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.977866888 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.978202105 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.979886055 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.979922056 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:05.979974985 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.979986906 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.981535912 CET	49745	443	192.168.2.5	216.58.215.226
Mar 19, 2021 08:03:05.996862888 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:05.996963978 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:05.997612953 CET	443	49928	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:05.997761965 CET	49928	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:05.998384953 CET	49928	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:05.998533964 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.033287048 CET	443	49745	216.58.215.226	192.168.2.5
Mar 19, 2021 08:03:06.047599077 CET	443	49928	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.047704935 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.054532051 CET	443	49928	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.054610968 CET	443	49928	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.054672003 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.054677010 CET	49928	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.054694891 CET	49928	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.054729939 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.054749966 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.054760933 CET	443	49928	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.054779053 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.054788113 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.054816008 CET	49928	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.054837942 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.059247971 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.059317112 CET	49928	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.059776068 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.059977055 CET	49928	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.060050011 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.108341932 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.108369112 CET	443	49928	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.108381033 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.108395100 CET	443	49928	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.108429909 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.108475924 CET	49928	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.108566999 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.108594894 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.108608007 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.109142065 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.109165907 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.109200954 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.109208107 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.109220982 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.109246969 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.109472036 CET	443	49928	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.109519958 CET	49928	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.110977888 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.111021996 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.112274885 CET	49928	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.160020113 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.166445017 CET	443	49928	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.787882090 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.842068911 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.845468044 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.845563889 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.845587969 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.845648050 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:06.845649004 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.845699072 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.845912933 CET	49927	443	192.168.2.5	142.250.185.194
Mar 19, 2021 08:03:06.900170088 CET	443	49927	142.250.185.194	192.168.2.5
Mar 19, 2021 08:03:13.354994059 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:03:13.355038881 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:03:13.355086088 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:03:13.355103016 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:03:13.355355978 CET	49878	443	192.168.2.5	178.250.0.157
Mar 19, 2021 08:03:13.405551910 CET	443	49878	178.250.0.157	192.168.2.5
Mar 19, 2021 08:03:13.565773010 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:13.565809965 CET	443	49889	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:13.565851927 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:03:13.565890074 CET	49889	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:03:13.570102930 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:13.570133924 CET	443	49887	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:13.570161104 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:03:13.570202112 CET	49887	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:03:13.619452953 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:13.619496107 CET	443	49888	185.33.221.14	192.168.2.5
Mar 19, 2021 08:03:13.619667053 CET	49888	443	192.168.2.5	185.33.221.14
Mar 19, 2021 08:03:14.584609985 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:03:14.584636927 CET	443	49886	185.33.221.52	192.168.2.5
Mar 19, 2021 08:03:14.584903002 CET	443	49895	185.33.221.52	192.168.2.5
Mar 19, 2021 08:03:14.584918976 CET	443	49895	185.33.221.52	192.168.2.5
Mar 19, 2021 08:03:14.585042000 CET	49895	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:03:14.585117102 CET	49886	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:03:14.590090990 CET	49895	443	192.168.2.5	185.33.221.52
Mar 19, 2021 08:03:14.792363882 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:03:14.792396069 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:03:14.800462008 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:03:14.828088045 CET	49890	443	192.168.2.5	178.250.2.131
Mar 19, 2021 08:03:14.876909971 CET	443	49890	178.250.2.131	192.168.2.5
Mar 19, 2021 08:03:17.388340950 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:03:17.388402939 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:03:17.388453007 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:03:17.388540030 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:03:17.388571978 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:03:17.388634920 CET	49853	443	192.168.2.5	34.234.127.242
Mar 19, 2021 08:03:17.518193007 CET	443	49853	34.234.127.242	192.168.2.5
Mar 19, 2021 08:03:19.333312035 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:03:19.461462021 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:03:19.461519003 CET	443	49770	18.206.143.246	192.168.2.5
Mar 19, 2021 08:03:19.461560965 CET	49770	443	192.168.2.5	18.206.143.246
Mar 19, 2021 08:03:19.461610079 CET	49770	443	192.168.2.5	18.206.143.246

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 19, 2021 08:01:39.564707041 CET	65307	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:39.614044905 CET	53	65307	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:39.643106937 CET	64344	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:39.695131063 CET	53	64344	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:39.715476036 CET	62060	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:39.767641068 CET	53	62060	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:39.840173960 CET	61805	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:39.897928953 CET	53	61805	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:46.034534931 CET	54795	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:46.095474005 CET	53	54795	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:47.051884890 CET	49557	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:47.137538910 CET	53	49557	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:48.200958014 CET	61733	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:48.261322021 CET	53	61733	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:48.568859100 CET	65447	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:48.577287912 CET	52441	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:48.582252026 CET	62176	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:48.588246107 CET	59596	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:48.621217012 CET	65296	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:48.628170013 CET	53	65447	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:48.637916088 CET	53	52441	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:48.640295029 CET	53	59596	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:48.641839027 CET	53	62176	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:48.647748947 CET	63183	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:48.659879923 CET	60151	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:48.684473991 CET	53	65296	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:48.706882000 CET	53	63183	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:48.723366022 CET	53	60151	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:48.742821932 CET	56969	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:48.817224979 CET	53	56969	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:49.115473986 CET	55161	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:49.175925016 CET	53	55161	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:49.789222002 CET	54757	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:49.852032900 CET	53	54757	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:50.677526951 CET	49992	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:50.723901987 CET	60075	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:50.737576962 CET	53	49992	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:50.759874105 CET	55016	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:50.773485899 CET	64345	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:50.784221888 CET	53	60075	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:50.784523964 CET	57128	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:50.793023109 CET	54791	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:50.819576025 CET	53	55016	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:50.837497950 CET	53	64345	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:50.850840092 CET	50463	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:50.851152897 CET	50394	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:50.853458881 CET	53	57128	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:50.856297016 CET	53	54791	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:50.863234043 CET	58530	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:50.901570082 CET	53	50463	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:50.913026094 CET	53	58530	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:50.913605928 CET	53	50394	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:50.937273979 CET	53813	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:50.996609926 CET	53	53813	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:51.399194002 CET	63732	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:51.441174030 CET	57344	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:51.465454102 CET	53	63732	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:51.503760099 CET	53	57344	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:51.524741888 CET	54450	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:51.556209087 CET	59261	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:51.592828035 CET	53	54450	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:51.618576050 CET	53	59261	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:51.654035091 CET	57151	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:51.703427076 CET	53	57151	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:51.818892002 CET	59413	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:51.844176054 CET	60516	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:51.857621908 CET	51649	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:51.877167940 CET	53	59413	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:51.901912928 CET	53	60516	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:51.906903028 CET	53	51649	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:52.147711992 CET	65086	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:52.199712038 CET	53	65086	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:52.302812099 CET	56432	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:52.312781096 CET	52929	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:52.368136883 CET	53	56432	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:52.375761986 CET	53	52929	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:52.423541069 CET	64317	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:52.482340097 CET	53	64317	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:52.587810040 CET	61004	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:52.632658005 CET	56895	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:52.645688057 CET	62372	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:52.650198936 CET	53	61004	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:52.665467978 CET	61515	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:52.666910887 CET	56675	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:52.676280022 CET	57172	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:52.690407038 CET	53	56895	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:52.703459978 CET	53	62372	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:52.713618040 CET	55267	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:52.715945959 CET	50969	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:52.719002008 CET	53	56675	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:52.727691889 CET	53	61515	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:52.728218079 CET	53	57172	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:52.762861967 CET	53	55267	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:52.765049934 CET	53	50969	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:52.795344114 CET	64362	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:52.847822905 CET	53	64362	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.030636072 CET	54766	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.038444996 CET	61446	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.039742947 CET	57515	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.044786930 CET	58199	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.049139023 CET	65221	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.054630995 CET	61573	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.060754061 CET	56562	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.067853928 CET	53591	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.074110985 CET	59688	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.088485003 CET	53	54766	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.098037958 CET	53	61446	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.099536896 CET	53	57515	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.104017019 CET	53	61573	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.107837915 CET	56032	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.110615969 CET	53	65221	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.118477106 CET	53	58199	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.122128963 CET	53	56562	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.128635883 CET	53	53591	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.133635044 CET	53	59688	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.168279886 CET	53	56032	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.182492971 CET	61150	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.182559013 CET	63458	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.241858006 CET	53	63458	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.256330013 CET	53	61150	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.299448967 CET	50422	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.299557924 CET	53247	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.300225973 CET	58544	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.311608076 CET	53814	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.360522985 CET	53	58544	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.361427069 CET	53	50422	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.368926048 CET	53	53247	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.369173050 CET	53	53814	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.425088882 CET	51305	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.435712099 CET	53670	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.448410988 CET	55160	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.494918108 CET	61414	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.497718096 CET	53	55160	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.501038074 CET	53	53670	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.503586054 CET	53	51305	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.552659035 CET	53	61414	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.701117992 CET	63847	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.760679007 CET	53	63847	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.787811995 CET	61523	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.795499086 CET	50551	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:53.844736099 CET	53	50551	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.851026058 CET	53	61523	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:53.997240067 CET	62847	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:54.046653032 CET	53	62847	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:56.038527012 CET	57712	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:56.101648092 CET	53	57712	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:56.346987963 CET	61064	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:56.396294117 CET	53	61064	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:56.517399073 CET	61891	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:56.567074060 CET	53	61891	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:56.603986979 CET	61585	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:56.666023970 CET	53	61585	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:57.335027933 CET	65163	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:57.388775110 CET	53	65163	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:58.527259111 CET	58969	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:58.581270933 CET	53	58969	8.8.8.8	192.168.2.5
Mar 19, 2021 08:01:59.336396933 CET	53977	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:01:59.388861895 CET	53	53977	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:06.233601093 CET	57147	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:06.293273926 CET	53	57147	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:06.703453064 CET	52381	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:06.755707026 CET	53	52381	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:12.343848944 CET	49231	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:12.393431902 CET	53	49231	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:12.629658937 CET	53217	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:12.689232111 CET	53	53217	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:15.989366055 CET	52554	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:16.038830996 CET	53	52554	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:16.669444084 CET	49603	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:16.721770048 CET	53	49603	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:16.998936892 CET	52554	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:17.048192978 CET	53	52554	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:17.071935892 CET	64476	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:17.129550934 CET	53	64476	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:17.669217110 CET	49603	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:17.721479893 CET	53	49603	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:18.012439013 CET	52554	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:18.061794996 CET	53	52554	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:18.721739054 CET	49603	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:18.784622908 CET	53	49603	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:20.028677940 CET	52554	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:20.078788996 CET	53	52554	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:20.871679068 CET	49603	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:20.924654007 CET	53	49603	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:24.046056032 CET	52554	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:24.095366955 CET	53	52554	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:24.872939110 CET	49603	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:24.925098896 CET	53	49603	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:34.076284885 CET	49975	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:34.135555983 CET	53	49975	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:41.528511047 CET	57701	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:41.580871105 CET	53	57701	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:42.557014942 CET	60334	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:42.620018005 CET	53	60334	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:59.153809071 CET	64958	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:59.221249104 CET	53	64958	8.8.8.8	192.168.2.5
Mar 19, 2021 08:02:59.228413105 CET	58504	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:02:59.289700985 CET	53	58504	8.8.8.8	192.168.2.5
Mar 19, 2021 08:03:03.474555016 CET	64971	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:03:03.535216093 CET	53	64971	8.8.8.8	192.168.2.5
Mar 19, 2021 08:03:04.643029928 CET	58041	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:03:04.671078920 CET	57764	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:03:04.710886002 CET	53	58041	8.8.8.8	192.168.2.5
Mar 19, 2021 08:03:04.730133057 CET	53	57764	8.8.8.8	192.168.2.5
Mar 19, 2021 08:03:05.888035059 CET	57973	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:03:05.945684910 CET	53	57973	8.8.8.8	192.168.2.5
Mar 19, 2021 08:03:06.507749081 CET	63286	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:03:06.557605982 CET	53	63286	8.8.8.8	192.168.2.5
Mar 19, 2021 08:03:07.980931997 CET	52589	53	192.168.2.5	8.8.8.8
Mar 19, 2021 08:03:08.040029049 CET	53	52589	8.8.8.8	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Mar 19, 2021 08:01:47.051884890 CET	192.168.2.5	8.8.8.8	0x75e	Standard query (0)	toronto.ctvnews.ca	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:48.200958014 CET	192.168.2.5	8.8.8.8	0xd375	Standard query (0)	static.ctvnews.ca	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:48.568859100 CET	192.168.2.5	8.8.8.8	0xef7a	Standard query (0)	z.moatads.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:48.577287912 CET	192.168.2.5	8.8.8.8	0x284e	Standard query (0)	static.chartbeat.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:48.582252026 CET	192.168.2.5	8.8.8.8	0x6f78	Standard query (0)	js-sec.indexww.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:48.588246107 CET	192.168.2.5	8.8.8.8	0xba24	Standard query (0)	cdn.permutive.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:48.621217012 CET	192.168.2.5	8.8.8.8	0xf10c	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:48.647748947 CET	192.168.2.5	8.8.8.8	0xeeec	Standard query (0)	www.ctvnews.ca	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:48.659879923 CET	192.168.2.5	8.8.8.8	0x18c1	Standard query (0)	platform.twitter.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:48.742821932 CET	192.168.2.5	8.8.8.8	0x8e1	Standard query (0)	beta.ctvnews.ca	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:49.115473986 CET	192.168.2.5	8.8.8.8	0x6744	Standard query (0)	tru.am	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:49.789222002 CET	192.168.2.5	8.8.8.8	0x505b	Standard query (0)	cdn.krxd.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.677526951 CET	192.168.2.5	8.8.8.8	0x96d1	Standard query (0)	mb.moatads.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.723901987 CET	192.168.2.5	8.8.8.8	0x2a74	Standard query (0)	px.moatads.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.759874105 CET	192.168.2.5	8.8.8.8	0xeb2c	Standard query (0)	geo.moatads.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.773485899 CET	192.168.2.5	8.8.8.8	0x6b43	Standard query (0)	auth.9c9media.ca	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.784523964 CET	192.168.2.5	8.8.8.8	0x6ace	Standard query (0)	www.googletagservices.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.793023109 CET	192.168.2.5	8.8.8.8	0x7a33	Standard query (0)	c.amazon-adsystem.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.850840092 CET	192.168.2.5	8.8.8.8	0x525b	Standard query (0)	static.criteo.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.851152897 CET	192.168.2.5	8.8.8.8	0xb025	Standard query (0)	api.rlcdn.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.863234043 CET	192.168.2.5	8.8.8.8	0xa956	Standard query (0)	match.adsrvr.org	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.937273979 CET	192.168.2.5	8.8.8.8	0x6e2d	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.399194002 CET	192.168.2.5	8.8.8.8	0xc714	Standard query (0)	securepubads.g.doubleclick.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.441174030 CET	192.168.2.5	8.8.8.8	0x39c3	Standard query (0)	beacon.scorecardresearch.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.524741888 CET	192.168.2.5	8.8.8.8	0x47c	Standard query (0)	s7.addthis.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.556209087 CET	192.168.2.5	8.8.8.8	0x153e	Standard query (0)	connect.facebook.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.654035091 CET	192.168.2.5	8.8.8.8	0xe397	Standard query (0)	gum.criteo.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.818892002 CET	192.168.2.5	8.8.8.8	0x6328	Standard query (0)	consumer.krxd.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.844176054 CET	192.168.2.5	8.8.8.8	0x2911	Standard query (0)	mabping.chartbeat.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.857621908 CET	192.168.2.5	8.8.8.8	0x5656	Standard query (0)	ping.chartbeat.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.312781096 CET	192.168.2.5	8.8.8.8	0xd916	Standard query (0)	capi.9c9media.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.423541069 CET	192.168.2.5	8.8.8.8	0xc445	Standard query (0)	m.addthis.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.587810040 CET	192.168.2.5	8.8.8.8	0x2762	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.632658005 CET	192.168.2.5	8.8.8.8	0x31a1	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.645688057 CET	192.168.2.5	8.8.8.8	0x8b48	Standard query (0)	bellmedia.demdex.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.665467978 CET	192.168.2.5	8.8.8.8	0xe359	Standard query (0)	htlb.casalemedia.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.666910887 CET	192.168.2.5	8.8.8.8	0x38e4	Standard query (0)	secure.adnxs.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.676280022 CET	192.168.2.5	8.8.8.8	0x24ee	Standard query (0)	c2shb.ssp.yahoo.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.713618040 CET	192.168.2.5	8.8.8.8	0x8253	Standard query (0)	bidder.criteo.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.715945959 CET	192.168.2.5	8.8.8.8	0xbe09	Standard query (0)	ib.adnxs.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.795344114 CET	192.168.2.5	8.8.8.8	0xf958	Standard query (0)	aax-eu.amazon-adsystem.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.030636072 CET	192.168.2.5	8.8.8.8	0xfd4b	Standard query (0)	usermatch.krxd.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.038444996 CET	192.168.2.5	8.8.8.8	0x6948	Standard query (0)	idsync.rlcdn.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.039742947 CET	192.168.2.5	8.8.8.8	0x7399	Standard query (0)	stags.bluekai.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.044786930 CET	192.168.2.5	8.8.8.8	0x28f	Standard query (0)	loadm.exelator.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.049139023 CET	192.168.2.5	8.8.8.8	0x7511	Standard query (0)	sb.scorecardresearch.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.054630995 CET	192.168.2.5	8.8.8.8	0x853e	Standard query (0)	aa.agkn.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.060754061 CET	192.168.2.5	8.8.8.8	0xa7ea	Standard query (0)	ssum-sec.casalemedia.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.067853928 CET	192.168.2.5	8.8.8.8	0x66c4	Standard query (0)	kr.ixiaa.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.074110985 CET	192.168.2.5	8.8.8.8	0x6e1c	Standard query (0)	dx.bigsea.weborama.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.107837915 CET	192.168.2.5	8.8.8.8	0x922f	Standard query (0)	r.nexac.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.182492971 CET	192.168.2.5	8.8.8.8	0xe7b3	Standard query (0)	kr.ixiaa.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.182559013 CET	192.168.2.5	8.8.8.8	0xaf3a	Standard query (0)	dx.bigsea.weborama.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.299448967 CET	192.168.2.5	8.8.8.8	0xee26	Standard query (0)	as-sec.casalemedia.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.299557924 CET	192.168.2.5	8.8.8.8	0x5bc3	Standard query (0)	adservice.google.co.uk	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.311608076 CET	192.168.2.5	8.8.8.8	0x90e6	Standard query (0)	r.nexac.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.448410988 CET	192.168.2.5	8.8.8.8	0x98e4	Standard query (0)	beacon.krxd.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.494918108 CET	192.168.2.5	8.8.8.8	0x7f77	Standard query (0)	cm.g.doubleclick.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.701117992 CET	192.168.2.5	8.8.8.8	0x4f87	Standard query (0)	api-public.addthis.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.787811995 CET	192.168.2.5	8.8.8.8	0xbc58	Standard query (0)	s.ad.smaato.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.795499086 CET	192.168.2.5	8.8.8.8	0x6225	Standard query (0)	ups.analytics.yahoo.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.038527012 CET	192.168.2.5	8.8.8.8	0x108b	Standard query (0)	js.agkn.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.346987963 CET	192.168.2.5	8.8.8.8	0x6ed4	Standard query (0)	d.agkn.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.603986979 CET	192.168.2.5	8.8.8.8	0x7ac1	Standard query (0)	pixel.mathtag.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:12.629658937 CET	192.168.2.5	8.8.8.8	0x46b	Standard query (0)	static.ctvnews.ca	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:17.071935892 CET	192.168.2.5	8.8.8.8	0xe686	Standard query (0)	jslog.krxd.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:59.228413105 CET	192.168.2.5	8.8.8.8	0x9481	Standard query (0)	static.agkn.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:03:03.474555016 CET	192.168.2.5	8.8.8.8	0xa299	Standard query (0)	confiant-integrations.global.ssl.fastly.net	A (IP address)	IN (0x0001)
Mar 19, 2021 08:03:04.671078920 CET	192.168.2.5	8.8.8.8	0xe771	Standard query (0)	idp.securetve.com	A (IP address)	IN (0x0001)
Mar 19, 2021 08:03:05.888035059 CET	192.168.2.5	8.8.8.8	0x9e2	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Mar 19, 2021 08:01:47.137538910 CET	8.8.8.8	192.168.2.5	0x75e	No error (0)	toronto.ctvnews.ca	news.bellmedia.ca.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:48.261322021 CET	8.8.8.8	192.168.2.5	0xd375	No error (0)	static.ctvnews.ca	news.bellmedia.ca.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:48.628170013 CET	8.8.8.8	192.168.2.5	0xef7a	No error (0)	z.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:48.637916088 CET	8.8.8.8	192.168.2.5	0x284e	No error (0)	static.chartbeat.com	d3f7zc5bbfci5.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:48.637916088 CET	8.8.8.8	192.168.2.5	0x284e	No error (0)	d3f7zc5bbfci5.cloudfront.net		99.86.163.177	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:48.640295029 CET	8.8.8.8	192.168.2.5	0xba24	No error (0)	cdn.permutive.com		104.19.149.54	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:48.640295029 CET	8.8.8.8	192.168.2.5	0xba24	No error (0)	cdn.permutive.com		104.19.150.54	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:48.641839027 CET	8.8.8.8	192.168.2.5	0x6f78	No error (0)	js-sec.indexww.com	js-sec.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:48.684473991 CET	8.8.8.8	192.168.2.5	0xf10c	No error (0)	assets.adobedtm.com	cn-assets.adobedtm.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:48.706882000 CET	8.8.8.8	192.168.2.5	0xeeec	No error (0)	www.ctvnews.ca	news.bellmedia.ca.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:48.723366022 CET	8.8.8.8	192.168.2.5	0x18c1	No error (0)	platform.twitter.com	cs472.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:48.723366022 CET	8.8.8.8	192.168.2.5	0x18c1	No error (0)	cs472.wac.edgecastcdn.net	cs1-apr-8315.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:48.723366022 CET	8.8.8.8	192.168.2.5	0x18c1	No error (0)	cs1-apr-8315.wac.edgecastcdn.net	wac.apr-8315.edgecastdns.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:48.723366022 CET	8.8.8.8	192.168.2.5	0x18c1	No error (0)	cs1-lb-eu.8315.ecdns.net	cs491.wac.edgecastcdn.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:48.723366022 CET	8.8.8.8	192.168.2.5	0x18c1	No error (0)	cs491.wac.edgecastcdn.net		192.229.233.25	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:48.817224979 CET	8.8.8.8	192.168.2.5	0x8e1	No error (0)	beta.ctvnews.ca	news.bellmedia.ca.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:49.175925016 CET	8.8.8.8	192.168.2.5	0x6744	No error (0)	tru.am		104.26.3.116	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:49.175925016 CET	8.8.8.8	192.168.2.5	0x6744	No error (0)	tru.am		172.67.74.245	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:49.175925016 CET	8.8.8.8	192.168.2.5	0x6744	No error (0)	tru.am		104.26.2.116	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:49.852032900 CET	8.8.8.8	192.168.2.5	0x505b	No error (0)	cdn.krxd.net	d.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.737576962 CET	8.8.8.8	192.168.2.5	0x96d1	No error (0)	mb.moatads.com	ecs.mb.moatads.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.737576962 CET	8.8.8.8	192.168.2.5	0x96d1	No error (0)	ecs.mb.moatads.com	eu-west-2.ecs.mb.moatads.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.737576962 CET	8.8.8.8	192.168.2.5	0x96d1	No error (0)	eu-west-2.ecs.mb.moatads.com	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.737576962 CET	8.8.8.8	192.168.2.5	0x96d1	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		52.50.244.146	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.737576962 CET	8.8.8.8	192.168.2.5	0x96d1	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		34.250.6.25	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.737576962 CET	8.8.8.8	192.168.2.5	0x96d1	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		54.72.67.237	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.737576962 CET	8.8.8.8	192.168.2.5	0x96d1	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		52.212.177.60	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.737576962 CET	8.8.8.8	192.168.2.5	0x96d1	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		34.253.102.121	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.737576962 CET	8.8.8.8	192.168.2.5	0x96d1	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		54.194.105.192	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.737576962 CET	8.8.8.8	192.168.2.5	0x96d1	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		52.208.36.114	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.737576962 CET	8.8.8.8	192.168.2.5	0x96d1	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		34.247.171.40	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.784221888 CET	8.8.8.8	192.168.2.5	0x2a74	No error (0)	px.moatads.com	wildcard.moatads.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.819576025 CET	8.8.8.8	192.168.2.5	0xeb2c	No error (0)	geo.moatads.com	ecs.mb.moatads.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.819576025 CET	8.8.8.8	192.168.2.5	0xeb2c	No error (0)	ecs.mb.moatads.com	eu-west-2.ecs.mb.moatads.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.819576025 CET	8.8.8.8	192.168.2.5	0xeb2c	No error (0)	eu-west-2.ecs.mb.moatads.com	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.819576025 CET	8.8.8.8	192.168.2.5	0xeb2c	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		54.72.67.237	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.819576025 CET	8.8.8.8	192.168.2.5	0xeb2c	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		54.194.105.192	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.819576025 CET	8.8.8.8	192.168.2.5	0xeb2c	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		52.208.36.114	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.819576025 CET	8.8.8.8	192.168.2.5	0xeb2c	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		34.250.6.25	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.819576025 CET	8.8.8.8	192.168.2.5	0xeb2c	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		34.247.171.40	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.819576025 CET	8.8.8.8	192.168.2.5	0xeb2c	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		99.80.114.7	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.819576025 CET	8.8.8.8	192.168.2.5	0xeb2c	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		34.255.140.197	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.819576025 CET	8.8.8.8	192.168.2.5	0xeb2c	No error (0)	nado-ecs-lb-eu-west-1-587487851.eu-west-1.elb.amazonaws.com		52.212.177.60	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.837497950 CET	8.8.8.8	192.168.2.5	0x6b43	No error (0)	auth.9c9media.ca	v.bellmedia.ca.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.853458881 CET	8.8.8.8	192.168.2.5	0x6ace	No error (0)	www.googletagservices.com		216.58.215.226	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.856297016 CET	8.8.8.8	192.168.2.5	0x7a33	No error (0)	c.amazon-adsystem.com	d1ykf07e75w7ss.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.856297016 CET	8.8.8.8	192.168.2.5	0x7a33	No error (0)	d1ykf07e75w7ss.cloudfront.net		99.86.162.13	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.901570082 CET	8.8.8.8	192.168.2.5	0x525b	No error (0)	static.criteo.net	static.am5.vip.prod.criteo.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.901570082 CET	8.8.8.8	192.168.2.5	0x525b	No error (0)	static.am5.vip.prod.criteo.net		178.250.2.130	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.913026094 CET	8.8.8.8	192.168.2.5	0xa956	No error (0)	match.adsrvr.org	match-1943069928.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.913026094 CET	8.8.8.8	192.168.2.5	0xa956	No error (0)	match-1943069928.eu-west-1.elb.amazonaws.com		52.50.156.162	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.913026094 CET	8.8.8.8	192.168.2.5	0xa956	No error (0)	match-1943069928.eu-west-1.elb.amazonaws.com		54.154.164.132	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.913026094 CET	8.8.8.8	192.168.2.5	0xa956	No error (0)	match-1943069928.eu-west-1.elb.amazonaws.com		54.216.123.169	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.913026094 CET	8.8.8.8	192.168.2.5	0xa956	No error (0)	match-1943069928.eu-west-1.elb.amazonaws.com		54.72.237.129	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.913026094 CET	8.8.8.8	192.168.2.5	0xa956	No error (0)	match-1943069928.eu-west-1.elb.amazonaws.com		52.16.108.17	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.913026094 CET	8.8.8.8	192.168.2.5	0xa956	No error (0)	match-1943069928.eu-west-1.elb.amazonaws.com		63.32.128.23	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.913026094 CET	8.8.8.8	192.168.2.5	0xa956	No error (0)	match-1943069928.eu-west-1.elb.amazonaws.com		52.209.120.242	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.913026094 CET	8.8.8.8	192.168.2.5	0xa956	No error (0)	match-1943069928.eu-west-1.elb.amazonaws.com		18.203.78.129	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.913605928 CET	8.8.8.8	192.168.2.5	0xb025	No error (0)	api.rlcdn.com		34.120.133.55	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.996609926 CET	8.8.8.8	192.168.2.5	0x6e2d	No error (0)	dpm.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.996609926 CET	8.8.8.8	192.168.2.5	0x6e2d	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.996609926 CET	8.8.8.8	192.168.2.5	0x6e2d	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:50.996609926 CET	8.8.8.8	192.168.2.5	0x6e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.195.23.91	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.996609926 CET	8.8.8.8	192.168.2.5	0x6e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.251.60.147	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.996609926 CET	8.8.8.8	192.168.2.5	0x6e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.50.19.208	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.996609926 CET	8.8.8.8	192.168.2.5	0x6e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.210.171.182	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.996609926 CET	8.8.8.8	192.168.2.5	0x6e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.18.91.199	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.996609926 CET	8.8.8.8	192.168.2.5	0x6e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.77.35.96	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.996609926 CET	8.8.8.8	192.168.2.5	0x6e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.30.135.179	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:50.996609926 CET	8.8.8.8	192.168.2.5	0x6e2d	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		108.128.151.168	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.465454102 CET	8.8.8.8	192.168.2.5	0xc714	No error (0)	securepubads.g.doubleclick.net	partnerad.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:51.465454102 CET	8.8.8.8	192.168.2.5	0xc714	No error (0)	partnerad.l.doubleclick.net		216.58.215.226	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.503760099 CET	8.8.8.8	192.168.2.5	0x39c3	No error (0)	beacon.scorecardresearch.com	beacon.scorecardresearch.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:51.592828035 CET	8.8.8.8	192.168.2.5	0x47c	No error (0)	s7.addthis.com	s8.addthis.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:51.592828035 CET	8.8.8.8	192.168.2.5	0x47c	No error (0)	s8.addthis.com	ds-s7.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:51.618576050 CET	8.8.8.8	192.168.2.5	0x153e	No error (0)	connect.facebook.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:51.618576050 CET	8.8.8.8	192.168.2.5	0x153e	No error (0)	scontent.xx.fbcdn.net		185.60.216.19	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.703427076 CET	8.8.8.8	192.168.2.5	0xe397	No error (0)	gum.criteo.com	gum.par.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:51.703427076 CET	8.8.8.8	192.168.2.5	0xe397	No error (0)	gum.par.vip.prod.criteo.com		178.250.0.157	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.877167940 CET	8.8.8.8	192.168.2.5	0x6328	No error (0)	consumer.krxd.net	d.sni.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:51.901912928 CET	8.8.8.8	192.168.2.5	0x2911	No error (0)	mabping.chartbeat.net		52.73.84.222	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.901912928 CET	8.8.8.8	192.168.2.5	0x2911	No error (0)	mabping.chartbeat.net		54.173.193.235	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.901912928 CET	8.8.8.8	192.168.2.5	0x2911	No error (0)	mabping.chartbeat.net		3.86.73.220	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.901912928 CET	8.8.8.8	192.168.2.5	0x2911	No error (0)	mabping.chartbeat.net		54.146.63.211	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.901912928 CET	8.8.8.8	192.168.2.5	0x2911	No error (0)	mabping.chartbeat.net		54.85.86.160	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.901912928 CET	8.8.8.8	192.168.2.5	0x2911	No error (0)	mabping.chartbeat.net		52.45.30.192	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.901912928 CET	8.8.8.8	192.168.2.5	0x2911	No error (0)	mabping.chartbeat.net		54.172.203.45	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.901912928 CET	8.8.8.8	192.168.2.5	0x2911	No error (0)	mabping.chartbeat.net		3.233.251.228	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.906903028 CET	8.8.8.8	192.168.2.5	0x5656	No error (0)	ping.chartbeat.net		18.206.143.246	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.906903028 CET	8.8.8.8	192.168.2.5	0x5656	No error (0)	ping.chartbeat.net		34.235.10.8	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.906903028 CET	8.8.8.8	192.168.2.5	0x5656	No error (0)	ping.chartbeat.net		34.199.137.112	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.906903028 CET	8.8.8.8	192.168.2.5	0x5656	No error (0)	ping.chartbeat.net		23.20.221.146	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.906903028 CET	8.8.8.8	192.168.2.5	0x5656	No error (0)	ping.chartbeat.net		34.237.68.53	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.906903028 CET	8.8.8.8	192.168.2.5	0x5656	No error (0)	ping.chartbeat.net		54.173.193.235	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.906903028 CET	8.8.8.8	192.168.2.5	0x5656	No error (0)	ping.chartbeat.net		3.224.220.79	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:51.906903028 CET	8.8.8.8	192.168.2.5	0x5656	No error (0)	ping.chartbeat.net		34.194.60.203	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.375761986 CET	8.8.8.8	192.168.2.5	0xd916	No error (0)	capi.9c9media.com	v.bellmedia.ca.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.482340097 CET	8.8.8.8	192.168.2.5	0xc445	No error (0)	m.addthis.com	m.addthisedge.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.482340097 CET	8.8.8.8	192.168.2.5	0xc445	No error (0)	m.addthisedge.com	ds-m.addthisedge.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.650198936 CET	8.8.8.8	192.168.2.5	0x2762	No error (0)	www.facebook.com	star-mini.c10r.facebook.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.650198936 CET	8.8.8.8	192.168.2.5	0x2762	No error (0)	star-mini.c10r.facebook.com		185.60.216.35	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.690407038 CET	8.8.8.8	192.168.2.5	0x31a1	No error (0)	cm.everesttech.net	cm.everesttech.net.akadns.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.703459978 CET	8.8.8.8	192.168.2.5	0x8b48	No error (0)	bellmedia.demdex.net	gslb-2.demdex.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.703459978 CET	8.8.8.8	192.168.2.5	0x8b48	No error (0)	gslb-2.demdex.net	edge-irl1.demdex.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.703459978 CET	8.8.8.8	192.168.2.5	0x8b48	No error (0)	edge-irl1.demdex.net	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.703459978 CET	8.8.8.8	192.168.2.5	0x8b48	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.248.172.235	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.703459978 CET	8.8.8.8	192.168.2.5	0x8b48	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		54.228.36.34	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.703459978 CET	8.8.8.8	192.168.2.5	0x8b48	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.31.176.223	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.703459978 CET	8.8.8.8	192.168.2.5	0x8b48	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.251.60.147	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.703459978 CET	8.8.8.8	192.168.2.5	0x8b48	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.210.171.182	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.703459978 CET	8.8.8.8	192.168.2.5	0x8b48	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		3.250.252.43	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.703459978 CET	8.8.8.8	192.168.2.5	0x8b48	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		34.246.133.154	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.703459978 CET	8.8.8.8	192.168.2.5	0x8b48	No error (0)	dcs-edge-irl1-876252164.eu-west-1.elb.amazonaws.com		52.18.91.199	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.719002008 CET	8.8.8.8	192.168.2.5	0x38e4	No error (0)	secure.adnxs.com	g.geogslb.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.719002008 CET	8.8.8.8	192.168.2.5	0x38e4	No error (0)	g.geogslb.com	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.719002008 CET	8.8.8.8	192.168.2.5	0x38e4	No error (0)	ib.anycast.adnxs.com		185.33.221.14	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.719002008 CET	8.8.8.8	192.168.2.5	0x38e4	No error (0)	ib.anycast.adnxs.com		185.33.221.13	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.719002008 CET	8.8.8.8	192.168.2.5	0x38e4	No error (0)	ib.anycast.adnxs.com		185.33.221.50	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.719002008 CET	8.8.8.8	192.168.2.5	0x38e4	No error (0)	ib.anycast.adnxs.com		185.33.223.178	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.719002008 CET	8.8.8.8	192.168.2.5	0x38e4	No error (0)	ib.anycast.adnxs.com		185.33.221.52	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.719002008 CET	8.8.8.8	192.168.2.5	0x38e4	No error (0)	ib.anycast.adnxs.com		185.33.221.53	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.719002008 CET	8.8.8.8	192.168.2.5	0x38e4	No error (0)	ib.anycast.adnxs.com		185.33.220.241	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.719002008 CET	8.8.8.8	192.168.2.5	0x38e4	No error (0)	ib.anycast.adnxs.com		185.33.221.91	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.727691889 CET	8.8.8.8	192.168.2.5	0xe359	No error (0)	htlb.casalemedia.com	htlb.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.728218079 CET	8.8.8.8	192.168.2.5	0x24ee	No error (0)	c2shb.ssp.yahoo.com	c2shb.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.728218079 CET	8.8.8.8	192.168.2.5	0x24ee	No error (0)	c2shb.one-mobile-prod.aws.oath.cloud	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.728218079 CET	8.8.8.8	192.168.2.5	0x24ee	No error (0)	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		52.28.203.152	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.728218079 CET	8.8.8.8	192.168.2.5	0x24ee	No error (0)	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		18.156.195.47	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.728218079 CET	8.8.8.8	192.168.2.5	0x24ee	No error (0)	ssp-ats-prod-eu-central-1.one-mobile-prod.aws.oath.cloud		35.157.246.167	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.762861967 CET	8.8.8.8	192.168.2.5	0x8253	No error (0)	bidder.criteo.com	bidder.am5.vip.prod.criteo.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.762861967 CET	8.8.8.8	192.168.2.5	0x8253	No error (0)	bidder.am5.vip.prod.criteo.com		178.250.2.131	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.765049934 CET	8.8.8.8	192.168.2.5	0xbe09	No error (0)	ib.adnxs.com	g.geogslb.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.765049934 CET	8.8.8.8	192.168.2.5	0xbe09	No error (0)	g.geogslb.com	ib.anycast.adnxs.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:52.765049934 CET	8.8.8.8	192.168.2.5	0xbe09	No error (0)	ib.anycast.adnxs.com		185.33.221.52	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.765049934 CET	8.8.8.8	192.168.2.5	0xbe09	No error (0)	ib.anycast.adnxs.com		185.33.221.53	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.765049934 CET	8.8.8.8	192.168.2.5	0xbe09	No error (0)	ib.anycast.adnxs.com		185.33.221.88	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.765049934 CET	8.8.8.8	192.168.2.5	0xbe09	No error (0)	ib.anycast.adnxs.com		185.33.221.15	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.765049934 CET	8.8.8.8	192.168.2.5	0xbe09	No error (0)	ib.anycast.adnxs.com		185.33.220.240	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.765049934 CET	8.8.8.8	192.168.2.5	0xbe09	No error (0)	ib.anycast.adnxs.com		185.33.220.241	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.765049934 CET	8.8.8.8	192.168.2.5	0xbe09	No error (0)	ib.anycast.adnxs.com		185.33.221.90	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.765049934 CET	8.8.8.8	192.168.2.5	0xbe09	No error (0)	ib.anycast.adnxs.com		185.33.221.50	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:52.847822905 CET	8.8.8.8	192.168.2.5	0xf958	No error (0)	aax-eu.amazon-adsystem.com		52.95.116.38	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.088485003 CET	8.8.8.8	192.168.2.5	0xfd4b	No error (0)	usermatch.krxd.net	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.088485003 CET	8.8.8.8	192.168.2.5	0xfd4b	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		34.205.120.60	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.088485003 CET	8.8.8.8	192.168.2.5	0xfd4b	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		34.237.161.69	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.088485003 CET	8.8.8.8	192.168.2.5	0xfd4b	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		34.226.132.24	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.088485003 CET	8.8.8.8	192.168.2.5	0xfd4b	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		54.165.137.101	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.088485003 CET	8.8.8.8	192.168.2.5	0xfd4b	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		18.213.190.7	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.088485003 CET	8.8.8.8	192.168.2.5	0xfd4b	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		3.223.81.219	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.088485003 CET	8.8.8.8	192.168.2.5	0xfd4b	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		3.210.3.115	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.088485003 CET	8.8.8.8	192.168.2.5	0xfd4b	No error (0)	prod-ash-usermatch-1919559762.us-east-1.elb.amazonaws.com		107.21.231.45	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.098037958 CET	8.8.8.8	192.168.2.5	0x6948	No error (0)	idsync.rlcdn.com		35.244.174.68	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.099536896 CET	8.8.8.8	192.168.2.5	0x7399	No error (0)	stags.bluekai.com	tags.bluekai.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.104017019 CET	8.8.8.8	192.168.2.5	0x853e	No error (0)	aa.agkn.com	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.104017019 CET	8.8.8.8	192.168.2.5	0x853e	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		18.132.239.61	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.104017019 CET	8.8.8.8	192.168.2.5	0x853e	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		35.176.232.241	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.104017019 CET	8.8.8.8	192.168.2.5	0x853e	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		52.56.207.211	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.104017019 CET	8.8.8.8	192.168.2.5	0x853e	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		52.56.111.113	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.104017019 CET	8.8.8.8	192.168.2.5	0x853e	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		18.133.35.94	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.104017019 CET	8.8.8.8	192.168.2.5	0x853e	No error (0)	aa-agkn-com-https-1893222849.eu-west-2.elb.amazonaws.com		3.11.29.5	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.110615969 CET	8.8.8.8	192.168.2.5	0x7511	No error (0)	sb.scorecardresearch.com	sb-eu.scorecardresearch.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.110615969 CET	8.8.8.8	192.168.2.5	0x7511	No error (0)	sb-eu.scorecardresearch.com	sb.scorecardresearch.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.118477106 CET	8.8.8.8	192.168.2.5	0x28f	No error (0)	loadm.exelator.com	loadus.tm.ssl.exelator.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.118477106 CET	8.8.8.8	192.168.2.5	0x28f	No error (0)	loadus.tm.ssl.exelator.com	eu-west.load.exelator.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.118477106 CET	8.8.8.8	192.168.2.5	0x28f	No error (0)	eu-west.load.exelator.com	load-euw1.exelator.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.118477106 CET	8.8.8.8	192.168.2.5	0x28f	No error (0)	load-euw1.exelator.com		54.78.254.47	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.122128963 CET	8.8.8.8	192.168.2.5	0xa7ea	No error (0)	ssum-sec.casalemedia.com	ssum-sec.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.128635883 CET	8.8.8.8	192.168.2.5	0x66c4	Name error (3)	kr.ixiaa.com	none	none	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.133635044 CET	8.8.8.8	192.168.2.5	0x6e1c	Name error (3)	dx.bigsea.weborama.com	none	none	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.168279886 CET	8.8.8.8	192.168.2.5	0x922f	Name error (3)	r.nexac.com	none	none	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.241858006 CET	8.8.8.8	192.168.2.5	0xaf3a	Name error (3)	dx.bigsea.weborama.com	none	none	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.256330013 CET	8.8.8.8	192.168.2.5	0xe7b3	Name error (3)	kr.ixiaa.com	none	none	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.361427069 CET	8.8.8.8	192.168.2.5	0xee26	No error (0)	as-sec.casalemedia.com	as-sec.casalemedia.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.368926048 CET	8.8.8.8	192.168.2.5	0x5bc3	No error (0)	adservice.google.co.uk	pagead46.l.doubleclick.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.368926048 CET	8.8.8.8	192.168.2.5	0x5bc3	No error (0)	pagead46.l.doubleclick.net		172.217.168.66	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.369173050 CET	8.8.8.8	192.168.2.5	0x90e6	Name error (3)	r.nexac.com	none	none	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.497718096 CET	8.8.8.8	192.168.2.5	0x98e4	No error (0)	beacon.krxd.net	beacon-dub-prod.krxd.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.497718096 CET	8.8.8.8	192.168.2.5	0x98e4	No error (0)	beacon-dub-prod.krxd.net	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.497718096 CET	8.8.8.8	192.168.2.5	0x98e4	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		34.246.207.243	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.497718096 CET	8.8.8.8	192.168.2.5	0x98e4	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		54.194.235.254	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.497718096 CET	8.8.8.8	192.168.2.5	0x98e4	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.48.18.249	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.497718096 CET	8.8.8.8	192.168.2.5	0x98e4	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		34.249.114.112	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.497718096 CET	8.8.8.8	192.168.2.5	0x98e4	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		52.31.77.198	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.497718096 CET	8.8.8.8	192.168.2.5	0x98e4	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		54.77.62.253	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.497718096 CET	8.8.8.8	192.168.2.5	0x98e4	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		34.243.1.111	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.497718096 CET	8.8.8.8	192.168.2.5	0x98e4	No error (0)	prod-dub-beacon-1484770602.eu-west-1.elb.amazonaws.com		54.154.24.172	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.552659035 CET	8.8.8.8	192.168.2.5	0x7f77	No error (0)	cm.g.doubleclick.net		216.58.215.226	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.760679007 CET	8.8.8.8	192.168.2.5	0x4f87	No error (0)	api-public.addthis.com	ds-api-public.addthis.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.844736099 CET	8.8.8.8	192.168.2.5	0x6225	No error (0)	ups.analytics.yahoo.com	prod.ups-ats.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.844736099 CET	8.8.8.8	192.168.2.5	0x6225	No error (0)	prod.ups-ats.aolp-ds-prd.aws.oath.cloud	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:53.844736099 CET	8.8.8.8	192.168.2.5	0x6225	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		18.156.0.31	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.844736099 CET	8.8.8.8	192.168.2.5	0x6225	No error (0)	prod.ups-ats.eu-central-1.aolp-ds-prd.aws.oath.cloud		3.126.56.137	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.851026058 CET	8.8.8.8	192.168.2.5	0xbc58	No error (0)	s.ad.smaato.net		13.226.169.83	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.851026058 CET	8.8.8.8	192.168.2.5	0xbc58	No error (0)	s.ad.smaato.net		13.226.169.88	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.851026058 CET	8.8.8.8	192.168.2.5	0xbc58	No error (0)	s.ad.smaato.net		13.226.169.93	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:53.851026058 CET	8.8.8.8	192.168.2.5	0xbc58	No error (0)	s.ad.smaato.net		13.226.169.129	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.101648092 CET	8.8.8.8	192.168.2.5	0x108b	No error (0)	js.agkn.com	d1n0xl2kej0ebw.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:56.101648092 CET	8.8.8.8	192.168.2.5	0x108b	No error (0)	d1n0xl2kej0ebw.cloudfront.net		99.86.159.26	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.101648092 CET	8.8.8.8	192.168.2.5	0x108b	No error (0)	d1n0xl2kej0ebw.cloudfront.net		99.86.159.101	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.101648092 CET	8.8.8.8	192.168.2.5	0x108b	No error (0)	d1n0xl2kej0ebw.cloudfront.net		99.86.159.68	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.101648092 CET	8.8.8.8	192.168.2.5	0x108b	No error (0)	d1n0xl2kej0ebw.cloudfront.net		99.86.159.95	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.396294117 CET	8.8.8.8	192.168.2.5	0x6ed4	No error (0)	d.agkn.com	data.agkn.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:56.396294117 CET	8.8.8.8	192.168.2.5	0x6ed4	No error (0)	data.agkn.com	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:01:56.396294117 CET	8.8.8.8	192.168.2.5	0x6ed4	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		3.126.239.96	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.396294117 CET	8.8.8.8	192.168.2.5	0x6ed4	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		52.29.48.214	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.396294117 CET	8.8.8.8	192.168.2.5	0x6ed4	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.194.113.221	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.396294117 CET	8.8.8.8	192.168.2.5	0x6ed4	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		52.57.98.174	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.396294117 CET	8.8.8.8	192.168.2.5	0x6ed4	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.195.77.77	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.396294117 CET	8.8.8.8	192.168.2.5	0x6ed4	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.196.98.222	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.396294117 CET	8.8.8.8	192.168.2.5	0x6ed4	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		3.125.148.42	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.396294117 CET	8.8.8.8	192.168.2.5	0x6ed4	No error (0)	tag-terraform-elb-1705565586.eu-central-1.elb.amazonaws.com		18.195.77.165	A (IP address)	IN (0x0001)
Mar 19, 2021 08:01:56.666023970 CET	8.8.8.8	192.168.2.5	0x7ac1	No error (0)	pixel.mathtag.com	pixel.mathtag.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:02:12.689232111 CET	8.8.8.8	192.168.2.5	0x46b	No error (0)	static.ctvnews.ca	news.bellmedia.ca.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:02:17.129550934 CET	8.8.8.8	192.168.2.5	0xe686	No error (0)	jslog.krxd.net	beacon-ash-prod.krxd.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:02:17.129550934 CET	8.8.8.8	192.168.2.5	0xe686	No error (0)	beacon-ash-prod.krxd.net	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:02:17.129550934 CET	8.8.8.8	192.168.2.5	0xe686	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		34.234.127.242	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:17.129550934 CET	8.8.8.8	192.168.2.5	0xe686	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		52.86.215.251	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:17.129550934 CET	8.8.8.8	192.168.2.5	0xe686	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		54.152.181.8	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:17.129550934 CET	8.8.8.8	192.168.2.5	0xe686	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		34.236.197.153	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:17.129550934 CET	8.8.8.8	192.168.2.5	0xe686	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		35.168.218.99	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:17.129550934 CET	8.8.8.8	192.168.2.5	0xe686	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		50.19.43.94	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:17.129550934 CET	8.8.8.8	192.168.2.5	0xe686	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		54.164.83.182	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:17.129550934 CET	8.8.8.8	192.168.2.5	0xe686	No error (0)	prod-ash-beacon-1960876484.us-east-1.elb.amazonaws.com		54.144.5.237	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:59.289700985 CET	8.8.8.8	192.168.2.5	0x9481	No error (0)	static.agkn.com	d10jk3zb4x05up.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:02:59.289700985 CET	8.8.8.8	192.168.2.5	0x9481	No error (0)	d10jk3zb4x05up.cloudfront.net		13.226.169.41	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:59.289700985 CET	8.8.8.8	192.168.2.5	0x9481	No error (0)	d10jk3zb4x05up.cloudfront.net		13.226.169.122	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:59.289700985 CET	8.8.8.8	192.168.2.5	0x9481	No error (0)	d10jk3zb4x05up.cloudfront.net		13.226.169.44	A (IP address)	IN (0x0001)
Mar 19, 2021 08:02:59.289700985 CET	8.8.8.8	192.168.2.5	0x9481	No error (0)	d10jk3zb4x05up.cloudfront.net		13.226.169.54	A (IP address)	IN (0x0001)
Mar 19, 2021 08:03:03.535216093 CET	8.8.8.8	192.168.2.5	0xa299	No error (0)	confiant-integrations.global.ssl.fastly.net		151.101.1.194	A (IP address)	IN (0x0001)
Mar 19, 2021 08:03:03.535216093 CET	8.8.8.8	192.168.2.5	0xa299	No error (0)	confiant-integrations.global.ssl.fastly.net		151.101.65.194	A (IP address)	IN (0x0001)
Mar 19, 2021 08:03:03.535216093 CET	8.8.8.8	192.168.2.5	0xa299	No error (0)	confiant-integrations.global.ssl.fastly.net		151.101.129.194	A (IP address)	IN (0x0001)
Mar 19, 2021 08:03:03.535216093 CET	8.8.8.8	192.168.2.5	0xa299	No error (0)	confiant-integrations.global.ssl.fastly.net		151.101.193.194	A (IP address)	IN (0x0001)
Mar 19, 2021 08:03:04.730133057 CET	8.8.8.8	192.168.2.5	0xe771	No error (0)	idp.securetve.com	idp.securetve.com.edgekey.net		CNAME (Canonical name)	IN (0x0001)
Mar 19, 2021 08:03:05.945684910 CET	8.8.8.8	192.168.2.5	0x9e2	No error (0)	googleads.g.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Mar 19, 2021 08:01:48.730784893 CET	104.19.149.54	443	192.168.2.5	49717	CN=permutive.com, O="Cloudflare, Inc.", L=San Francisco, ST=California, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Mar 02 01:00:00 CET 2021 Mon Jan 27 13:48:08 CET 2020	Wed Mar 02 00:59:59 CET 2022 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:48.730784893 CET	104.19.149.54	443	192.168.2.5	49717	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:48.734714031 CET	104.19.149.54	443	192.168.2.5	49716	CN=permutive.com, O="Cloudflare, Inc.", L=San Francisco, ST=California, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Tue Mar 02 01:00:00 CET 2021 Mon Jan 27 13:48:08 CET 2020	Wed Mar 02 00:59:59 CET 2022 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:48.734714031 CET	104.19.149.54	443	192.168.2.5	49716	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:48.739931107 CET	99.86.163.177	443	192.168.2.5	49715	CN=*.chartbeat.com CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Jun 01 02:00:00 CEST 2020 Mon Nov 06 13:23:52 CET 2017	Wed Jun 02 14:00:00 CEST 2021 Sat Nov 06 13:23:52 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:48.739931107 CET	99.86.163.177	443	192.168.2.5	49715	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:52 CET 2017	Sat Nov 06 13:23:52 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:48.739972115 CET	99.86.163.177	443	192.168.2.5	49714	CN=*.chartbeat.com CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Jun 01 02:00:00 CEST 2020 Mon Nov 06 13:23:52 CET 2017	Wed Jun 02 14:00:00 CEST 2021 Sat Nov 06 13:23:52 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:48.739972115 CET	99.86.163.177	443	192.168.2.5	49714	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:52 CET 2017	Sat Nov 06 13:23:52 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:48.896158934 CET	192.229.233.25	443	192.168.2.5	49729	CN=*.twimg.com, O="Twitter, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Nov 05 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020	Wed Nov 10 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:48.896158934 CET	192.229.233.25	443	192.168.2.5	49729	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:49.058074951 CET	192.229.233.25	443	192.168.2.5	49728	CN=*.twimg.com, O="Twitter, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Nov 05 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020	Wed Nov 10 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:49.058074951 CET	192.229.233.25	443	192.168.2.5	49728	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:49.284055948 CET	104.26.3.116	443	192.168.2.5	49733	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jul 20 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Tue Jul 20 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:49.284055948 CET	104.26.3.116	443	192.168.2.5	49733	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:49.285907984 CET	104.26.3.116	443	192.168.2.5	49732	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jul 20 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Tue Jul 20 14:00:00 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:49.285907984 CET	104.26.3.116	443	192.168.2.5	49732	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:50.912035942 CET	52.50.244.146	443	192.168.2.5	49737	CN=*.moatads.com, OU=Infra-Core, O=Oracle Corporation, L=Redwood City, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Mar 12 01:00:00 CET 2019 Fri Mar 08 13:00:00 CET 2013	Thu Jun 10 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:50.912035942 CET	52.50.244.146	443	192.168.2.5	49737	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:50.912405968 CET	52.50.244.146	443	192.168.2.5	49736	CN=*.moatads.com, OU=Infra-Core, O=Oracle Corporation, L=Redwood City, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Mar 12 01:00:00 CET 2019 Fri Mar 08 13:00:00 CET 2013	Thu Jun 10 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:50.912405968 CET	52.50.244.146	443	192.168.2.5	49736	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:50.960092068 CET	99.86.162.13	443	192.168.2.5	49747	CN=c.amazon-adsystem.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Tue Aug 04 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Mon Aug 02 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Mar 19, 2021 08:01:50.960124969 CET	99.86.162.13	443	192.168.2.5	49746	CN=c.amazon-adsystem.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Tue Aug 04 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Mon Aug 02 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Mar 19, 2021 08:01:50.967386007 CET	216.58.215.226	443	192.168.2.5	49744	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Feb 23 16:36:52 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue May 18 17:36:51 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:50.967386007 CET	216.58.215.226	443	192.168.2.5	49744	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:50.969839096 CET	216.58.215.226	443	192.168.2.5	49745	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Feb 23 16:36:52 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue May 18 17:36:51 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:50.969839096 CET	216.58.215.226	443	192.168.2.5	49745	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:50.976218939 CET	54.72.67.237	443	192.168.2.5	49741	CN=*.moatads.com, OU=Infra-Core, O=Oracle Corporation, L=Redwood City, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Mar 12 01:00:00 CET 2019 Fri Mar 08 13:00:00 CET 2013	Thu Jun 10 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:50.976218939 CET	54.72.67.237	443	192.168.2.5	49741	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:50.980475903 CET	54.72.67.237	443	192.168.2.5	49740	CN=*.moatads.com, OU=Infra-Core, O=Oracle Corporation, L=Redwood City, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Mar 12 01:00:00 CET 2019 Fri Mar 08 13:00:00 CET 2013	Thu Jun 10 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:50.980475903 CET	54.72.67.237	443	192.168.2.5	49740	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.002079964 CET	178.250.2.130	443	192.168.2.5	49748	CN=*.criteo.net, O=Criteo SA, L=Paris, ST=le-de-France, C=FR CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jan 30 01:00:00 CET 2021 Wed Sep 23 02:00:00 CEST 2020	Thu Apr 29 01:59:59 CEST 2021 Mon Sep 23 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.002079964 CET	178.250.2.130	443	192.168.2.5	49748	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 23 02:00:00 CEST 2020	Mon Sep 23 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.002928019 CET	34.120.133.55	443	192.168.2.5	49751	CN=*.rlcdn.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Feb 25 01:00:00 CET 2021 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 Thu Jan 01 01:00:00 CET 2004	Tue Mar 29 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
					CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Mar 19, 2021 08:01:51.003036976 CET	178.250.2.130	443	192.168.2.5	49749	CN=*.criteo.net, O=Criteo SA, L=Paris, ST=le-de-France, C=FR CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jan 30 01:00:00 CET 2021 Wed Sep 23 02:00:00 CEST 2020	Thu Apr 29 01:59:59 CEST 2021 Mon Sep 23 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.003036976 CET	178.250.2.130	443	192.168.2.5	49749	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 23 02:00:00 CEST 2020	Mon Sep 23 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.051820040 CET	34.120.133.55	443	192.168.2.5	49753	CN=*.rlcdn.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Feb 25 01:00:00 CET 2021 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 Thu Jan 01 01:00:00 CET 2004	Tue Mar 29 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
					CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Mar 19, 2021 08:01:51.073115110 CET	52.50.156.162	443	192.168.2.5	49752	C=US, ST=California, L=Ventura, O=The Trade Desk Inc, CN=*.adsrvr.org EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US	EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Mar 07 11:41:08 CET 2019 Thu Sep 01 16:35:35 CEST 2016	Mon Apr 19 18:41:08 CEST 2021 Sun Sep 29 16:35:35 CEST 2024	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.073115110 CET	52.50.156.162	443	192.168.2.5	49752	EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Sep 01 16:35:35 CEST 2016	Sun Sep 29 16:35:35 CEST 2024		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.074424982 CET	52.50.156.162	443	192.168.2.5	49750	C=US, ST=California, L=Ventura, O=The Trade Desk Inc, CN=*.adsrvr.org EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US	EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Mar 07 11:41:08 CET 2019 Thu Sep 01 16:35:35 CEST 2016	Mon Apr 19 18:41:08 CEST 2021 Sun Sep 29 16:35:35 CEST 2024	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.074424982 CET	52.50.156.162	443	192.168.2.5	49750	EMAILADDRESS=ca@trustwave.com, CN="Trustwave Organization Validation SHA256 CA, Level 1", O="Trustwave Holdings, Inc.", L=Chicago, ST=Illinois, C=US	CN=SecureTrust CA, O=SecureTrust Corporation, C=US	Thu Sep 01 16:35:35 CEST 2016	Sun Sep 29 16:35:35 CEST 2024		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.158246040 CET	54.195.23.91	443	192.168.2.5	49755	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Dec 02 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Mon Jan 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Mar 19, 2021 08:01:51.159571886 CET	54.195.23.91	443	192.168.2.5	49754	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Dec 02 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Mon Jan 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Mar 19, 2021 08:01:51.582251072 CET	216.58.215.226	443	192.168.2.5	49756	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Feb 23 16:36:52 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue May 18 17:36:51 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.582251072 CET	216.58.215.226	443	192.168.2.5	49756	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.597940922 CET	216.58.215.226	443	192.168.2.5	49757	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Feb 23 16:36:52 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue May 18 17:36:51 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.597940922 CET	216.58.215.226	443	192.168.2.5	49757	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.709542036 CET	185.60.216.19	443	192.168.2.5	49762	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.709542036 CET	185.60.216.19	443	192.168.2.5	49762	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.709768057 CET	185.60.216.19	443	192.168.2.5	49763	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.709768057 CET	185.60.216.19	443	192.168.2.5	49763	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.820447922 CET	178.250.0.157	443	192.168.2.5	49764	CN=*.criteo.com, O=Criteo SA, L=Paris, ST=le-de-France, C=FR CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jan 30 01:00:00 CET 2021 Wed Sep 23 02:00:00 CEST 2020	Thu Apr 29 01:59:59 CEST 2021 Mon Sep 23 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.820447922 CET	178.250.0.157	443	192.168.2.5	49764	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 23 02:00:00 CEST 2020	Mon Sep 23 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.820749044 CET	178.250.0.157	443	192.168.2.5	49765	CN=*.criteo.com, O=Criteo SA, L=Paris, ST=le-de-France, C=FR CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jan 30 01:00:00 CET 2021 Wed Sep 23 02:00:00 CEST 2020	Thu Apr 29 01:59:59 CEST 2021 Mon Sep 23 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:51.820749044 CET	178.250.0.157	443	192.168.2.5	49765	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 23 02:00:00 CEST 2020	Mon Sep 23 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.260329962 CET	52.73.84.222	443	192.168.2.5	49768	CN=*.chartbeat.net CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Dec 01 01:00:00 CET 2020 Mon Nov 06 13:23:52 CET 2017	Fri Dec 31 00:59:59 CET 2021 Sat Nov 06 13:23:52 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.260329962 CET	52.73.84.222	443	192.168.2.5	49768	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:52 CET 2017	Sat Nov 06 13:23:52 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.260473013 CET	52.73.84.222	443	192.168.2.5	49769	CN=*.chartbeat.net CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Dec 01 01:00:00 CET 2020 Mon Nov 06 13:23:52 CET 2017	Fri Dec 31 00:59:59 CET 2021 Sat Nov 06 13:23:52 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.260473013 CET	52.73.84.222	443	192.168.2.5	49769	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:52 CET 2017	Sat Nov 06 13:23:52 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.260597944 CET	18.206.143.246	443	192.168.2.5	49770	CN=*.chartbeat.net CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Dec 01 01:00:00 CET 2020 Mon Nov 06 13:23:52 CET 2017	Fri Dec 31 00:59:59 CET 2021 Sat Nov 06 13:23:52 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.260597944 CET	18.206.143.246	443	192.168.2.5	49770	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:52 CET 2017	Sat Nov 06 13:23:52 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.261318922 CET	18.206.143.246	443	192.168.2.5	49771	CN=*.chartbeat.net CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Dec 01 01:00:00 CET 2020 Mon Nov 06 13:23:52 CET 2017	Fri Dec 31 00:59:59 CET 2021 Sat Nov 06 13:23:52 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.261318922 CET	18.206.143.246	443	192.168.2.5	49771	CN=Thawte RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:52 CET 2017	Sat Nov 06 13:23:52 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.739660978 CET	185.60.216.35	443	192.168.2.5	49779	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.739660978 CET	185.60.216.35	443	192.168.2.5	49779	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.743448973 CET	185.60.216.35	443	192.168.2.5	49780	CN=*.facebook.com, O="Facebook, Inc.", L=Menlo Park, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Feb 10 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Tue May 11 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.743448973 CET	185.60.216.35	443	192.168.2.5	49780	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.824862003 CET	52.28.203.152	443	192.168.2.5	49793	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.824862003 CET	52.28.203.152	443	192.168.2.5	49793	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.825037956 CET	52.28.203.152	443	192.168.2.5	49790	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.825037956 CET	52.28.203.152	443	192.168.2.5	49790	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.825911999 CET	52.28.203.152	443	192.168.2.5	49792	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.825911999 CET	52.28.203.152	443	192.168.2.5	49792	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.831672907 CET	52.28.203.152	443	192.168.2.5	49791	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.831672907 CET	52.28.203.152	443	192.168.2.5	49791	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.832094908 CET	52.28.203.152	443	192.168.2.5	49794	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.832094908 CET	52.28.203.152	443	192.168.2.5	49794	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.832319975 CET	52.28.203.152	443	192.168.2.5	49789	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.832319975 CET	52.28.203.152	443	192.168.2.5	49789	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.837104082 CET	34.248.172.235	443	192.168.2.5	49783	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Dec 02 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Mon Jan 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Mar 19, 2021 08:01:52.837241888 CET	34.248.172.235	443	192.168.2.5	49784	CN=*.demdex.net, OU=Digital Marketing, O=Adobe Systems Incorporated, L=San Jose, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Dec 02 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006	Mon Jan 03 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Mar 19, 2021 08:01:52.842766047 CET	185.33.221.14	443	192.168.2.5	49785	CN=*.adnxs.com, O=Xandr Inc., L=New York, ST=New York, C=US CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 05 01:00:00 CET 2021 Mon Nov 06 13:24:09 CET 2017	Sun Feb 20 00:59:59 CET 2022 Sat Nov 06 13:24:09 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.842766047 CET	185.33.221.14	443	192.168.2.5	49785	CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:24:09 CET 2017	Sat Nov 06 13:24:09 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.843040943 CET	185.33.221.14	443	192.168.2.5	49786	CN=*.adnxs.com, O=Xandr Inc., L=New York, ST=New York, C=US CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 05 01:00:00 CET 2021 Mon Nov 06 13:24:09 CET 2017	Sun Feb 20 00:59:59 CET 2022 Sat Nov 06 13:24:09 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.843040943 CET	185.33.221.14	443	192.168.2.5	49786	CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:24:09 CET 2017	Sat Nov 06 13:24:09 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.860838890 CET	178.250.2.131	443	192.168.2.5	49795	CN=*.criteo.com, O=Criteo SA, L=Paris, ST=le-de-France, C=FR CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jan 30 01:00:00 CET 2021 Wed Sep 23 02:00:00 CEST 2020	Thu Apr 29 01:59:59 CEST 2021 Mon Sep 23 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.860838890 CET	178.250.2.131	443	192.168.2.5	49795	CN=DigiCert TLS Hybrid ECC SHA384 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Sep 23 02:00:00 CEST 2020	Mon Sep 23 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.883410931 CET	185.33.221.52	443	192.168.2.5	49796	CN=*.adnxs.com, O=Xandr Inc., L=New York, ST=New York, C=US CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 05 01:00:00 CET 2021 Mon Nov 06 13:24:09 CET 2017	Sun Feb 20 00:59:59 CET 2022 Sat Nov 06 13:24:09 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.883410931 CET	185.33.221.52	443	192.168.2.5	49796	CN=GeoTrust ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:24:09 CET 2017	Sat Nov 06 13:24:09 CET 2027		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:52.990660906 CET	52.95.116.38	443	192.168.2.5	49798	CN=aax-eu.amazon-adsystem.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Mon Jun 15 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Tue Jun 15 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Mar 19, 2021 08:01:52.997503996 CET	52.95.116.38	443	192.168.2.5	49797	CN=aax-eu.amazon-adsystem.com CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Mon Jun 15 02:00:00 CEST 2020 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Tue Jun 15 14:00:00 CEST 2021 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Mar 19, 2021 08:01:53.273808002 CET	54.78.254.47	443	192.168.2.5	49809	CN=*.exelator.com, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri May 17 13:46:01 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Fri Jun 25 22:10:39 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Mar 19, 2021 08:01:53.282341003 CET	54.78.254.47	443	192.168.2.5	49810	CN=*.exelator.com, OU=Domain Control Validated CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Fri May 17 13:46:01 CEST 2019 Tue May 03 09:00:00 CEST 2011 Wed Jan 01 08:00:00 CET 2014 Tue Jun 29 19:06:20 CEST 2004	Fri Jun 25 22:10:39 CEST 2021 Sat May 03 09:00:00 CEST 2031 Fri May 30 09:00:00 CEST 2031 Thu Jun 29 19:06:20 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Go Daddy Secure Certificate Authority - G2, OU=http://certs.godaddy.com/repository/, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	Tue May 03 09:00:00 CEST 2011	Sat May 03 09:00:00 CEST 2031
					CN=Go Daddy Root Certificate Authority - G2, O="GoDaddy.com, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Wed Jan 01 08:00:00 CET 2014	Fri May 30 09:00:00 CEST 2031
					OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	OU=Go Daddy Class 2 Certification Authority, O="The Go Daddy Group, Inc.", C=US	Tue Jun 29 19:06:20 CEST 2004	Thu Jun 29 19:06:20 CEST 2034
Mar 19, 2021 08:01:53.287390947 CET	35.244.174.68	443	192.168.2.5	49805	CN=*.rlcdn.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Feb 25 01:00:00 CET 2021 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 Thu Jan 01 01:00:00 CET 2004	Tue Mar 29 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
					CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Mar 19, 2021 08:01:53.354406118 CET	35.244.174.68	443	192.168.2.5	49806	CN=*.rlcdn.com CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Feb 25 01:00:00 CET 2021 Fri Nov 02 01:00:00 CET 2018 Tue Mar 12 01:00:00 CET 2019 Thu Jan 01 01:00:00 CET 2004	Tue Mar 29 01:59:59 CEST 2022 Wed Jan 01 00:59:59 CET 2031 Mon Jan 01 00:59:59 CET 2029 Mon Jan 01 00:59:59 CET 2029	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Sectigo RSA Domain Validation Secure Server CA, O=Sectigo Limited, L=Salford, ST=Greater Manchester, C=GB	CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	Fri Nov 02 01:00:00 CET 2018	Wed Jan 01 00:59:59 CET 2031
					CN=USERTrust RSA Certification Authority, O=The USERTRUST Network, L=Jersey City, ST=New Jersey, C=US	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Tue Mar 12 01:00:00 CET 2019	Mon Jan 01 00:59:59 CET 2029
					CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	CN=AAA Certificate Services, O=Comodo CA Limited, L=Salford, ST=Greater Manchester, C=GB	Thu Jan 01 01:00:00 CET 2004	Mon Jan 01 00:59:59 CET 2029
Mar 19, 2021 08:01:53.356359959 CET	18.132.239.61	443	192.168.2.5	49803	CN=*.agkn.com CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jul 25 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006 Mon Nov 06 13:23:33 CET 2017	Sun Sep 18 14:00:00 CEST 2022 Mon Nov 10 01:00:00 CET 2031 Sat Nov 06 13:23:33 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
					CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027
Mar 19, 2021 08:01:53.360042095 CET	18.132.239.61	443	192.168.2.5	49804	CN=*.agkn.com CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jul 25 02:00:00 CEST 2020 Fri Nov 10 01:00:00 CET 2006 Mon Nov 06 13:23:33 CET 2017	Sun Sep 18 14:00:00 CEST 2022 Mon Nov 10 01:00:00 CET 2031 Sat Nov 06 13:23:33 CET 2027	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
					CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027
Mar 19, 2021 08:01:53.367028952 CET	34.205.120.60	443	192.168.2.5	49800	CN=usermatch-prod.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=usermatch-prod.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 10 02:00:00 CEST 2020 Thu Sep 10 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Sep 10 14:00:00 CEST 2021 Fri Sep 10 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=usermatch-prod.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	Thu Sep 10 02:00:00 CEST 2020	Fri Sep 10 14:00:00 CEST 2021
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
Mar 19, 2021 08:01:53.367347956 CET	34.205.120.60	443	192.168.2.5	49799	CN=usermatch-prod.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=usermatch-prod.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 10 02:00:00 CEST 2020 Thu Sep 10 02:00:00 CEST 2020 Fri Mar 08 13:00:00 CET 2013	Fri Sep 10 14:00:00 CEST 2021 Fri Sep 10 14:00:00 CEST 2021 Wed Mar 08 13:00:00 CET 2023	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=usermatch-prod.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US	CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	Thu Sep 10 02:00:00 CEST 2020	Fri Sep 10 14:00:00 CEST 2021
					CN=DigiCert SHA2 Secure Server CA, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Mar 08 13:00:00 CET 2013	Wed Mar 08 13:00:00 CET 2023
Mar 19, 2021 08:01:53.666673899 CET	34.246.207.243	443	192.168.2.5	49819	CN=beacon.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=beacon.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Jan 13 01:00:00 CET 2021 Wed Jan 13 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Sat Jan 08 00:59:59 CET 2022 Sat Jan 08 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=beacon.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	Wed Jan 13 01:00:00 CET 2021	Sat Jan 08 00:59:59 CET 2022
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
Mar 19, 2021 08:01:53.667260885 CET	34.246.207.243	443	192.168.2.5	49818	CN=beacon.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=beacon.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Jan 13 01:00:00 CET 2021 Wed Jan 13 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Sat Jan 08 00:59:59 CET 2022 Sat Jan 08 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=beacon.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	Wed Jan 13 01:00:00 CET 2021	Sat Jan 08 00:59:59 CET 2022
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
Mar 19, 2021 08:01:53.722990036 CET	216.58.215.226	443	192.168.2.5	49824	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Feb 23 16:36:52 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue May 18 17:36:51 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:53.722990036 CET	216.58.215.226	443	192.168.2.5	49824	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:53.760354996 CET	216.58.215.226	443	192.168.2.5	49825	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Feb 23 16:36:52 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue May 18 17:36:51 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:53.760354996 CET	216.58.215.226	443	192.168.2.5	49825	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:53.966312885 CET	13.226.169.83	443	192.168.2.5	49829	CN=s.ad.smaato.net CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Mar 17 01:00:00 CET 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Sat Apr 16 01:59:59 CEST 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Mar 19, 2021 08:01:53.966357946 CET	13.226.169.83	443	192.168.2.5	49830	CN=s.ad.smaato.net CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	CN=Amazon, OU=Server CA 1B, O=Amazon, C=US CN=Amazon Root CA 1, O=Amazon, C=US CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Mar 17 01:00:00 CET 2021 Thu Oct 22 02:00:00 CEST 2015 Mon May 25 14:00:00 CEST 2015 Wed Sep 02 02:00:00 CEST 2009	Sat Apr 16 01:59:59 CEST 2022 Sun Oct 19 02:00:00 CEST 2025 Thu Dec 31 02:00:00 CET 2037 Wed Jun 28 19:39:16 CEST 2034	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=Amazon, OU=Server CA 1B, O=Amazon, C=US	CN=Amazon Root CA 1, O=Amazon, C=US	Thu Oct 22 02:00:00 CEST 2015	Sun Oct 19 02:00:00 CEST 2025
					CN=Amazon Root CA 1, O=Amazon, C=US	CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	Mon May 25 14:00:00 CEST 2015	Thu Dec 31 02:00:00 CET 2037
					CN=Starfield Services Root Certificate Authority - G2, O="Starfield Technologies, Inc.", L=Scottsdale, ST=Arizona, C=US	OU=Starfield Class 2 Certification Authority, O="Starfield Technologies, Inc.", C=US	Wed Sep 02 02:00:00 CEST 2009	Wed Jun 28 19:39:16 CEST 2034
Mar 19, 2021 08:01:53.977298021 CET	18.156.0.31	443	192.168.2.5	49831	CN=ups.analytics.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Oct 24 02:00:00 CEST 2020 Tue Oct 22 14:00:00 CEST 2013	Wed Apr 21 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:53.977298021 CET	18.156.0.31	443	192.168.2.5	49831	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:53.978023052 CET	18.156.0.31	443	192.168.2.5	49832	CN=ups.analytics.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Oct 24 02:00:00 CEST 2020 Tue Oct 22 14:00:00 CEST 2013	Wed Apr 21 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:53.978023052 CET	18.156.0.31	443	192.168.2.5	49832	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:01:56.250184059 CET	99.86.159.26	443	192.168.2.5	49835	CN=*.agkn.com CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jul 25 02:00:00 CEST 2020 Mon Nov 06 13:23:33 CET 2017 Fri Nov 10 01:00:00 CET 2006	Sun Sep 18 14:00:00 CEST 2022 Sat Nov 06 13:23:33 CET 2027 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Mar 19, 2021 08:01:56.252799034 CET	99.86.159.26	443	192.168.2.5	49834	CN=*.agkn.com CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jul 25 02:00:00 CEST 2020 Mon Nov 06 13:23:33 CET 2017 Fri Nov 10 01:00:00 CET 2006	Sun Sep 18 14:00:00 CEST 2022 Sat Nov 06 13:23:33 CET 2027 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Mar 19, 2021 08:01:56.485032082 CET	3.126.239.96	443	192.168.2.5	49837	CN=*.agkn.com CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jul 25 02:00:00 CEST 2020 Mon Nov 06 13:23:33 CET 2017 Fri Nov 10 01:00:00 CET 2006	Sun Sep 18 14:00:00 CEST 2022 Sat Nov 06 13:23:33 CET 2027 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Mar 19, 2021 08:01:56.485157013 CET	3.126.239.96	443	192.168.2.5	49836	CN=*.agkn.com CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jul 25 02:00:00 CEST 2020 Mon Nov 06 13:23:33 CET 2017 Fri Nov 10 01:00:00 CET 2006	Sun Sep 18 14:00:00 CEST 2022 Sat Nov 06 13:23:33 CET 2027 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Mar 19, 2021 08:02:17.387079000 CET	34.234.127.242	443	192.168.2.5	49852	CN=beacon.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=beacon.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Jan 13 01:00:00 CET 2021 Wed Jan 13 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Sat Jan 08 00:59:59 CET 2022 Sat Jan 08 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=beacon.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	Wed Jan 13 01:00:00 CET 2021	Sat Jan 08 00:59:59 CET 2022
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
Mar 19, 2021 08:02:17.388649940 CET	34.234.127.242	443	192.168.2.5	49853	CN=beacon.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=beacon.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Wed Jan 13 01:00:00 CET 2021 Wed Jan 13 01:00:00 CET 2021 Thu Sep 24 02:00:00 CEST 2020	Sat Jan 08 00:59:59 CET 2022 Sat Jan 08 00:59:59 CET 2022 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=beacon.krxd.net, O="salesforce.com, inc.", L=San Francisco, ST=California, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	Wed Jan 13 01:00:00 CET 2021	Sat Jan 08 00:59:59 CET 2022
					CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030
Mar 19, 2021 08:02:43.060775042 CET	52.28.203.152	443	192.168.2.5	49883	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:43.060775042 CET	52.28.203.152	443	192.168.2.5	49883	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:43.060898066 CET	52.28.203.152	443	192.168.2.5	49884	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:43.060898066 CET	52.28.203.152	443	192.168.2.5	49884	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:43.061330080 CET	52.28.203.152	443	192.168.2.5	49885	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:43.061330080 CET	52.28.203.152	443	192.168.2.5	49885	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:58.528105974 CET	52.28.203.152	443	192.168.2.5	49896	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:58.528105974 CET	52.28.203.152	443	192.168.2.5	49896	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:58.528714895 CET	52.28.203.152	443	192.168.2.5	49897	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:58.528714895 CET	52.28.203.152	443	192.168.2.5	49897	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:58.530179024 CET	52.28.203.152	443	192.168.2.5	49899	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:58.530179024 CET	52.28.203.152	443	192.168.2.5	49899	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:58.530232906 CET	52.28.203.152	443	192.168.2.5	49898	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:58.530232906 CET	52.28.203.152	443	192.168.2.5	49898	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:58.532289028 CET	52.28.203.152	443	192.168.2.5	49900	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:58.532289028 CET	52.28.203.152	443	192.168.2.5	49900	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:58.538852930 CET	52.28.203.152	443	192.168.2.5	49901	CN=web.ssp.yahoo.com, O=Oath Inc, L=Sunnyvale, ST=California, C=US CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Mar 18 01:00:00 CET 2021 Tue Oct 22 14:00:00 CEST 2013	Thu Sep 09 01:59:59 CEST 2021 Sun Oct 22 14:00:00 CEST 2028	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:58.538852930 CET	52.28.203.152	443	192.168.2.5	49901	CN=DigiCert SHA2 High Assurance Server CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert High Assurance EV Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Tue Oct 22 14:00:00 CEST 2013	Sun Oct 22 14:00:00 CEST 2028		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:02:59.418442011 CET	13.226.169.41	443	192.168.2.5	49904	CN=*.agkn.com CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jul 25 02:00:00 CEST 2020 Mon Nov 06 13:23:33 CET 2017 Fri Nov 10 01:00:00 CET 2006	Sun Sep 18 14:00:00 CEST 2022 Sat Nov 06 13:23:33 CET 2027 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Mar 19, 2021 08:02:59.450896025 CET	13.226.169.41	443	192.168.2.5	49905	CN=*.agkn.com CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Sat Jul 25 02:00:00 CEST 2020 Mon Nov 06 13:23:33 CET 2017 Fri Nov 10 01:00:00 CET 2006	Sun Sep 18 14:00:00 CEST 2022 Sat Nov 06 13:23:33 CET 2027 Mon Nov 10 01:00:00 CET 2031	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
					CN=RapidSSL RSA CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Mon Nov 06 13:23:33 CET 2017	Sat Nov 06 13:23:33 CET 2027
					CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Fri Nov 10 01:00:00 CET 2006	Mon Nov 10 01:00:00 CET 2031
Mar 19, 2021 08:03:01.970024109 CET	192.229.233.25	443	192.168.2.5	49907	CN=*.twimg.com, O="Twitter, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Nov 05 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020	Wed Nov 10 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:03:01.970024109 CET	192.229.233.25	443	192.168.2.5	49907	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:03:01.970134020 CET	192.229.233.25	443	192.168.2.5	49906	CN=*.twimg.com, O="Twitter, Inc.", L=San Francisco, ST=California, C=US CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Nov 05 01:00:00 CET 2020 Thu Sep 24 02:00:00 CEST 2020	Wed Nov 10 00:59:59 CET 2021 Tue Sep 24 01:59:59 CEST 2030	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:03:01.970134020 CET	192.229.233.25	443	192.168.2.5	49906	CN=DigiCert TLS RSA SHA256 2020 CA1, O=DigiCert Inc, C=US	CN=DigiCert Global Root CA, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 24 02:00:00 CEST 2020	Tue Sep 24 01:59:59 CEST 2030		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:03:03.833749056 CET	151.101.1.194	443	192.168.2.5	49914	CN=*.freetls.global.fastly.net, O="Fastly, Inc.", L=San Francisco, ST=California, C=US CN=GlobalSign CloudSSL CA - SHA256 - G3, O=GlobalSign nv-sa, C=BE	CN=GlobalSign CloudSSL CA - SHA256 - G3, O=GlobalSign nv-sa, C=BE CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Apr 21 20:42:42 CEST 2020 Wed Aug 19 02:00:00 CEST 2015	Thu Apr 22 20:42:42 CEST 2021 Tue Aug 19 02:00:00 CEST 2025	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Mar 19, 2021 08:03:03.833749056 CET	151.101.1.194	443	192.168.2.5	49914	CN=GlobalSign CloudSSL CA - SHA256 - G3, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Wed Aug 19 02:00:00 CEST 2015	Tue Aug 19 02:00:00 CEST 2025		3faf2df7ab96c36419c31725cb1fa7d6
Mar 19, 2021 08:03:03.833857059 CET	151.101.1.194	443	192.168.2.5	49915	CN=*.freetls.global.fastly.net, O="Fastly, Inc.", L=San Francisco, ST=California, C=US CN=GlobalSign CloudSSL CA - SHA256 - G3, O=GlobalSign nv-sa, C=BE	CN=GlobalSign CloudSSL CA - SHA256 - G3, O=GlobalSign nv-sa, C=BE CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Tue Apr 21 20:42:42 CEST 2020 Wed Aug 19 02:00:00 CEST 2015	Thu Apr 22 20:42:42 CEST 2021 Tue Aug 19 02:00:00 CEST 2025	771,49196-49195-49200-49199-159-158-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	3faf2df7ab96c36419c31725cb1fa7d6
Mar 19, 2021 08:03:03.833857059 CET	151.101.1.194	443	192.168.2.5	49915	CN=GlobalSign CloudSSL CA - SHA256 - G3, O=GlobalSign nv-sa, C=BE	CN=GlobalSign Root CA, OU=Root CA, O=GlobalSign nv-sa, C=BE	Wed Aug 19 02:00:00 CEST 2015	Tue Aug 19 02:00:00 CEST 2025		3faf2df7ab96c36419c31725cb1fa7d6
Mar 19, 2021 08:03:06.054610968 CET	142.250.185.194	443	192.168.2.5	49928	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Feb 23 16:36:52 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue May 18 17:36:51 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:03:06.054610968 CET	142.250.185.194	443	192.168.2.5	49928	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:03:06.054729939 CET	142.250.185.194	443	192.168.2.5	49927	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Feb 23 16:36:52 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue May 18 17:36:51 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-10-11-13-35-16-23-24-65281,29-23-24,0	9e10692f1b7f78228b2d4e424db3a98c
Mar 19, 2021 08:03:06.054729939 CET	142.250.185.194	443	192.168.2.5	49927	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		9e10692f1b7f78228b2d4e424db3a98c

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: iexplore.exe PID: 2968 Parent PID: 792

General

Start time:	08:01:45
Start date:	19/03/2021
Path:	C:\Program Files\internet explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x7ff71d4d0000
File size:	823560 bytes
MD5 hash:	6465CB92B25A7BC1DF8E01D8AC5E7596
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Analysis Process: iexplore.exe PID: 5140 Parent PID: 2968

General

Start time:	08:01:46
Start date:	19/03/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2968 CREDAT:17410 /prefetch:2
Imagebase:	0x130000
File size:	822536 bytes
MD5 hash:	071277CC2E3DF41EEEA8013E2AB58D5A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low

Chronological Activities

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, File monitoring, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, Azure AD, GCP, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report https://toronto.ctvnews.ca/ontario-slashes-gathering-sizes-for-entire-province-as-alarm-bells-ring-over-covid-19-spike-1.5111784

Overview

General Information

Detection

Signatures

Classification

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Compliance:

Networking:

System Summary:

Malware Analysis System Evasion:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

Private

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

No static file info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: iexplore.exe PID: 2968 Parent PID: 792

General

Chronological Activities

Analysis Process: iexplore.exe PID: 5140 Parent PID: 2968

General

Chronological Activities

Disassembly