Play interactive tour

Edit tour

Analysis Report COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx

Overview

General Information

Sample Name:	COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx
Analysis ID:	386160
MD5:	14d9efc0e6bd70f11db15709caffe72f
SHA1:	a9d37cf22facbe7ceda7dec88b983b5092597b5f
SHA256:	cbf87430a5ac83f27e1152f1cbe3b867400ccc68895c9a596697e8e64196c0ef
Infos:
Most interesting Screenshot:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Classification

Analysis Advice

No malicious behavior found, analyze the document also on other version of Office / Acrobat

Uses HTTPS for network communication, use the 'Proxy HTTPS (port 443) to read its encrypted data' cookbook for further analysis

Startup

System is w7x64

WINWORD.EXE (PID: 1796 cmdline: 'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding MD5: 95C38D04597050285A18F66039EDB456)

iexplore.exe (PID: 2616 cmdline: 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding MD5: 4EB098135821348270F27157F7A84E65)

iexplore.exe (PID: 2728 cmdline: 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2616 CREDAT:275457 /prefetch:2 MD5: 8A590F790A98F3D77399BE457E01386A)

cleanup

Malware Configuration

No configs have been found

Yara Overview

No yara matches

Sigma Overview

No Sigma rule has matched

Signature Overview

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49166 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49165 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49171 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49173 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49172 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49184 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49183 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49187 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49186 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49188 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49189 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49190 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49191 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.64:443 -> 192.168.2.22:49194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.64:443 -> 192.168.2.22:49195 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.22:49196 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.22:49197 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.74.185:443 -> 192.168.2.22:49203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.74.185:443 -> 192.168.2.22:49202 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49206 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49204 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49205 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.34:443 -> 192.168.2.22:49214 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.34:443 -> 192.168.2.22:49215 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.33:443 -> 192.168.2.22:49222 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.33:443 -> 192.168.2.22:49223 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.22.246:443 -> 192.168.2.22:49220 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.22.246:443 -> 192.168.2.22:49221 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.41.3.217:443 -> 192.168.2.22:49226 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.41.3.217:443 -> 192.168.2.22:49225 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49232 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 104.16.19.94 104.16.19.94
Source: Joe Sandbox View	IP Address: 104.16.19.94 104.16.19.94

Source: Joe Sandbox View

JA3 fingerprint: 7dcce5b76c8b17472d024758970a406b

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{248F44A0-30CA-4646-ACFF-79FC9E14ADCB}.tmp

Jump to behavior

Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: <div class="video-container"><iframe allow="encrypted-media" allowfullscreen="" class="video-sizing" frameborder="0" scrolling="no" src="https://www.youtube.com/embed/YrjmP_ueahQ?controls=0"></iframe></div> equals www.youtube.com (Youtube)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: publique d\'Ottawa","phone":"613-422-2900","website":"http://www.facebook.com/centretownpharmacy/","monday":"06:00-18:00","tuesday":"06:00-18:00","wednesday":"06:00-18:00","thursday":"06:00-18:00","friday":"06:00-18:00","saturday":"08:00-16:00","sunday":"08:00-16:00","appointments":"Yes","phone_appointments":"TRUE","walk_ins":"No","age_threshold":"5y"},{"active":"Yes","location_id":"332","pharmacy":"Yes","location_name":"MediOne Rx","operated_by":"Independent","city":"Thornhill","address":"100 Steeles Avenue West","address_fr":"100, rue Steeles Ouest","postal_code":"L4J 7Y1","province":"ON","latitude":"43.7979124","longitude":"-79.425512","phu":"York Region Public Health Services","phu_fr":"Service de sant equals www.facebook.com (Facebook)
Source: base[1].js.3.dr	String found in binary or memory: "html5_qoe_intercept"):this.Yj?(t=t.vss_host\|\|"s.youtube.com",this.Z("www_for_videostats")&&"s.youtube.com"===t&&(t=MD(this.va)\|\|"www.youtube.com")):t="video.google.com";this.Pj=t;ND(this,a,!0);this.L=new UC;g.H(this,this.L);t=b?b.innertubeApiKey:qD("",a.innertube_api_key);r=b?b.innertubeApiVersion:qD("",a.innertube_api_version);p=b?b.innertubeContextClientVersion:qD("",a.innertube_context_client_version);this.Jf={innertubeApiKey:xo("INNERTUBE_API_KEY")\|\|t,innertubeApiVersion:xo("INNERTUBE_API_VERSION")\|\| equals www.youtube.com (Youtube)
Source: app.min[1].js.3.dr	String found in binary or memory: "use strict";angular.module("onesite.filters",[]).filter("removeInjectedParagraphTag",function(){return function(r){return angular.isString(r)?r.trim().replace(/\r?\n/g,"").replace(/^<(p)[^>]*?>(.+)<\/\1>/im,"$2"):r}}).filter("formatNumber",["numberService",function(r){return r.formatNumber}]).filter("trim",["stringService",function(r){return r.trim}]).filter("slice",["listService",function(r){return r.slice}]).filter("tel",["stringService",function(r){return r.toTel}]).filter("postalCode",["stringService",function(r){return r.toPostalCode}]).filter("pick",["listService",function(r){return r.pick}]).filter("join",["stringService",function(r){return r.join}]).filter("chooseSmall",["numberService",function(r){return r.min}]).filter("localDate",[function(){return function(){return new Date}}]).filter("equals",function(){return angular.equals}).filter("isNumber",function(){return angular.isNumber}).filter("isString",function(){return angular.isString}).filter("isNonEmptyString",function(){return function(r){return angular.isString(r)&&""!==r.trim()}}).filter("socialMedia",function(){var e={facebook:function(r,t){return"//www.facebook.com/sharer.php?u=%2F%2F"+r+"&title="+t},twitter:function(r,t){return"//twitter.com/intent/tweet?url=%2F%2F"+r+"&text="+t}};return function(r,t,n){return e[r](t,n)}}).filter("strToDate",["stringService",function(t){return function(r){return angular.isString(r)?t.strToDate(r.split(" ")[0]):null}}]).filter("onesiteDateFormat",["$filter",function(t){var n={0:"janvier",1:"f equals www.facebook.com (Facebook)
Source: app.min[1].js.3.dr	String found in binary or memory: "use strict";angular.module("onesite.filters",[]).filter("removeInjectedParagraphTag",function(){return function(r){return angular.isString(r)?r.trim().replace(/\r?\n/g,"").replace(/^<(p)[^>]*?>(.+)<\/\1>/im,"$2"):r}}).filter("formatNumber",["numberService",function(r){return r.formatNumber}]).filter("trim",["stringService",function(r){return r.trim}]).filter("slice",["listService",function(r){return r.slice}]).filter("tel",["stringService",function(r){return r.toTel}]).filter("postalCode",["stringService",function(r){return r.toPostalCode}]).filter("pick",["listService",function(r){return r.pick}]).filter("join",["stringService",function(r){return r.join}]).filter("chooseSmall",["numberService",function(r){return r.min}]).filter("localDate",[function(){return function(){return new Date}}]).filter("equals",function(){return angular.equals}).filter("isNumber",function(){return angular.isNumber}).filter("isString",function(){return angular.isString}).filter("isNonEmptyString",function(){return function(r){return angular.isString(r)&&""!==r.trim()}}).filter("socialMedia",function(){var e={facebook:function(r,t){return"//www.facebook.com/sharer.php?u=%2F%2F"+r+"&title="+t},twitter:function(r,t){return"//twitter.com/intent/tweet?url=%2F%2F"+r+"&text="+t}};return function(r,t,n){return e[r](t,n)}}).filter("strToDate",["stringService",function(t){return function(r){return angular.isString(r)?t.strToDate(r.split(" ")[0]):null}}]).filter("onesiteDateFormat",["$filter",function(t){var n={0:"janvier",1:"f equals www.twitter.com (Twitter)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: ' {{time}}",medium:"{{date}}, {{time}}",short:"{{date}}, {{time}}"},defaultWidth:"full"})},formatRelative:function(e,a,t,n){return o[e]},localize:i,match:c,options:{weekStartsOn:0,firstWeekContainsDate:1}};a.a=p},ZS31:function(e,a,t){},"d+rA":function(e,a,t){"use strict";t.d(a,"k",(function(){return M})),t.d(a,"e",(function(){return O})),t.d(a,"o",(function(){return s})),t.d(a,"i",(function(){return i})),t.d(a,"m",(function(){return r})),t.d(a,"h",(function(){return d})),t.d(a,"a",(function(){return c})),t.d(a,"c",(function(){return l})),t.d(a,"d",(function(){return p})),t.d(a,"b",(function(){return u})),t.d(a,"l",(function(){return h})),t.d(a,"j",(function(){return g})),t.d(a,"n",(function(){return S})),t.d(a,"g",(function(){return P})),t.d(a,"f",(function(){return H}));var n=t("q1tI"),o=t.n(n),s={en:{title:"Share Ontario testing locations finder",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fassessment-centre-locations&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Ontario%20COVID-19%20assessment-centre-locations%3A%20https%3A//covid-19.ontario.ca/assessment-centre-locations",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/assessment-centre-locations&title=&summary=&source=",email:"mailto:?subject=Ontario%20COVID-19%20%28testing%29%20locations&body=https%3A//covid-19.ontario.ca/assessment-centre-locations"}},fr:{title:"Partager l'outil du centres de d equals www.facebook.com (Facebook)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: ' {{time}}",medium:"{{date}}, {{time}}",short:"{{date}}, {{time}}"},defaultWidth:"full"})},formatRelative:function(e,a,t,n){return o[e]},localize:i,match:c,options:{weekStartsOn:0,firstWeekContainsDate:1}};a.a=p},ZS31:function(e,a,t){},"d+rA":function(e,a,t){"use strict";t.d(a,"k",(function(){return M})),t.d(a,"e",(function(){return O})),t.d(a,"o",(function(){return s})),t.d(a,"i",(function(){return i})),t.d(a,"m",(function(){return r})),t.d(a,"h",(function(){return d})),t.d(a,"a",(function(){return c})),t.d(a,"c",(function(){return l})),t.d(a,"d",(function(){return p})),t.d(a,"b",(function(){return u})),t.d(a,"l",(function(){return h})),t.d(a,"j",(function(){return g})),t.d(a,"n",(function(){return S})),t.d(a,"g",(function(){return P})),t.d(a,"f",(function(){return H}));var n=t("q1tI"),o=t.n(n),s={en:{title:"Share Ontario testing locations finder",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fassessment-centre-locations&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Ontario%20COVID-19%20assessment-centre-locations%3A%20https%3A//covid-19.ontario.ca/assessment-centre-locations",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/assessment-centre-locations&title=&summary=&source=",email:"mailto:?subject=Ontario%20COVID-19%20%28testing%29%20locations&body=https%3A//covid-19.ontario.ca/assessment-centre-locations"}},fr:{title:"Partager l'outil du centres de d equals www.linkedin.com (Linkedin)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: ' {{time}}",medium:"{{date}}, {{time}}",short:"{{date}}, {{time}}"},defaultWidth:"full"})},formatRelative:function(e,a,t,n){return o[e]},localize:i,match:c,options:{weekStartsOn:0,firstWeekContainsDate:1}};a.a=p},ZS31:function(e,a,t){},"d+rA":function(e,a,t){"use strict";t.d(a,"k",(function(){return M})),t.d(a,"e",(function(){return O})),t.d(a,"o",(function(){return s})),t.d(a,"i",(function(){return i})),t.d(a,"m",(function(){return r})),t.d(a,"h",(function(){return d})),t.d(a,"a",(function(){return c})),t.d(a,"c",(function(){return l})),t.d(a,"d",(function(){return p})),t.d(a,"b",(function(){return u})),t.d(a,"l",(function(){return h})),t.d(a,"j",(function(){return g})),t.d(a,"n",(function(){return S})),t.d(a,"g",(function(){return P})),t.d(a,"f",(function(){return H}));var n=t("q1tI"),o=t.n(n),s={en:{title:"Share Ontario testing locations finder",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fassessment-centre-locations&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Ontario%20COVID-19%20assessment-centre-locations%3A%20https%3A//covid-19.ontario.ca/assessment-centre-locations",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/assessment-centre-locations&title=&summary=&source=",email:"mailto:?subject=Ontario%20COVID-19%20%28testing%29%20locations&body=https%3A//covid-19.ontario.ca/assessment-centre-locations"}},fr:{title:"Partager l'outil du centres de d equals www.twitter.com (Twitter)
Source: base[1].js.3.dr	String found in binary or memory: (g.Lm(b,"www.youtube.com"),c=b.toString()):c=kw(c);b=new wy(c);b.set("cmo=pf","1");d&&b.set("cmo=td","a1.googlevideo.com");return b}; equals www.youtube.com (Youtube)
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: )https://www.youtube.com/embed/cs4qPsP6COA equals www.youtube.com (Youtube)
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: 4https://www.youtube.coRoot Entry equals www.youtube.com (Youtube)
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: 4https://www.youtube.com/embed/YrjmP_ueahQ?controls=0 equals www.youtube.com (Youtube)
Source: RUKONSLK.htm.3.dr	String found in binary or memory: <hr aria-hidden="true" class="ontario-thick ontario-margin-bottom-40-!" /><div class="ontario-column ontario-small-12 ontario-medium-7 ontario-large-7 ontario-margin-bottom-48-!"><iframe allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" allowfullscreen="" class="ontario-margin-bottom-32-!" frameborder="0" height="315" src="https://www.youtube.com/embed/cs4qPsP6COA" style="max-width:560px;" width="100%"></iframe> equals www.youtube.com (Youtube)
Source: base[1].js.3.dr	String found in binary or memory: Mga=function(a,b){if(!a.i["0"]){var c=new fB("0","fakesb",void 0,new bB(0,0,0,void 0,void 0,"auto"),null,null,1);a.i["0"]=b?new nA(new wy("http://www.youtube.com/videoplayback"),c,"fake"):new YA(new wy("http://www.youtube.com/videoplayback"),c,new Vz(0,0),new Vz(0,0),0,NaN)}}; equals www.youtube.com (Youtube)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: Ontario ",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Femplacements-pour-la-vaccination&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Emplacements%20pour%20la%20vaccination%20de%20la%20COVID-19%20de%20l%27Ontario%3A%20https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination&title=&summary=&source=",email:"mailto:?subject=Emplacements%20pour%20la%20vaccination%20de%20la%20COVID-19%20de%20l%27Ontario&body=https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination"}}},c={en:{who_title:"Who can get a vaccine",who_content:"Adults 55 and over in 2021 interested in receiving the AstraZeneca vaccine"},fr:{who_title:"Qui peut se faire vacciner",who_content:"Les adultes equals www.facebook.com (Facebook)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: Ontario ",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Femplacements-pour-la-vaccination&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Emplacements%20pour%20la%20vaccination%20de%20la%20COVID-19%20de%20l%27Ontario%3A%20https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination&title=&summary=&source=",email:"mailto:?subject=Emplacements%20pour%20la%20vaccination%20de%20la%20COVID-19%20de%20l%27Ontario&body=https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination"}}},c={en:{who_title:"Who can get a vaccine",who_content:"Adults 55 and over in 2021 interested in receiving the AstraZeneca vaccine"},fr:{who_title:"Qui peut se faire vacciner",who_content:"Les adultes equals www.linkedin.com (Linkedin)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: Ontario ",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Femplacements-pour-la-vaccination&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Emplacements%20pour%20la%20vaccination%20de%20la%20COVID-19%20de%20l%27Ontario%3A%20https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination&title=&summary=&source=",email:"mailto:?subject=Emplacements%20pour%20la%20vaccination%20de%20la%20COVID-19%20de%20l%27Ontario&body=https%3A//covid-19.ontario.ca/emplacements-pour-la-vaccination"}}},c={en:{who_title:"Who can get a vaccine",who_content:"Adults 55 and over in 2021 interested in receiving the AstraZeneca vaccine"},fr:{who_title:"Qui peut se faire vacciner",who_content:"Les adultes equals www.twitter.com (Twitter)
Source: base[1].js.3.dr	String found in binary or memory: aJ.prototype.replace=function(a,b){a=g.q(a);for(var c=a.next();!c.done;c=a.next())delete this.i[c.value.encryptedTokenJarContents];uka(this,b)};bJ.prototype.gp=function(a){var b,c,d=null===(b=a.responseContext)\|\|void 0===b?void 0:b.locationPlayabilityToken;void 0!==d&&(this.locationPlayabilityToken=d,this.i=void 0,"TVHTML5"===(null===(c=a.responseContext)\|\|void 0===c?void 0:c.clientName)?(this.localStorage=vka(this))&&this.localStorage.set("yt-location-playability-token",d,15552E3):g.po("YT_CL",JSON.stringify({y6:d}),15552E3,void 0,!0))};var eJ;g.v(dJ,Xr);dJ.prototype.Ew=function(a,b){a=Xr.prototype.Ew.call(this,a,b);return Object.assign(Object.assign({},a),this.i)};var Lka=/[&\?]action_proxy=1/,Kka=/[&\?]token=([\w-])/,Mka=/[&\?]video_id=([\w-])/,Nka=/[&\?]index=([\d-])/,Oka=/[&\?]m_pos_ms=([\d-])/,Rka=/[&\?]vvt=([\w-]*)/,Fka="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Pka="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),Hka={android:"ANDROID", equals www.youtube.com (Youtube)
Source: base[1].js.3.dr	String found in binary or memory: eha,fha);h=this.loaderUrl;var l=void 0===l?!1:l;this.gk=bw(dw(h,gha,null),h,l,"Trusted Ad Domain URL");this.Ea=T(!1,a.privembed);this.protocol=0===this.Fc.indexOf("http:")?"http":"https";this.va=fw((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|fw(this.Fc)\|\|this.protocol+"://www.youtube.com/";l=b?b.eventLabel:a.el;h="detailpage";"adunit"===l?h=this.l?"embedded":"detailpage":"embedded"===l\|\|this.u?h=oD(h,l,hha):l&&(h="embedded");this.Ca=h;aq();l=null;h=b?b.playerStyle:a.ps;var m=g.gb(uD,h);!h\|\|m&& equals www.youtube.com (Youtube)
Source: base[1].js.3.dr	String found in binary or memory: g.WD=function(a){a=MD(a.va);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: base[1].js.3.dr	String found in binary or memory: g.k.clone=function(){var a=new Pm;a.u=this.u;this.i&&(a.i=this.i.clone(),a.l=this.l);return a};var Wm="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),xda=/\bocr\b/;var yda=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var SD={k_:"LIVING_ROOM_APP_MODE_UNSPECIFIED",h_:"LIVING_ROOM_APP_MODE_MAIN",g_:"LIVING_ROOM_APP_MODE_KIDS",i_:"LIVING_ROOM_APP_MODE_MUSIC",j_:"LIVING_ROOM_APP_MODE_UNPLUGGED",f_:"LIVING_ROOM_APP_MODE_GAMING"};Zm.prototype.set=function(a,b){b=void 0===b?!0:b;0<=a&&52>a&&0===a%1&&this.i[a]!=b&&(this.i[a]=b,this.l=-1)}; equals www.youtube.com (Youtube)
Source: base[1].js.3.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.XD(this);d&&"www.youtube.com"===c?d="https://youtu.be/"+a:g.GD(this)?(d="https://"+c+"/fire",b.v=a):(d=this.protocol+"://"+c+"/watch",b.v=a,qq&&(a=to())&&(b.ebc=a));return g.Ld(d,b)}; equals www.youtube.com (Youtube)
Source: base[1].js.3.dr	String found in binary or memory: g.mE=function(a){var b=g.XD(a);!a.Z("yt_embeds_disable_new_error_lozenge_url")&&kha.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: base[1].js.3.dr	String found in binary or memory: g.oM.prototype.l=function(a){var b=this;ooa(this);var c=a.FA,d=this.api.T();"GENERIC_WITHOUT_LINK"!==c\|\|d.I?"TOO_MANY_REQUESTS"===c?(d=this.api.getVideoData(),this.cd(rM(this,"TOO_MANY_REQUESTS_WITH_LINK",d.jn(),void 0,void 0,void 0,!1))):"HTML5_NO_AVAILABLE_FORMATS_FALLBACK"!==c\|\|d.I?this.cd(g.pM(a.errorMessage)):this.cd(rM(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c= equals www.youtube.com (Youtube)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: pistage de la COVID-19 de l'Ontario",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fcentres-depistage&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=centres%20de%20d%C3%A9pistage%20de%20la%20COVID-19%20de%20l%27Ontario%3A%20https%3A//covid-19.ontario.ca/centres-depistage",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/centres-depistage&title=&summary=&source=",email:"mailto:?subject=Emplacements%20des%20centres%20de%20d equals www.facebook.com (Facebook)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: pistage de la COVID-19 de l'Ontario",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fcentres-depistage&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=centres%20de%20d%C3%A9pistage%20de%20la%20COVID-19%20de%20l%27Ontario%3A%20https%3A//covid-19.ontario.ca/centres-depistage",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/centres-depistage&title=&summary=&source=",email:"mailto:?subject=Emplacements%20des%20centres%20de%20d equals www.linkedin.com (Linkedin)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: pistage de la COVID-19 de l'Ontario",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fcentres-depistage&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=centres%20de%20d%C3%A9pistage%20de%20la%20COVID-19%20de%20l%27Ontario%3A%20https%3A//covid-19.ontario.ca/centres-depistage",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/centres-depistage&title=&summary=&source=",email:"mailto:?subject=Emplacements%20des%20centres%20de%20d equals www.twitter.com (Twitter)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: s 17 h en semaine"},test:function(e){return function(e){for(var a=n.slice(1,6),t=0;t<a.length;t++){if(e&&e[a[t]])if(i(e[a[t]].toLowerCase(),"17:01"))return!0}return!1}(e)},checked:!1},{id:"openOnWeekends",text:{en:"Open on weekends",fr:"Ouvert la fin de semaine"},test:function(e){return e.saturday\|\|e.sunday},checked:!1}]}],d={en:{title:"Share Ontario vaccine locations finder",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fvaccine-locations&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Ontario%20COVID-19%20vaccine-locations%3A%20https%3A//covid-19.ontario.ca/vaccine-locations",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/vaccine-locations&title=&summary=&source=",email:"mailto:?subject=Ontario%20COVID-19%20pharmacy%20vaccine%20locations&body=https%3A//covid-19.ontario.ca/vaccine-locations"}},fr:{title:"Partagez le localisateur de centres de vaccination de l equals www.facebook.com (Facebook)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: s 17 h en semaine"},test:function(e){return function(e){for(var a=n.slice(1,6),t=0;t<a.length;t++){if(e&&e[a[t]])if(i(e[a[t]].toLowerCase(),"17:01"))return!0}return!1}(e)},checked:!1},{id:"openOnWeekends",text:{en:"Open on weekends",fr:"Ouvert la fin de semaine"},test:function(e){return e.saturday\|\|e.sunday},checked:!1}]}],d={en:{title:"Share Ontario vaccine locations finder",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fvaccine-locations&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Ontario%20COVID-19%20vaccine-locations%3A%20https%3A//covid-19.ontario.ca/vaccine-locations",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/vaccine-locations&title=&summary=&source=",email:"mailto:?subject=Ontario%20COVID-19%20pharmacy%20vaccine%20locations&body=https%3A//covid-19.ontario.ca/vaccine-locations"}},fr:{title:"Partagez le localisateur de centres de vaccination de l equals www.linkedin.com (Linkedin)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: s 17 h en semaine"},test:function(e){return function(e){for(var a=n.slice(1,6),t=0;t<a.length;t++){if(e&&e[a[t]])if(i(e[a[t]].toLowerCase(),"17:01"))return!0}return!1}(e)},checked:!1},{id:"openOnWeekends",text:{en:"Open on weekends",fr:"Ouvert la fin de semaine"},test:function(e){return e.saturday\|\|e.sunday},checked:!1}]}],d={en:{title:"Share Ontario vaccine locations finder",links:{facebook:"https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fcovid-19.ontario.ca%2Fvaccine-locations&src=sdkpreparse",twitter:"https://twitter.com/intent/tweet?text=Ontario%20COVID-19%20vaccine-locations%3A%20https%3A//covid-19.ontario.ca/vaccine-locations",linkedin:"https://www.linkedin.com/shareArticle?mini=true&url=https%3A//covid-19.ontario.ca/vaccine-locations&title=&summary=&source=",email:"mailto:?subject=Ontario%20COVID-19%20pharmacy%20vaccine%20locations&body=https%3A//covid-19.ontario.ca/vaccine-locations"}},fr:{title:"Partagez le localisateur de centres de vaccination de l equals www.twitter.com (Twitter)
Source: component.min[1].js0.3.dr	String found in binary or memory: s de la Couronne.</p>",photo:{uri:"//files.ontario.ca/trillium_13.jpg"},displayName:"Gouvernement de l'Ontario",ministry:"Bureau du Conseil des ministres"}};this.$get=function(){return e}}]).provider("defaultContact",[function(){var e={en:{id:"7474",twitter:"https://twitter.com/ongov",youtube:"https://www.youtube.com/ONgov",facebook:"https://www.facebook.com/ONgov"},fr:{id:"8211",twitter:"https://twitter.com/ongouv",youtube:"https://www.youtube.com/ONgov",facebook:"https://www.facebook.com/ONgouv"}};this.$get=function(){return e}}]).provider("defaultTaxonomy",[function(){var e={3:[{language:"fr",field_global_topic:{und:[{value:1}]},name:"Affaires et equals www.facebook.com (Facebook)
Source: component.min[1].js0.3.dr	String found in binary or memory: s de la Couronne.</p>",photo:{uri:"//files.ontario.ca/trillium_13.jpg"},displayName:"Gouvernement de l'Ontario",ministry:"Bureau du Conseil des ministres"}};this.$get=function(){return e}}]).provider("defaultContact",[function(){var e={en:{id:"7474",twitter:"https://twitter.com/ongov",youtube:"https://www.youtube.com/ONgov",facebook:"https://www.facebook.com/ONgov"},fr:{id:"8211",twitter:"https://twitter.com/ongouv",youtube:"https://www.youtube.com/ONgov",facebook:"https://www.facebook.com/ONgouv"}};this.$get=function(){return e}}]).provider("defaultTaxonomy",[function(){var e={3:[{language:"fr",field_global_topic:{und:[{value:1}]},name:"Affaires et equals www.twitter.com (Twitter)
Source: component.min[1].js0.3.dr	String found in binary or memory: s de la Couronne.</p>",photo:{uri:"//files.ontario.ca/trillium_13.jpg"},displayName:"Gouvernement de l'Ontario",ministry:"Bureau du Conseil des ministres"}};this.$get=function(){return e}}]).provider("defaultContact",[function(){var e={en:{id:"7474",twitter:"https://twitter.com/ongov",youtube:"https://www.youtube.com/ONgov",facebook:"https://www.facebook.com/ONgov"},fr:{id:"8211",twitter:"https://twitter.com/ongouv",youtube:"https://www.youtube.com/ONgov",facebook:"https://www.facebook.com/ONgouv"}};this.$get=function(){return e}}]).provider("defaultTaxonomy",[function(){var e={3:[{language:"fr",field_global_topic:{und:[{value:1}]},name:"Affaires et equals www.youtube.com (Youtube)
Source: base[1].js.3.dr	String found in binary or memory: this.V("highrepfallback");else if(a.i){b=this.l?this.l.l.l:null;if(swa(a)&&b&&b.isLocked())var d="FORMAT_UNAVAILABLE";else if(!this.i.I&&"auth"===a.errorCode&&"429"===a.details.rc){d="TOO_MANY_REQUESTS";var e="6"}this.V("playererror",a.errorCode,d,g.EB(a.details),e)}else d=/^pp/.test(this.videoData.clientPlaybackNonce),iU(this,a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.N)(),(new pT(a, equals www.youtube.com (Youtube)

Source: unknown

DNS traffic detected: queries for: covid-19.ontario.ca

Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA-2.crt0
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: http://covid-19.ontario.ca/covid19-cms-assets/2020-12/Covid-Vaccine_Meta_EN_V1.jpg
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: http://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-metaimage-covid-vaccination-en-2020-12-24.p
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://covidswab.lh.ca
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertSHA2SecureServerCA.crl0=
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertSHA2SecureServerCA.crl0L
Source: 77EC63BDA74BD0D0E0426DC8F8008506.3.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://durhamcovidswab.lh.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://gbgh.on.ca/covid-19-novel-coronavirus-updates/
Source: jquery.once.min[1].js.3.dr	String found in binary or memory: http://github.com/robloach/jquery-once
Source: effect-min[1].js.3.dr	String found in binary or memory: http://jqueryui.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://myownpharmacy.ca/guardian/
Source: app.min[1].js.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://news.ontario.ca/newsroom/en
Source: app.min[1].js.3.dr	String found in binary or memory: http://news.ontario.ca/newsroom/fr
Source: clearfix.module[1].css.3.dr	String found in binary or memory: http://nicolasgallagher.com/micro-clearfix-hack
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: http://ocsp.digicert.com0H
Source: jquery.once.min[1].js.3.dr	String found in binary or memory: http://opensource.org/licenses/GPL-2.0
Source: jquery.once.min[1].js.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://tbnplc.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://trilliumhealthpartners.ca/covid-19/A/assessment.html#starthere
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://web.lacgh.napanee.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.GBACHC.ca/COVID-19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.HamiltonCovidTest.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.akwesasne.ca/covid-19-novel-coronavirus-information/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.algomapublichealth.com/disease-and-illness/infectious-diseases/novel-coronavirus/#assessm
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.almontegeneral.com/assessmentcentre
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.assessmentbooking.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.bradysdrugstore.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.bramptonpharmacist.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.chathamfamilypharmacy.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.cornerstonepharmacy.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.covidswab.lh.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.covidtestinglm.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.dalespharmacy.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.drhc.on.ca/dryden-regional-health-centre-opens/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.elfht.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.erincreekpharmacy.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.espanolaregionalhospital.ca/covid-19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.gbfht.ca/cac
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.geraldtondh.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.hauserspharmacy.com
Source: phulocator[1].htm.3.dr	String found in binary or memory: http://www.health.gov.on.ca/en/common/default.aspx/disclaimers.html
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.health.gov.on.ca/en/common/system/services/phu/locations.aspx
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: http://www.health.gov.on.ca/en/pro/programs/publichealth/coronavirus/docs/Guidance_for_Prioritizing_
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.health.gov.on.ca/fr/common/system/services/phu/locations.aspx
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.hoganpharmacy.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.hpha.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.hwmh.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.jeancoutu.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.lakeridgehealth.on.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.lakeridgehealth.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.lancasterwellnesspharmacy.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.libertymarketpharmacy.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.lwdh.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.maindrugmartcompounding.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.medionerx.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.metrodrugs.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.mhc.on.ca/covid-19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.ndfht.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.ngh.on.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.pharmacy101.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.pharmaessence.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.pharmorepharmacy.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.porcupinehu.on.ca/en/your-health/infectious-diseases/novel-coronavirus/covid-assessment-c
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.rexall.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.rvh.on.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.southstormontpharmacies.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.stevensonhospital.ca/news/index.html?id=265
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.timiskaminghu.com/90484/covid-19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.tmcpharmacy.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.vanierpharmacy.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.walmart.ca/en/stores-near-me/morningside-scarborough-supercentre-3111
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.whcacovid.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: http://www.wrh.on.ca
Source: base[1].js.3.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: base[1].js.3.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: base[1].js.3.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: base[1].js.3.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: base[1].js.3.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://CovidScreen.lacgh.napanee.on.ca)
Source: base[1].js.3.dr	String found in binary or memory: https://admin.youtube.com
Source: gtm[1].js.3.dr	String found in binary or memory: https://adservice.google.com/ddm/regclk
Source: gtm[1].js.3.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: analytics[1].js.3.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: app.min[1].js.3.dr	String found in binary or memory: https://api.ontario.ca
Source: app.min[1].js.3.dr	String found in binary or memory: https://api.ontario.ca/api/book
Source: app.min[1].js.3.dr	String found in binary or memory: https://api.ontario.ca/es/datatable
Source: app.min[1].js.3.dr	String found in binary or memory: https://api.ontario.ca/es/onesite
Source: app.min[1].js.3.dr	String found in binary or memory: https://api.ontario.ca/es/v2/elasticsearch_index_drupal_onesite_elasticsearch_page_index
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://app.getcorigan.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://assessmentbooking.simplybook.plus/v2/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://atikokanfht.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://barriehealth.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://booking.sbghc.on.ca/
Source: gtm[1].js.3.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/foundation-sites
Source: about-ontario[1].htm.3.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://chancellorswaypharmacy.com/
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontar
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontarRoot
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.cRoot
Source: RUKONSLK.htm.3.dr, covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/-vaccines-ontario
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/BCOVID-19
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/Root
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/assessment-centre-locations/
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine
Source: book-vaccine[1].htm.3.dr, ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/-19-vaccination-plan#phase-1t
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/Root
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THow
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THow/.ca/book-vaccine/Root
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THow/page/about-ontarioonsRoot
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THow/page/government-ontarioRoot
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowRoot
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowalth.gov.on.ca/phulocator/rioRoot
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/book-vaccine/
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/book-vaccine/Root
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/covid-19-vaccines-ontarioRoot
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/ontarios-covid-19-vaccinatm/embed/YrjmP_ueahQ?con
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/rendezvous-vaccin/Root
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/vaccine-locations/Root
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/vaccine-locationsRoot
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowio.ca/vernment-ontarioRoot
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/THowohealth.ca/os-covid-19-vaccinatm/embed/YrjmP_ueahQ?cont
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/book-vaccine/t
Source: imagestore.dat.3.dr	String found in binary or memory: https://covid-19.ontario.ca/c19-book-vaccine-assets/favicon-32x32.png8
Source: book-vaccine[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/c19-book-vaccine-assets/social_image_en.png
Source: rendezvous-vaccin[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/c19-book-vaccine-assets/social_image_fr.png
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/centres-depistage/
Source: imagestore.dat.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-ac-assets/favicon-32x32.png?v=95d5a2a6253850552d499cd53df6b4a28
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-data/data-catalogue/8a89caa9-511c-4568-af89-7f2174b4378c.json
Source: populate-front-page-data[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-data/data-catalogue/ed270bb8-340b-41f9-a7c6-e8ef587e6d11.json
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-sat-assets/social_image_en.jpeg
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr, RUKONSLK.htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-test-and-testing-location-information
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-test-and-testing-location-information#centres
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-test-and-testing-location-information#pharmacy
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-vaccine-safety
Source: covid-19-vaccines-ontario[1].htm.3.dr, ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-vaccines-ontario
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19-vaccines-ontariofavicon.ico
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/covid-19m/embed/YrjmP_ueahQ?controls=0
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-covid-alert-2020-12-21.png
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-find-zone-measures-2020-12-
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-physical-distancing-2020-12
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-self-assessment-2020-12-21.
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-stay-home-2020-12-21.png
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-up-to-date-info-2020-12-21.
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-wear-a-mask-2020-12-21.png
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-workplace-2020-12-21.png
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-vaccine-page-intro-box-702x532-2020-
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-vaccine-page-intro-tall-704x1050-202
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2020-12/vaccine-banner_0.svg
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/covidappbanner_240x182px.svg
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/phone.svg
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/report-price-gouging-during-corona-virus.svg
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/screen-before-you-go.svg
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-assessment-centre.svg
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-check-results.svg
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-self-assessment.svg
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-03/english_socialmedia_Mar29.png
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-03/getting-covid-vaccine-meta-1920x1080-en.jpg
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covid19-cms-assets/2021-03/ideas-to-combat-corona-virus.svg
Source: RUKONSLK.htm.3.dr, covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/covidalert
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/data
Source: rendezvous-vaccin[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/emplacements-pour-la-vaccination
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/feedback/assessment-centre-locations
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/fr
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/commentaires/centres-depistage
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/index.fr.html
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/information-sur-le-depistage-et-les-centres-de-depistage-de-la-covid-
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/le-plan-de-vaccination-de-lontario-contre-la-covid-19
Source: rendezvous-vaccin[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/le-plan-de-vaccination-de-lontario-contre-la-covid-19#phase-1
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/recevoir-un-vaccin-contre-la-covid-19
Source: rendezvous-vaccin[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr, covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/vaccins-contre-la-covid-19-en-ontario
Source: about-ontario[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/fr/zones-et-restrictions
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/get-covid-19-vaccine
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-1
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-2
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-3
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#task-force
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/index.html
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/ontarios-covid-19-vac
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/ontarios-covid-19-vacRoot
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/ontarios-covid-19-vaccination-plan
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr, book-vaccine[1].htm.3.dr, ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid-19.ontario.ca/ontarios-covid-19-vaccination-plan#phase-1
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr, ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid-19.ontario.ca/rendezvous-vaccin/
Source: RUKONSLK.htm.3.dr, covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/self-assessment/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid-19.ontario.ca/self-assessment/.
Source: imagestore.dat.3.dr, ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid-19.ontario.ca/themes/custom/ds_theme/favicon.ico
Source: imagestore.dat.3.dr	String found in binary or memory: https://covid-19.ontario.ca/themes/custom/ds_theme/favicon.ico~
Source: imagestore.dat.3.dr	String found in binary or memory: https://covid-19.ontario.ca/themes/custom/ds_theme/favicon.ico~&
Source: book-vaccine[1].htm.3.dr, ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid-19.ontario.ca/vaccine-locations
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid-19.ontario.ca/vaccine-locations/
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid-19.ontario.ca/vaccine-locationsFCOVID-19
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid-19.ontario.ca/vaccine-locationss://covid-19.ontario.ca/vaccine-locations
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid-19.ontario.ca/vernment-ontario
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid-19.ontario.ca/vernment-ontarioZ
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid-19.ontario.ca/vernment-ontariotheme/favicon.ico
Source: about-ontario[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr, RUKONSLK.htm.3.dr, covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://covid-19.ontario.ca/zones-and-restrictions
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid19.ontari
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://covid19.ontariohealth.ca/
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid19.ontariohealth.ca/os-covid-19-vaccination-plan#phase-1
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://covid19.ontariohealth.ca/os-covid-19-vaccination-plan#phase-1d
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid19.smgh.ca:4433/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covid19.smgh.ca:4433/.
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://covid19results.ehealthontario.ca:4443/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covidbooking.sunnybrook.ca/appointment/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covidtestinglm.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://covidtestregistration.grhosp.on.ca/
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://covidvaccine.sunnybrook.ca/covid-vaccine/gp/self-schedule
Source: app.min[1].js.3.dr	String found in binary or memory: https://data.211support.org/api/v1/detail
Source: 8a89caa9-511c-4568-af89-7f2174b4378c[1].json.3.dr, ed270bb8-340b-41f9-a7c6-e8ef587e6d11[1].json.3.dr	String found in binary or memory: https://data.ontario.ca/api/3/action/help_show?name=datastore_search
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://data.ontario.ca/dataset/covid-19-vaccine-data-in-ontario
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://data.ontario.ca/dataset?keywords_en=COVID-19
Source: recaptcha__en[1].js.3.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: recaptcha__en[1].js.3.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: recaptcha__en[1].js.3.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: base[1].js.3.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: onesite-health.min[1].js.3.dr	String found in binary or memory: https://drhd.icon.ehealthontario.ca
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://durhamregion.vertoengage.com/engage/generic-open-clinic?key=5f58a4fe-9e22-4fb8
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://durhamregion.vertoengage.com/engage/generic-open-clinic?key=5f58a4fe-9e22-4fb8-b49a-b8fe1ca0
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://eohu.ca/en/covid-19-novel-coronavirus
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://eohu.ca/en/covid/covid-19-testing-assessment-centres
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://eohu.ca/fr/covid/covid-19-testing-assessment-centres
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://epicapps.toh.ca/mychart/openscheduling
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://epicapps.toh.ca/mychart/openscheduling?lang=canadianenglish
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://eshc.simplybook.me/v2/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://ethp.ca/main/covid19-testing
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://extra-mile-pharmacy-medical-centre.business.site/
Source: about-ontario[1].htm.3.dr	String found in binary or memory: https://files.ontario.ca/banner-icon-alert-xsmall.png
Source: covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://files.ontario.ca/moh-covid-19-vaccines-fact-sheet-en-2021-02-05.pdf
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://forms.office.com/Pages/ResponsePage.aspx?id=S9Av_mSBdEqx7DvOSbCZil70dO3WbMJGjFAvNoHxeT5UQ1ZD
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://gbachc.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://gbfht.ca/cac/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://gbhs.simplybook.me/v2/
Source: modernizr[1].js.3.dr	String found in binary or memory: https://github.com/kriskowal/es5-shim/blob/master/es5-shim.js
Source: moment.min[1].js.3.dr	String found in binary or memory: https://github.com/moment/moment/issues/1779
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://glencadepharmacy.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://hdh.appointlet.com/s/assessment
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://hopitalmontfort.com/en/second-covid-19-care-clinic-opening-ottawa-east-thursday
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://hpepublichealth.ca/covid-19-vaccines/
Source: onesite-health.min[1].js.3.dr	String found in binary or memory: https://hrhd.icon.ehealthontario.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://hybridpharm.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://keeleandfinchpharmasave.medmeapp.ca/schedule
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://kingstonhsc.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://kingstonhsc.ca/patients-families-and-visitors/covid-19-information/community-assessment-cent
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://lambtonpublichealth.ca/2019-novel-coronavirus/testing-criteria/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://loyalist.medmeapp.com/schedule
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://lwha.ca/covidbooking/
Source: onesite-body.min[1].js.3.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?v=3&key=
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://medpluspharmacy.medmeapp.com/schedule/
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr, book-vaccine[1].htm.3.dr	String found in binary or memory: https://news.ontario.ca/newsroom/en
Source: rendezvous-vaccin[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://news.ontario.ca/newsroom/fr
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://news.ontario.ca/search/en?keywords=covid19
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://news.ontario.ca/search/en?keywords=vaccine
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://nhappointmentscheduler.powerappsportals.com/
Source: onesite-health.min[1].js.3.dr	String found in binary or memory: https://nrph.icon.ehealthontario.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://nygh.on.ca/covid-19-updates
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://nygh.on.ca/patients-and-visitors/covid-19-updates/assessment-centres
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://one.halton.ca/vab/s/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://ottawa.ca/en/recreation-and-parks/recreation-facilities/facility-listing/ray-friel-recreatio
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://outlook.office365.com/owa/calendar/COVIDAssessment
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://outlook.office365.com/owa/calendar/HPHA1
Source: gtm[1].js.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: base[1].js.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/osd.js
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://pharmasave.com/barrie-marsellus-drive/prescriptions/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://pharmasave.com/store/pharmasave-eagle-manor/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://pharmasave.com/store/pharmasave-huron-street/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://pharmasave.com/store/pharmasave-morrison-pharmacy/
Source: recaptcha__en[1].js.3.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://portal.healthmyself.net/hrhcovidtest/guest/#/nae/book/type
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://portal.healthmyself.net/tehncovid/guest/#/g5x/book/type
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://psfdh.on.ca/2020/04/03/community-assessment-centre/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://rcvtac.ca/
Source: base[1].js.3.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://registration-mom.mychamp.ca/Live/Montfort/Booking/Account/BookRegister
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://s-ca.chkmkt.com/?e=210138&h=71305F7BD7FC4D6&l=en
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://saversdrugmart.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://secure.hsnsudbury.ca/COVID19AppointmentRequest
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://shn.ca/cold-flu-covid19-clinic/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://simpsonspharmacy.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://slmhc.on.ca/about/covid-19-information/covid-19-assessment-centre/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://southlake.ca/
Source: app.min[1].js.3.dr	String found in binary or memory: https://stage.api.ontariogovernment.ca
Source: analytics[1].js.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://sunnybrook.ca/content/?page=novel-coronavirus-covid-19-assessment-centre
Source: recaptcha__en[1].js.3.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: recaptcha__en[1].js.3.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: recaptcha__en[1].js.3.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: recaptcha__en[1].js.3.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: base[1].js.3.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: base[1].js.3.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: base[1].js.3.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: base[1].js.3.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: remote[1].js.3.dr	String found in binary or memory: https://support.google.com/youtube/answer/7640706
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://survey123.arcgis.com/share/4f76dd7a66b6438196b0de3869cf136f
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://surveys.savience.com/s/LACOVIDPUBLIC/
Source: analytics[1].js.3.dr	String found in binary or memory: https://tagassistant.google.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://temiskaming-hospital.com/tem/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://testing.getcorigan.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://trilliumhealthpartners.ca/assessment
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://trilliumhealthpartners.ca/covid-19/A/assessment.html#starthere
Source: component.min[1].js0.3.dr	String found in binary or memory: https://twitter.com/ongov
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://uht-public.vertoengage.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://unityhealth.to/assessment-centres/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://v2.waitwhile.com/book/barriecovidtesting
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://vaccineto.ca/sites
Source: base[1].js.3.dr	String found in binary or memory: https://viacon.corp.google.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://wholehealthcooksville.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.Pharmachoice.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.bchsys.org/en/covid-19-online-scheduling.aspx
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.bchu.org/ServicesWeProvide/InfectiousDiseases/Pages/COVID-19-Vaccine-Clinic-Appointments
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.bchu.org/ServicesWeProvide/InfectiousDiseases/Pages/COVID-19-Vaccines.aspx
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.brockvillegeneralhospital.ca/en/patient-care/covid-19-coronavirus.aspx#
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://www.canada.ca/en/public-health/services/diseases/2019-novel-coronavirus-infection/awareness-
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://www.canada.ca/en/public-health/services/immunization/national-advisory-committee-on-immuniza
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.cmh.org/patients-visitors/service-resumption-covid-19/covid-19-testing
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.crfht.ca/en/our-clinic/covid-19-updates
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: drupal.init[1].js.3.dr	String found in binary or memory: https://www.drupal.org/node/2815083
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.durhamvaccinebooking.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.dynacare.ca/covidtestingontario.aspx
Source: analytics[1].js.3.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap
Source: analytics[1].js.3.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: analytics[1].js.3.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: gtm[1].js.3.dr	String found in binary or memory: https://www.google.com
Source: recaptcha__en[1].js.3.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.google.com/maps/search/?api=1&query=
Source: about-ontario[1].htm.3.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?render=explicit
Source: api[1].js0.3.dr, recaptcha__en[1].js.3.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: base[1].js.3.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: gtm[1].js.3.dr	String found in binary or memory: https://www.googletagmanager.com/debug/bootstrap
Source: analytics[1].js.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: rendezvous-vaccin[1].htm.3.dr, ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: rendezvous-vaccin[1].htm.3.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5G4CS4L
Source: about-ontario[1].htm.3.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-T7V5LF
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.grhosp.on.ca/
Source: remote[1].js.3.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: api[1].js0.3.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/mrdLhN7MywkJAAbzddTIjTaM/recaptcha__en.js
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.guardian-ida-pharmacies.ca/en/ontario/brampton/kennedy-medical-plex-pharmacy-ida-7027581
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.guardian-ida-pharmacies.ca/en/ontario/london/london-medical-plex-pharmacy-7027570
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.guardian-ida-pharmacies.ca/en/ontario/london/medpoint-care-pharmacy-7015702
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.guardian-ida-pharmacies.ca/en/ontario/scarborough/village-square-pharmacy-7005106
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.haliburtoncares.ca/
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.halton.ca/For-Residents/Immunizations-Preventable-Disease/Diseases-Infections/New-Corona
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.halton.ca/For-Residents/New-Coronavirus/COVID-19-Vaccines/COVID-19-Vaccination-Clinics
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.halton.ca/For-Residents/New-Coronavirus/COVID-19-Vaccines/COVID-19-Vaccination-Clinics#l
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.haltonhealthcare.on.ca/covid-19-info/booking-a-test
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.haltonhealthcare.on.ca/covid-19-info/covid-19-testing
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.hamilton.ca/coronavirus/assessment-centres
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.hamilton.ca/coronavirus/covid-19-vaccine-booking
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.hanoverhospital.on.ca/news.php?pgid=121
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.headwatershealth.ca/
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://www.health.gov.on.ca/en/pro/programs/publichealth/coronavirus/docs/vaccine/COVID-19_Phase_2_
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.hpph.ca/en/news/coronavirus-covid19-update.aspx#Testing-tracing-and-results-for-COVID-19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.hrh.ca/covid-19/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.hsnsudbury.ca/portalen/Patients-and-Visitors/COVID-19/COVID-19-Assessment-Centre
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.josephbranthospital.ca/en/redevelopment-expansion/covid-19-assessment-testing.asp?_mid_=
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.junctionchemist.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.lakeridgehealth.on.ca/en/patientsandvisitors/novel-coronavirus-2019-ncov.asp
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ldhc.com/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.lifelabs.com
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.lifelabs.com/book-an-appointment/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.mackenziehealth.ca/en/about-us/get-the-latest-information-on-covid-19.aspx
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.mahc.ca/en/services/covid19.aspx#
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.mahc.ca/en/services/muskoka-assessment-centre.aspx
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.mattawahealth.ca/News/mattawa-assessment-centre
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.medicineshoppe.ca/en/ontario/caledonia/the-medicine-shoppe-pharmacy-210-7003593
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.medicineshoppe.ca/en/ontario/london/the-medicine-shoppe-pharmacy-190-7016244
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.medicineshoppe.ca/en/ontario/ottawa/the-medicine-shoppe-pharmacy-143-7009763
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.medicineshoppe.ca/en/ontario/ottawa/the-medicine-shoppe-pharmacy-271-7021282
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.medicineshoppe.ca/en/ontario/toronto/the-medicine-shoppe-pharmacy-134-7014226
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.msh.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.msh.on.ca/clinics-departments/covid-19-assessment-centre#registration
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.myhealthunit.ca/en/health-topics/coronavirus.asp
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.myvisit.cmh.org
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.niagarahealth.on.ca/centres
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.niagararegion.ca/health/covid-19/vaccination/appointment-booking.aspx
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.niagararegion.ca/health/covid-19/vaccination/clinic-schedule.aspx
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.nshn.care/covid19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.nwhu.on.ca/covid19/Pages/self-assessment.aspx
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.nygh.on.ca/covid19vaccination
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr, print[1].css.3.dr	String found in binary or memory: https://www.ontario.ca
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://www.ontario.ca/
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://www.ontario.ca/.ca/book-vaccine/
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr, book-vaccine[1].htm.3.dr	String found in binary or memory: https://www.ontario.ca/feedback/contact-us?id=25811&nid=130423
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://www.ontario.ca/form/report-price-gouging-related-covid-19
Source: rendezvous-vaccin[1].htm.3.dr	String found in binary or memory: https://www.ontario.ca/fr/commentaires/pour-nous-joindre?id=25812&nid=130424
Source: rendezvous-vaccin[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ontario.ca/fr/page/accessibilite
Source: rendezvous-vaccin[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ontario.ca/fr/page/conditions-dutilisation
Source: rendezvous-vaccin[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ontario.ca/fr/page/declaration-concernant-la-protection-de-la-vie-privee
Source: rendezvous-vaccin[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ontario.ca/fr/page/droits-dauteur-imprimeur-de-la-reine-pour-lontarioc
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ontario.ca/fr/page/gouvernement-de-lontario
Source: rendezvous-vaccin[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ontario.ca/fr/page/lontario-en-bref
Source: imagestore.dat.3.dr	String found in binary or memory: https://www.ontario.ca/img/favicon.ico
Source: imagestore.dat.3.dr	String found in binary or memory: https://www.ontario.ca/img/favicon.ico~
Source: imagestore.dat.3.dr	String found in binary or memory: https://www.ontario.ca/img/favicon.ico~&
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr, book-vaccine[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ontario.ca/page/about-ontario
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://www.ontario.ca/page/about-ontario4About
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://www.ontario.ca/page/about-ontarioons
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr, book-vaccine[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ontario.ca/page/accessibility
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/businesses-get-help-covid-19-costs
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr, book-vaccine[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ontario.ca/page/copyright-information-c-queens-printer-ontario
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-cases-schools-and-child-care-centres
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-communication-resources#staying-safe
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-communication-resources#vaccine-facts
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-stop-spread
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr, RUKONSLK.htm.3.dr, covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-stop-spread#physical-distancing
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-stop-spread#section-0
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-stop-spread#section-6
Source: RUKONSLK.htm.3.dr, covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-stop-spread#stay-home
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-stop-spread#wash-hands
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-support-people
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-support-people#section-4
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-support-students-and-parents
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-support-workers
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/covid-19-variants
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/ethical-framework-covid-19-vaccine-distribution
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr, RUKONSLK.htm.3.dr, covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/face-coverings-and-face-masks
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr, ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://www.ontario.ca/page/government-ontario
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://www.ontario.ca/page/government-ontarioDGovernment
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://www.ontario.ca/page/government-ontario~
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr, book-vaccine[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ontario.ca/page/privacy-statement
Source: RUKONSLK.htm.3.dr, covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/resources-prevent-covid-19-workplace
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr, book-vaccine[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ontario.ca/page/terms-use
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://www.ontario.ca/page/vaccines
Source: ontarios-covid-19-vaccination-plan[1].htm.3.dr	String found in binary or memory: https://www.ontario.ca/search/search-results
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://www.ontario.caio.ca/book-vaccine/t
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.osmh.on.ca/covid-19/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ottawapublichealth.ca/en/shared-content/assessment-centres.aspx
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.ottawapublichealth.ca/en/shared-content/assessment-centres.aspx#Click-here-to-learn-more
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.peelregion.ca/coronavirus/vaccine/book-appointment/
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.peelregion.ca/coronavirus/vaccine/book-appointment/#clinics
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.pharmasavebramcity.com
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://www.phdapps.he
Source: book-vaccine[1].htm.3.dr, RUKONSLK.htm.3.dr	String found in binary or memory: https://www.phdapps.health.gov.on.ca/phulocator/
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://www.phdapps.health.gov.on.ca/phulocator/4Public
Source: rendezvous-vaccin[1].htm.3.dr	String found in binary or memory: https://www.phdapps.health.gov.on.ca/phulocator/fr/Default.aspx
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://www.phdapps.health.gov.on.ca/phulocator/rio
Source: ~DF1CE05EB0C3EFFAB1.TMP.2.dr	String found in binary or memory: https://www.phdapps.health.gov.on.ca/phulocator/riovirus)
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.porcupinehu.on.ca/en/your-health/infectious-diseases/novel-coronavirus/covid-assessment-
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.prhc.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.prhc.on.ca/about-us/covid-19-novel-coronavirus/
Source: RUKONSLK.htm.3.dr	String found in binary or memory: https://www.publichealthontario.ca/en/diseases-and-conditions/infectious-diseases/respiratory-diseas
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.qhc.on.ca/covid-19.php
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.regionofwaterloo.ca/en/health-and-wellness/covid-19-vaccination-clinics-in-waterloo-regi
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.rexall.ca/storelocator/store/0869/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.rexall.ca/storelocator/store/109
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.rexall.ca/storelocator/store/3012/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.rexall.ca/storelocator/store/6933
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.rexall.ca/storelocator/store/95
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.rexall.ca/storelocator/store/980
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.riversidehealthcare.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.rmh.org/covid-19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.rvh.on.ca
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.rvh.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.sbghc.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.shn.ca/covid19-assess/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.simcoemuskokahealth.org/Topics/COVID-19/AssessmentCentresandTesting
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.simcoemuskokahealth.org/Topics/COVID-19/Vaccine-and-Immunization
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.simcoemuskokahealth.org/Topics/COVID-19/Vaccine-and-Immunization#c11dec2d-91db-41b0-bd35
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.sinaihealth.ca/covid19/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.sinaihealth.ca/covid19/covid-19-assessment-centre/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.smgh.ca/covid-19-testing-available-for-k-w-residents-with-symptoms-starting-may-16/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.sschs.ca/general/home.html
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.stegh.on.ca/node/626
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.stjoes.ca/coronavirus/covid-19-test-home
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.tbdhu.com/coronavirus
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.tehn.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.tehn.ca/programs-services/covid-19-assessment-centre
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.thfht.com/wp-content/uploads/2020/05/PRESS-RELEASE-May-25-2020-AC-Final.pdf
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.tillsonburghospital.on.ca/about-tdmh/covid-19/
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.toronto.ca/home/covid-19/
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.toronto.ca/home/covid-19/covid-19-protect-yourself-others/covid-19-vaccines/covid-19-how
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.uhn.ca/Covid19
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.uhn.ca/Covid19#
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.uhn.ca/covid19_vaccine
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.villagesquaremedical.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.waha.ca/covid-19/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.walmart.ca/en/stores-near-me/mississauga-dixie-supercentre-1126
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.walmart.ca/en/stores-near-me/richmond-hill-south-supercentre-1116
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.walmart.ca/en/stores-near-me/richmond-hill-supercentre-3195
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.walmart.ca/en/stores-near-me/woodbridge-supercentre-1081
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.wdgpublichealth.ca/your-health/covid-19-information-public/assessment-centres-wdg
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.wdgpublichealth.ca/your-health/covid-19-information-public/covid-19-vaccine-information/
Source: onesite-live-chat.min[1].js.3.dr	String found in binary or memory: https://www.webchat.ccm2.gov.on.ca/EO_Webchat/iceMessagingWeb/Chat.html?destinationURI=sip:im_990a_s
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.wgh.on.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.whcacovid.com/harriston-assessment-centre
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.whgh.ca/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.williamoslerhs.ca/coronavirus
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.williamoslerhs.ca/patients-and-families/preparing-for-your-visit-or-stay/coronavirus-inf
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.womenscollegehospital.ca/assessmentcentre
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.womenscollegehospital.ca/covid19-tool/
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.wrh.on.ca/COVID19AssessmentCentre
Source: 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	String found in binary or memory: https://www.wrh.on.ca/OnlineBooking
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.york.ca/wps/portal/yorkhome/health/yr/covid-19/covid19vaccinationclinics
Source: ~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	String found in binary or memory: https://www.york.ca/wps/portal/yorkhome/health/yr/covid-19/covid19vaccinationclinics/04covid19vaccin
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	String found in binary or memory: https://www.youtube.coRoot
Source: component.min[1].js0.3.dr	String found in binary or memory: https://www.youtube.com/ONgov
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr, covid-19-vaccines-ontario[1].htm.3.dr	String found in binary or memory: https://www.youtube.com/embed/YrjmP_ueahQ?controls=0
Source: {854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr, RUKONSLK.htm.3.dr	String found in binary or memory: https://www.youtube.com/embed/cs4qPsP6COA
Source: base[1].js.3.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: base[1].js.3.dr	String found in binary or memory: https://youtu.be/
Source: base[1].js.3.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: base[1].js.3.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: base[1].js.3.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49227
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49223
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49189
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49222
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49188
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49187
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49220
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49183
Source: unknown	Network traffic detected: HTTP traffic on port 49189 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49227 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49223 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49195 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49191 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49215
Source: unknown	Network traffic detected: HTTP traffic on port 49220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49214
Source: unknown	Network traffic detected: HTTP traffic on port 49190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49174
Source: unknown	Network traffic detected: HTTP traffic on port 49188 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49172
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49171
Source: unknown	Network traffic detected: HTTP traffic on port 49203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49194 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49207
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49206
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49205
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49203
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49202
Source: unknown	Network traffic detected: HTTP traffic on port 49187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49165
Source: unknown	Network traffic detected: HTTP traffic on port 49202 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49206 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49197 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49232
Source: unknown	Network traffic detected: HTTP traffic on port 49165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49197
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49195
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49194
Source: unknown	Network traffic detected: HTTP traffic on port 49222 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49191
Source: unknown	Network traffic detected: HTTP traffic on port 49205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49190
Source: unknown	Network traffic detected: HTTP traffic on port 49196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49171 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49229
Source: unknown	Network traffic detected: HTTP traffic on port 49215 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49228
Source: unknown	Network traffic detected: HTTP traffic on port 49232 -> 443

Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49166 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49165 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49171 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49173 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49172 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49174 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49184 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49183 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49187 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49186 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49188 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49189 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49190 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49191 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.64:443 -> 192.168.2.22:49194 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.64:443 -> 192.168.2.22:49195 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.22:49196 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.19.94:443 -> 192.168.2.22:49197 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.74.185:443 -> 192.168.2.22:49203 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.198.74.185:443 -> 192.168.2.22:49202 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49206 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49204 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49207 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 143.204.11.100:443 -> 192.168.2.22:49205 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.34:443 -> 192.168.2.22:49214 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.34:443 -> 192.168.2.22:49215 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.33:443 -> 192.168.2.22:49222 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.23.33:443 -> 192.168.2.22:49223 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.22.246:443 -> 192.168.2.22:49220 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.22.246:443 -> 192.168.2.22:49221 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.41.3.217:443 -> 192.168.2.22:49226 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.41.3.217:443 -> 192.168.2.22:49225 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.226.169.24:443 -> 192.168.2.22:49232 version: TLS 1.2

Source: classification engine

Classification label: clean1.winDOCX@4/274@14/9

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File created: C:\Users\user\Desktop\~$VID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File created: C:\Users\user\AppData\Local\Temp\CVRAED4.tmp

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File read: C:\Users\desktop.ini

Jump to behavior

Source: unknown	Process created: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE 'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
Source: unknown	Process created: C:\Program Files\Internet Explorer\iexplore.exe 'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Source: C:\Program Files\Internet Explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2616 CREDAT:275457 /prefetch:2
Source: C:\Program Files\Internet Explorer\iexplore.exe	Process created: C:\Program Files (x86)\Internet Explorer\iexplore.exe 'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2616 CREDAT:275457 /prefetch:2	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx	Initial sample: OLE zip file path = word/_rels/header2.xml.rels
Source: COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx	Initial sample: OLE zip file path = docProps/custom.xml

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

Key opened: HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Word\Resiliency\StartupItems

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE

File opened: C:\Windows\WinSxS\amd64_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.4940_none_08e4299fa83d7e3c\MSVCR90.dll

Jump to behavior

Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Microsoft Office\Office14\WINWORD.EXE	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact
Valid Accounts	Windows Management Instrumentation	Path Interception	Process Injection1	Masquerading1	OS Credential Dumping	File and Directory Discovery1	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	Encrypted Channel2	Eavesdrop on Insecure Network Communication	Remotely Track Device Without Authorization	Modify System Partition
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Process Injection1	LSASS Memory	System Information Discovery1	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	Non-Application Layer Protocol1	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Device Lockout
Domain Accounts	At (Linux)	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	Application Layer Protocol2	Exploit SS7 to Track Device Location	Obtain Device Cloud Backups	Delete Device Data
Local Accounts	At (Windows)	Logon Script (Mac)	Logon Script (Mac)	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Scheduled Transfer	Ingress Tool Transfer1	SIM Card Swap		Carrier Billing Fraud

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

No Antivirus matches

Dropped Files

No Antivirus matches

Unpacked PE Files

No Antivirus matches

Domains

No Antivirus matches

URLs

Source	Detection	Scanner	Label
http://www.ndfht.ca	0%	Avira URL Cloud	safe
http://www.whcacovid.com	0%	Avira URL Cloud	safe
https://www.Pharmachoice.com	0%	Avira URL Cloud	safe
https://hopitalmontfort.com/en/second-covid-19-care-clinic-opening-ottawa-east-thursday	0%	Avira URL Cloud	safe
http://www.stevensonhospital.ca/news/index.html?id=265	0%	Avira URL Cloud	safe
https://www.womenscollegehospital.ca/assessmentcentre	0%	Avira URL Cloud	safe
https://hpepublichealth.ca/covid-19-vaccines/	0%	Avira URL Cloud	safe
http://www.hauserspharmacy.com	0%	Avira URL Cloud	safe
http://www.bradysdrugstore.com	0%	Avira URL Cloud	safe
https://hybridpharm.com/	0%	Avira URL Cloud	safe
https://www.phdapps.health.gov.on.ca/phulocator/4Public	0%	Avira URL Cloud	safe
https://CovidScreen.lacgh.napanee.on.ca)	0%	Avira URL Cloud	safe
https://barriehealth.ca/	0%	Avira URL Cloud	safe
https://www.rvh.on.ca/	0%	Avira URL Cloud	safe
https://www.cmh.org/patients-visitors/service-resumption-covid-19/covid-19-testing	0%	Avira URL Cloud	safe
http://www.health.gov.on.ca/en/pro/programs/publichealth/coronavirus/docs/Guidance_for_Prioritizing_	0%	Avira URL Cloud	safe
http://www.metrodrugs.ca	0%	Avira URL Cloud	safe
https://nygh.on.ca/covid-19-updates	0%	Avira URL Cloud	safe
https://www.osmh.on.ca/covid-19/	0%	Avira URL Cloud	safe
https://www.phdapps.health.gov.on.ca/phulocator/riovirus)	0%	Avira URL Cloud	safe
https://assessmentbooking.simplybook.plus/v2/	0%	Avira URL Cloud	safe
http://www.espanolaregionalhospital.ca/covid-19	0%	Avira URL Cloud	safe
https://www.mahc.ca/en/services/covid19.aspx#	0%	Avira URL Cloud	safe
https://portal.healthmyself.net/tehncovid/guest/#/g5x/book/type	0%	Avira URL Cloud	safe
https://www.prhc.on.ca/about-us/covid-19-novel-coronavirus/	0%	Avira URL Cloud	safe
http://www.hwmh.ca	0%	Avira URL Cloud	safe
http://www.lakeridgehealth.on.ca	0%	Avira URL Cloud	safe
https://testing.getcorigan.ca/	0%	Avira URL Cloud	safe
http://www.rvh.on.ca	0%	Avira URL Cloud	safe
https://www.msh.on.ca/	0%	Avira URL Cloud	safe
http://www.HamiltonCovidTest.ca	0%	Avira URL Cloud	safe
https://gbfht.ca/cac/	0%	Avira URL Cloud	safe
https://www.grhosp.on.ca/	0%	Avira URL Cloud	safe
https://psfdh.on.ca/2020/04/03/community-assessment-centre/	0%	Avira URL Cloud	safe
https://stage.api.ontariogovernment.ca	0%	Avira URL Cloud	safe
https://www.haltonhealthcare.on.ca/covid-19-info/booking-a-test	0%	Avira URL Cloud	safe
http://www.libertymarketpharmacy.com/	0%	Avira URL Cloud	safe
https://slmhc.on.ca/about/covid-19-information/covid-19-assessment-centre/	0%	Avira URL Cloud	safe
https://www.wdgpublichealth.ca/your-health/covid-19-information-public/covid-19-vaccine-information/	0%	Avira URL Cloud	safe
https://registration-mom.mychamp.ca/Live/Montfort/Booking/Account/BookRegister	0%	Avira URL Cloud	safe
https://www.guardian-ida-pharmacies.ca/en/ontario/brampton/kennedy-medical-plex-pharmacy-ida-7027581	0%	Avira URL Cloud	safe
https://www.medicineshoppe.ca/en/ontario/toronto/the-medicine-shoppe-pharmacy-134-7014226	0%	Avira URL Cloud	safe
http://www.southstormontpharmacies.com	0%	Avira URL Cloud	safe
https://www.porcupinehu.on.ca/en/your-health/infectious-diseases/novel-coronavirus/covid-assessment-	0%	Avira URL Cloud	safe
https://southlake.ca/	0%	Avira URL Cloud	safe
https://eohu.ca/en/covid-19-novel-coronavirus	0%	Avira URL Cloud	safe
https://durhamregion.vertoengage.com/engage/generic-open-clinic?key=5f58a4fe-9e22-4fb8-b49a-b8fe1ca0	0%	Avira URL Cloud	safe
https://www.myvisit.cmh.org	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
d2khazk8e83rdv.cloudfront.net	143.204.11.64	true	false	high
productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com	34.198.74.185	true	false	high
googleads.g.doubleclick.net	172.217.23.34	true	false	high
d36pom45p27o8j.cloudfront.net	13.226.169.24	true	false	high
cdnjs.cloudflare.com	104.16.19.94	true	false	high
i.ytimg.com	172.217.22.246	true	false	high
photos-ugc.l.googleusercontent.com	172.217.23.33	true	false	high
www.phdapps.health.gov.on.ca	204.41.3.217	true	false	unknown
d1yhecx6e3wyn1.cloudfront.net	143.204.11.100	true	false	high
yt3.ggpht.com	unknown	unknown	false	high
www.ontario.ca	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
covid-19.ontario.ca	unknown	unknown	false	high
api.ontario.ca	unknown	unknown	false	high
static.doubleclick.net	unknown	unknown	false	high
covid19.ontariohealth.ca	unknown	unknown	false	unknown
files.ontario.ca	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://covid-19.ontario.ca/	false		high
https://www.phdapps.health.gov.on.ca/phulocator/	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.ndfht.ca	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.ontario.ca/fr/page/accessibilite	rendezvous-vaccin[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false		high
https://www.ontario.ca/page/vaccines	ontarios-covid-19-vaccination-plan[1].htm.3.dr	false		high
https://covid-19.ontario.ca/get-covid-19-vaccine	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false		high
https://covid-19.ontario.ca/index.html	RUKONSLK.htm.3.dr	false		high
https://www.ontario.ca/page/covid-19-support-people	ontarios-covid-19-vaccination-plan[1].htm.3.dr	false		high
http://www.whcacovid.com	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.Pharmachoice.com	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://hopitalmontfort.com/en/second-covid-19-care-clinic-opening-ottawa-east-thursday	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/c19-book-vaccine-assets/social_image_en.png	book-vaccine[1].htm.3.dr	false		high
http://www.stevensonhospital.ca/news/index.html?id=265	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.womenscollegehospital.ca/assessmentcentre	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://news.ontario.ca/search/en?keywords=covid19	RUKONSLK.htm.3.dr	false		high
https://hpepublichealth.ca/covid-19-vaccines/	~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/covid-19-data/data-catalogue/ed270bb8-340b-41f9-a7c6-e8ef587e6d11.json	populate-front-page-data[1].js.3.dr	false		high
https://one.halton.ca/vab/s/	~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	false		high
https://covid-19.ontario.ca/book-vaccine/THowohealth.ca/os-covid-19-vaccinatm/embed/YrjmP_ueahQ?cont	{854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	false		high
http://www.hauserspharmacy.com	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
http://www.bradysdrugstore.com	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.york.ca/wps/portal/yorkhome/health/yr/covid-19/covid19vaccinationclinics	~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	false		high
https://hybridpharm.com/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.phdapps.health.gov.on.ca/phulocator/4Public	{854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	false	Avira URL Cloud: safe	unknown
https://CovidScreen.lacgh.napanee.on.ca)	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	low
https://barriehealth.ca/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.rvh.on.ca/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/feedback/assessment-centre-locations	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false		high
https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-1	covid-19-vaccines-ontario[1].htm.3.dr	false		high
https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-2	covid-19-vaccines-ontario[1].htm.3.dr	false		high
https://covid-19.ontario.ca/getting-covid-19-vaccine-ontario#phase-3	covid-19-vaccines-ontario[1].htm.3.dr	false		high
https://www.youtube.com/generate_204?cpn=	base[1].js.3.dr	false		high
https://www.cmh.org/patients-visitors/service-resumption-covid-19/covid-19-testing	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/covid-19-data/data-catalogue/8a89caa9-511c-4568-af89-7f2174b4378c.json	covid-19-vaccines-ontario[1].htm.3.dr	false		high
https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-workplace-2020-12-21.png	covid-19-vaccines-ontario[1].htm.3.dr	false		high
http://www.health.gov.on.ca/en/pro/programs/publichealth/coronavirus/docs/Guidance_for_Prioritizing_	ontarios-covid-19-vaccination-plan[1].htm.3.dr	false	Avira URL Cloud: safe	unknown
http://www.metrodrugs.ca	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-check-results.svg	RUKONSLK.htm.3.dr	false		high
https://covid-19.ontario.ca/book-vaccine/	book-vaccine[1].htm.3.dr, ~DF1CE05EB0C3EFFAB1.TMP.2.dr	false		high
https://nygh.on.ca/covid-19-updates	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.ontario.ca/page/accessibility	ontarios-covid-19-vaccination-plan[1].htm.3.dr, book-vaccine[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false		high
https://www.osmh.on.ca/covid-19/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/fr/le-plan-de-vaccination-de-lontario-contre-la-covid-19#phase-1	rendezvous-vaccin[1].htm.3.dr	false		high
https://www.hamilton.ca/coronavirus/covid-19-vaccine-booking	~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	false		high
https://www.phdapps.health.gov.on.ca/phulocator/riovirus)	~DF1CE05EB0C3EFFAB1.TMP.2.dr	false	Avira URL Cloud: safe	unknown
https://assessmentbooking.simplybook.plus/v2/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
http://www.espanolaregionalhospital.ca/covid-19	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/fr/index.fr.html	RUKONSLK.htm.3.dr	false		high
https://www.mahc.ca/en/services/covid19.aspx#	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://api.ontario.ca/es/onesite	app.min[1].js.3.dr	false		high
https://portal.healthmyself.net/tehncovid/guest/#/g5x/book/type	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.prhc.on.ca/about-us/covid-19-novel-coronavirus/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.ontario.ca/.ca/book-vaccine/	~DF1CE05EB0C3EFFAB1.TMP.2.dr	false		high
https://covid-19.ontario.ca/vernment-ontario	~DF1CE05EB0C3EFFAB1.TMP.2.dr	false		high
http://www.hwmh.ca	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.ontario.ca	{854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr, print[1].css.3.dr	false		high
http://www.lakeridgehealth.on.ca	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://testing.getcorigan.ca/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.ontario.ca/page/government-ontarioDGovernment	{854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	false		high
https://www.bchsys.org/en/covid-19-online-scheduling.aspx	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false		high
http://www.rvh.on.ca	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.msh.on.ca/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
http://www.HamiltonCovidTest.ca	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://youtu.be/	base[1].js.3.dr	false		high
https://gbfht.ca/cac/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
http://github.com/robloach/jquery-once	jquery.once.min[1].js.3.dr	false		high
https://www.grhosp.on.ca/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://psfdh.on.ca/2020/04/03/community-assessment-centre/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/centres-depistage/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false		high
https://covid-19.ontario.ca/ontarios-covid-19-vac	{854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	false		high
https://covid19results.ehealthontario.ca:4443/	RUKONSLK.htm.3.dr	false		high
https://stage.api.ontariogovernment.ca	app.min[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.ontario.ca/img/favicon.ico~	imagestore.dat.3.dr	false		high
https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-covid-alert-2020-12-21.png	covid-19-vaccines-ontario[1].htm.3.dr	false		high
https://covid-19.ontario.ca/covid19-cms-assets/2021-03/getting-covid-vaccine-meta-1920x1080-en.jpg	ontarios-covid-19-vaccination-plan[1].htm.3.dr	false		high
https://covid-19.ontario.ca/fr/zones-et-restrictions	about-ontario[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false		high
https://www.ontario.ca/page/ethical-framework-covid-19-vaccine-distribution	ontarios-covid-19-vaccination-plan[1].htm.3.dr	false		high
https://www.haltonhealthcare.on.ca/covid-19-info/booking-a-test	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
http://www.libertymarketpharmacy.com/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://slmhc.on.ca/about/covid-19-information/covid-19-assessment-centre/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.wdgpublichealth.ca/your-health/covid-19-information-public/covid-19-vaccine-information/	~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	false	Avira URL Cloud: safe	unknown
http://news.ontario.ca/newsroom/en	app.min[1].js.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false		high
https://registration-mom.mychamp.ca/Live/Montfort/Booking/Account/BookRegister	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.walmart.ca/en/stores-near-me/richmond-hill-south-supercentre-1116	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false		high
https://www.ontario.ca/page/privacy-statement	ontarios-covid-19-vaccination-plan[1].htm.3.dr, book-vaccine[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false		high
https://covid-19.ontario.ca/book-vaccine/THowio.ca/ontarios-covid-19-vaccinatm/embed/YrjmP_ueahQ?con	{854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr	false		high
https://www.guardian-ida-pharmacies.ca/en/ontario/brampton/kennedy-medical-plex-pharmacy-ida-7027581	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.medicineshoppe.ca/en/ontario/toronto/the-medicine-shoppe-pharmacy-134-7014226	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
http://www.southstormontpharmacies.com	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/covid-19-test-and-testing-location-information	ontarios-covid-19-vaccination-plan[1].htm.3.dr, 4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr, RUKONSLK.htm.3.dr	false		high
https://www.walmart.ca/en/stores-near-me/woodbridge-supercentre-1081	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false		high
https://www.porcupinehu.on.ca/en/your-health/infectious-diseases/novel-coronavirus/covid-assessment-	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/	RUKONSLK.htm.3.dr, covid-19-vaccines-ontario[1].htm.3.dr	false		high
https://southlake.ca/	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://covid-19.ontario.ca/themes/custom/ds_theme/favicon.ico~&	imagestore.dat.3.dr	false		high
https://eohu.ca/en/covid-19-novel-coronavirus	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://trilliumhealthpartners.ca/assessment	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false		high
https://durhamregion.vertoengage.com/engage/generic-open-clinic?key=5f58a4fe-9e22-4fb8-b49a-b8fe1ca0	~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp.0.dr	false	Avira URL Cloud: safe	unknown
https://www.myvisit.cmh.org	4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js.3.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/embed/cs4qPsP6COA	{854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat.2.dr, RUKONSLK.htm.3.dr	false		high

Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public

IP	Domain	Country	ASN	ASN Name	Malicious
143.204.11.100	d1yhecx6e3wyn1.cloudfront.net	United States	16509	AMAZON-02US	false
172.217.22.246	i.ytimg.com	United States	15169	GOOGLEUS	false
34.198.74.185	productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
172.217.23.33	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
13.226.169.24	d36pom45p27o8j.cloudfront.net	United States	16509	AMAZON-02US	false
172.217.23.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
143.204.11.64	d2khazk8e83rdv.cloudfront.net	United States	16509	AMAZON-02US	false
204.41.3.217	www.phdapps.health.gov.on.ca	Canada	808	GONET-ASN-1CA	false
104.16.19.94	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

General Information

Joe Sandbox Version:	31.0.0 Emerald
Analysis ID:	386160
Start date:	13.04.2021
Start time:	17:36:14
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 8m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Sample file name:	COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx
Cookbook file name:	defaultwindowsofficecookbook.jbs
Analysis system description:	Windows 7 x64 SP1 with Office 2010 SP2 (IE 11, FF52, Chrome 57, Adobe Reader DC 15, Flash 25.0.0.127, Java 8 Update 121, .NET 4.6.2)
Number of analysed new started processes analysed:	6
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled HDC enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.winDOCX@4/274@14/9
Cookbook Comments:	Adjust boot time Enable AMSI Found application associated with file extension: .docx Found Word or Excel or PowerPoint or XPS Viewer Attach to Office via COM Browse link: https://covid-19.ontario.ca/book-vaccine/ Scroll down Close Viewer Browsing link: https://www.ontario.ca/ Browsing link: https://covid-19.ontario.ca/rendezvous-vaccin Browsing link: https://www.ontario.ca/page/government-ontario Browsing link: https://covid-19.ontario.ca/ Browsing link: https://covid-19.ontario.ca/covid-19-vaccines-ontario Browsing link: https://www.phdapps.health.gov.on.ca/phulocator/ Browsing link: https://covid-19.ontario.ca/ontarios-covid-19-vaccination-plan#phase-1 Browsing link: https://covid19.ontariohealth.ca/ Browsing link: https://covid-19.ontario.ca/book-vaccine/ Browsing link: https://covid-19.ontario.ca/vaccine-locations Browsing link: https://www.ontario.ca/page/about-ontario
Warnings:	Show All Exclude process from analysis (whitelisted): dllhost.exe Excluded IPs from analysis (whitelisted): 88.221.62.148, 2.20.142.209, 2.20.142.210, 13.107.13.80, 204.79.197.200, 13.107.21.200, 131.253.33.200, 13.107.22.200, 172.217.23.40, 172.217.23.46, 152.199.19.161, 216.58.207.164, 216.58.207.131, 151.101.2.109, 151.101.66.109, 151.101.130.109, 151.101.194.109, 172.217.20.238, 172.217.23.78, 172.217.22.238, 142.250.185.134, 172.217.23.67, 13.107.253.19 Excluded domains from analysis (whitelisted): gstaticadssl.l.google.com, au.download.windowsupdate.com.edgesuite.net, api.bing.com, afd.e-0001.dc-msedge.net, e11290.dspg.akamaiedge.net, iecvlist.microsoft.com, go.microsoft.com, www.googletagmanager.com, star-azurefd-prod.trafficmanager.net, dual.t-0009.t-msedge.net, audownload.windowsupdate.nsatc.net, www-bing-com.dual-a-0001.a-msedge.net, www.google.com, www.gstatic.com, au-bg-shim.trafficmanager.net, api-bing-com.e-0001.e-msedge.net, dualstack.f3.shared.global.fastly.net, www.google-analytics.com, www.bing.com, e-0001.dc-msedge.net, www-google-analytics.l.google.com, dual-a-0001.a-msedge.net, ie9comview.vo.msecnd.net, fonts.gstatic.com, www-googletagmanager.l.google.com, ctldl.windowsupdate.com, a767.dscg3.akamai.net, r20swj13mr.microsoft.com, static-doubleclick-net.l.google.com, dual-a-0001.dc-msedge.net, youtube-ui.l.google.com, a-0001.a-afdentry.net.trafficmanager.net, go.microsoft.com.edgekey.net, t-0009.fb-t-msedge.net, cs9.wpc.v0cdn.net Report size exceeded maximum capacity and may have missing behavior information. Report size getting too big, too many NtCreateFile calls found. Report size getting too big, too many NtDeviceIoControlFile calls found. Report size getting too big, too many NtQueryAttributesFile calls found. VT rate limit hit for: /opt/package/joesandbox/database/analysis/386160/sample/COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx

Simulations

Behavior and APIs

No simulations

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
13.226.169.24	ACH REMlTTANCE ADVlCE..xlsx	Get hash	malicious	Browse
13.226.169.24	ACH PAYMENT REMlTTANCE.xlsx	Get hash	malicious	Browse
143.204.11.64	scan-100218.docm	Get hash	malicious	Browse
104.16.19.94	https://bit.ly/3hDDoTm	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
	http://ninjutsu.4ryu.com/.well-known/pki-validation/zombaiogw_1_1/print_recipe.php?living=ytpr1h11zw0qw0&south=difference&slide=during	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
	https://surl.me/vy4l	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
	https://u15974653.ct.sendgrid.net/ls/click?upn=sKo8P2XHLOhqpgLcALrpHsAMymMPQ9pJ-2BnCP9l5luXmX2tau-2FkmeQME9D69RU7ffQBYwWBrDSW94kS5u6ig5BmkhgBhgQJfm-2BsLwvjPlmdPdsXD4ILOaqVNEwgY7GAZQPkafmgyIOS5FU-2B6124ooi1O-2FMB47qUlmVhTTnK6qV5fGlsBAy7itOSHfP1wikhvsiyeK_Y89n8cg5DiKkjVvtw-2FYSjk3JbqBqCNqd4QE5c0z9p4IJ6aN66chjxOUHcribC2kbrQ6ua83fMfn3Hnb3TofbErA9L2X-2BpZpbvzOnYxCl6WSRvjbd6cnTXhRnH1-2Btzg-2FEpNckJ170lMbhRvVxgpvwWV6rRyYLwNDxpt3Im1lgyNi-2B-2B86Pp03BP8O3y-2Bw2BSUYNj8fK3irR9dYwZuWCkvZJ3fJURjdr0uD0itVZut-2BhVs-3D	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/font-awesome/4.1.0/fonts/fontawesome-webfont.eot?
	https://j.mp/38NwiZZ	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
	http://lokalny-biznes.eu/modules/mod_simplefileuploadv1.3/elements/reactivation/indextest.php?youll=enwht11p10sc0&picture=call&please=gave	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/jquery/3.4.1/jquery.min.js
	https://pinpoint-insights.com/interx/tracker?op=click&id=107b4.3e3b&url=https%3A%2F%2Fpinpoint-insights.com%2Finterx%2Funsubscribe%3Fid%3D107b4.3e3b%26type%3Dnormal&_hC=D7C07475	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/flickity/1.0.0/flickity.min.css
	https://pinpoint-insights.com/interx/tracker?op=click&id=107b4.3e3b&url=https%3A%2F%2Fpinpoint-insights.com%2Finterx%2Funsubscribe%3Fid%3D107b4.3e3b%26type%3Dnormal&_hC=D7C07475	Get hash	malicious	Browse	cdnjs.cloudflare.com/ajax/libs/flickity/1.0.0/flickity.min.css

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
cdnjs.cloudflare.com	Ug6Q3IejBj.exe	Get hash	malicious	Browse	104.16.19.94
	Mike-voip-18388.htm	Get hash	malicious	Browse	104.16.19.94
	V3kT2daGkz.exe	Get hash	malicious	Browse	104.16.19.94
	setupapp.exe	Get hash	malicious	Browse	104.16.18.94
	C++ Dropper.exe	Get hash	malicious	Browse	104.16.18.94
	setup-1.exe	Get hash	malicious	Browse	104.16.19.94
	Five.exe	Get hash	malicious	Browse	104.16.19.94
	6BympvyPAv.exe	Get hash	malicious	Browse	104.16.18.94
	#Ud83d#Udcde.htm	Get hash	malicious	Browse	104.16.18.94
	#Ud83d#Udcde973.htm	Get hash	malicious	Browse	104.16.18.94
	Open Invoice & Statements.htm	Get hash	malicious	Browse	104.16.18.94
	securedmessage.htm	Get hash	malicious	Browse	104.16.18.94
	Three.exe	Get hash	malicious	Browse	104.16.18.94
	One.exe	Get hash	malicious	Browse	104.16.19.94
	Five.exe	Get hash	malicious	Browse	104.16.19.94
	Two.exe	Get hash	malicious	Browse	104.16.19.94
	nicoleta.fagaras-DHL_TRACKING_1394942.html	Get hash	malicious	Browse	104.16.18.94
	PaymentAdvice-copy.htm	Get hash	malicious	Browse	104.16.18.94
	FARASIS.xlsx	Get hash	malicious	Browse	104.16.18.94
	FARASIS.xlsx	Get hash	malicious	Browse	104.16.19.94

ASN

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
AMAZON-AESUS	inv_397145572_1781481758.xls	Get hash	malicious	Browse	50.17.5.224
	inv_397145572_1781481758.xls	Get hash	malicious	Browse	50.17.5.224
	P.O 0000237701.exe	Get hash	malicious	Browse	18.235.92.123
	oEWV80rj6fgwF5i.exe	Get hash	malicious	Browse	3.223.115.185
	EUR 11,464.00 955PLA3210970613.PDF.exe	Get hash	malicious	Browse	50.17.5.224
	1koFD7T3Tv.exe	Get hash	malicious	Browse	100.24.251.71
	Ug6Q3IejBj.exe	Get hash	malicious	Browse	54.227.172.114
	Quot_466378-09.exe	Get hash	malicious	Browse	54.225.165.85
	Product_Samples.xlsx	Get hash	malicious	Browse	54.198.222.183
	MTCC169.DLL	Get hash	malicious	Browse	54.225.222.160
	originfile8.doc	Get hash	malicious	Browse	23.20.114.125
	yHm3PFVYHK.exe	Get hash	malicious	Browse	54.221.253.252
	commercial invoice & packing list doc.exe	Get hash	malicious	Browse	52.20.197.7
	V3kT2daGkz.exe	Get hash	malicious	Browse	34.238.79.100
	Bank Details.xlsx	Get hash	malicious	Browse	3.230.51.235
	s6G3ZtvHZg.exe	Get hash	malicious	Browse	52.206.71.220
	IntegraL.exe	Get hash	malicious	Browse	23.21.252.4
	CIVIP-8287377.exe	Get hash	malicious	Browse	54.165.198.12
	remittance info.xlsx	Get hash	malicious	Browse	3.223.115.185
	782kQ15aYm.dll	Get hash	malicious	Browse	54.197.173.238
AMAZON-02US	D@136.exe	Get hash	malicious	Browse	3.23.250.40
	bd.exe	Get hash	malicious	Browse	99.86.154.99
	bee.exe	Get hash	malicious	Browse	99.86.154.178
	oEWV80rj6fgwF5i.exe	Get hash	malicious	Browse	52.58.78.16
	presupuesto.xlsx	Get hash	malicious	Browse	18.184.197.212
	ghnrope2.dll	Get hash	malicious	Browse	13.225.75.73
	scan_745.htm	Get hash	malicious	Browse	52.219.98.146
	ntpxrxZCfL.exe	Get hash	malicious	Browse	3.13.255.157
	Ug6Q3IejBj.exe	Get hash	malicious	Browse	52.84.150.39
	OrSxEMsYDA.exe	Get hash	malicious	Browse	3.13.255.157
	Shipping-Documents.xlsx	Get hash	malicious	Browse	52.59.165.42
	shipping documents. CI PL.xlsx	Get hash	malicious	Browse	52.59.165.42
	Original Invoice-COAU7229898130.xlsx	Get hash	malicious	Browse	18.184.197.212
	NEW ORDER.xlsx	Get hash	malicious	Browse	18.184.197.212
	INV#609-005.PDF.exe	Get hash	malicious	Browse	52.221.6.123
	swift note.xlsx	Get hash	malicious	Browse	52.59.165.42
	RFQ3936.xlsx	Get hash	malicious	Browse	52.59.165.42
	Invoice-SRP0047459188e.xlsx	Get hash	malicious	Browse	52.59.165.42
	BANKINV28032021VBNSINO.xlsx	Get hash	malicious	Browse	52.59.165.42
	tmkfdBpwAx.exe	Get hash	malicious	Browse	3.22.15.135
AMAZON-02US	D@136.exe	Get hash	malicious	Browse	3.23.250.40
	bd.exe	Get hash	malicious	Browse	99.86.154.99
	bee.exe	Get hash	malicious	Browse	99.86.154.178
	oEWV80rj6fgwF5i.exe	Get hash	malicious	Browse	52.58.78.16
	presupuesto.xlsx	Get hash	malicious	Browse	18.184.197.212
	ghnrope2.dll	Get hash	malicious	Browse	13.225.75.73
	scan_745.htm	Get hash	malicious	Browse	52.219.98.146
	ntpxrxZCfL.exe	Get hash	malicious	Browse	3.13.255.157
	Ug6Q3IejBj.exe	Get hash	malicious	Browse	52.84.150.39
	OrSxEMsYDA.exe	Get hash	malicious	Browse	3.13.255.157
	Shipping-Documents.xlsx	Get hash	malicious	Browse	52.59.165.42
	shipping documents. CI PL.xlsx	Get hash	malicious	Browse	52.59.165.42
	Original Invoice-COAU7229898130.xlsx	Get hash	malicious	Browse	18.184.197.212
	NEW ORDER.xlsx	Get hash	malicious	Browse	18.184.197.212
	INV#609-005.PDF.exe	Get hash	malicious	Browse	52.221.6.123
	swift note.xlsx	Get hash	malicious	Browse	52.59.165.42
	RFQ3936.xlsx	Get hash	malicious	Browse	52.59.165.42
	Invoice-SRP0047459188e.xlsx	Get hash	malicious	Browse	52.59.165.42
	BANKINV28032021VBNSINO.xlsx	Get hash	malicious	Browse	52.59.165.42
	tmkfdBpwAx.exe	Get hash	malicious	Browse	3.22.15.135

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Link	Context
7dcce5b76c8b17472d024758970a406b	presupuesto.xlsx	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	Order 100920-0087.pps	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	Shipping-Documents.xlsx	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	shipping documents. CI PL.xlsx	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	Original Invoice-COAU7229898130.xlsx	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	NEW ORDER.xlsx	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	swift note.xlsx	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	RFQ3936.xlsx	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	Invoice-SRP0047459188e.xlsx	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	BANKINV28032021VBNSINO.xlsx	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	fileshare.doc	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	documents-122179384.xlsm	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	RFQ P39948220 Inquiry.ppt	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	documents-1982636004.xlsm	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	documents-466266883.xlsm	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	_RFQ_Hongjin_.xlsx	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	Bank Details.xlsx	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	presupuesto.xlsx	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	Confirm Order for AKTEK Company_E4117.ppt	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94
	PROFORMA INVOICE.xlsx	Get hash	malicious	Browse	143.204.11.100 172.217.22.246 172.217.23.33 13.226.169.24 172.217.23.34 143.204.11.64 34.198.74.185 204.41.3.217 104.16.19.94

Dropped Files

No context

Created / dropped Files

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Microsoft Cabinet archive data, 58596 bytes, 1 file
Category:	dropped
Size (bytes):	117192
Entropy (8bit):	7.995478615012125
Encrypted:	true
SSDEEP:	3072:F2qSSwIm1m/QEBbgb1om2qSSwIm1m/QEBbgb1oQ:FJdwIm1m/QEOb1omJdwIm1m/QEOb1oQ
MD5:	2FEBC5EB397A71B7A4862D0DCC21CA5E
SHA1:	5568FBD6D7DB899850D3AAFF95FEC08952361678
SHA-256:	2E9BE05B763D01CB0CD6FDE8BC64432A012AD3ECD9A6F3099DDE740A2D148A13
SHA-512:	B7D42B634F3B0CDC81CB94F281C8BB743BB98421AE54E21005637F762292D865EB1D71D43C4FF96AEE824527E9F7FB94FE5F5A4D35A22363A2A86AF8ABE0C414
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	MSCF............,...................I........T........bR. .authroot.stl...s~.4..CK..8T....c_.d....A.K......&.-.J...."Y...$E.KB..D...D.....3.n..u.............\|..=H4..c&.......f.,..=..-....p2.:..`HX......b.......Di.a......M.....4.....i..}..:~N.<..>..V..CX......B......,.q.M.....HB..E~Q...)..Gax../..}7..f......O0...x..k..ha...y.K.0.h..(....{2Y.].g...yw..\|0.+?.`-../.xvy..e......w.+^...w\|.Q.k.9&.Q.EzS.f......>?w.G.......v.F......A......-P.$.Y...u....Z..g..>.0&.y.(..<.].`>... ..R.q...g.Y..s.y.B..B....Z.4.<?.R....1.8.<.=.8..[a.s.......add..).NtX....r....R.&W4.5]....k.._iK..xzW.w.M.>,5.}..}.tLX5Ls3_..).!..X.~...%.B.....YS9m.,.....BV`.Cee.....?......:.x-.q9j...Yps..W...1.A<.X.O....7.ei..a\.~=X....HN.#....h,....y...\.br.8.y"k).....~B..v....GR.g\|.z..+.D8.m..F .h............ItNs.\....s..,.f`D...]..k...:9..lk.<D....u...........[...*.wY.O....P?.U.l....Fc.ObLq......Fvk..G9.8..!..\T:K`.......'.3......;.u..h...uD..^.bS...r........j..j .=...s .FxV....g.c.s..9.

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506 Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	652
Entropy (8bit):	3.107162850663867
Encrypted:	false
SSDEEP:	12:hwTJ6HkPlE99SNxAhUe0hbHwTJ6HkPlE99SNxAhUe0ht:2okPcUQUPhUokPcUQUPht
MD5:	5366D69859421B1F9504AC783CF1C20E
SHA1:	FA3D38A914F18A307700B4805A0BF09E88D18C22
SHA-256:	E6926EC858898EA46A462FAA256E8A5D11246D9AAE7934F1CC7B96CD53710EA3
SHA-512:	28670C3C58701E4EF47A98BE5C12B6F57C2CB492ADFA519FB3186FDEE2B3B1C81E2C1E89AEAF9F018C206B4B20ABC129B7723CFCA13D2ADE5A41025242796107
Malicious:	false
Reputation:	low
Preview:	p...... ........t.RK.0..(....................................................... ...................$...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.d.8.f.4.f.3.f.6.f.d.7.1.:.0."...p...... .........sK.0..(....................................................... ...................$...............h.t.t.p.:././.c.t.l.d.l...w.i.n.d.o.w.s.u.p.d.a.t.e...c.o.m./.m.s.d.o.w.n.l.o.a.d./.u.p.d.a.t.e./.v.3./.s.t.a.t.i.c./.t.r.u.s.t.e.d.r./.e.n./.a.u.t.h.r.o.o.t.s.t.l...c.a.b...".0.d.8.f.4.f.3.f.6.f.d.7.1.:.0."...

C:\Users\user\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico Download File
Process:	C:\Program Files\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	3.8046022951415335
Encrypted:	false
SSDEEP:	24:suZOWcCXPRS4QAUs/KBy3TYI42Apvl6wheXpktCH2Yn4KgISQggggFpz1k9PAYHu:HBRh+sCBykteatiBn4KWi1+Ne
MD5:	DA597791BE3B6E732F0BC8B20E38EE62
SHA1:	1125C45D285C360542027D7554A5C442288974DE
SHA-256:	5B2C34B3C4E8DD898B664DBA6C3786E2FF9869EFF55D673AA48361F11325ED07
SHA-512:	D8DC8358727590A1ED74DC70356AEDC0499552C2DC0CD4F7A01853DD85CEB3AEAD5FBDC7C75D7DA36DB6AF2448CE5ABDFF64CEBDCA3533ECAD953C061A9B338E
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	...... .... .........(... ...@..... ...................................................................................................................................................................................................N...Sz..R...R...P...N..L..H..DG..........................................................................................R6..U...U...S...R...P...N..L..I..F..B...7...............................................................................S6..V...V...U...S...R...P...N..L..I..F..C...?..:z......................................................................O...W...V...V...U...S...R...P...N..L..I..E..C...?...;..{7..q2$..............................................................T..D..]...S)..p6..J...R...P...N..L..I..E..B..>..;..z7..p2..f,X.........................................................A..O#..N!..N!..N!..P$..q:...P...N..K..I..E..A..=..9..x5..n0..e,...5...................................................Ea.Z,..T$..T$..T

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\MP98E46N\www.ontario[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	dropped
Size (bytes):	275
Entropy (8bit):	4.355403879931485
Encrypted:	false
SSDEEP:	6:JFK1rUFSC5EJVqGCj5xIQl1rFK1rFK1rFK1rFK1rUFSC5EJVqGCj5pTTNIQl1rFJ:JsrU775SQPrsrsrsrsrU775pTiQPrsrS
MD5:	98F4D448FF72FE164BFFB31CD83DBEDD
SHA1:	95FF0E90375ECA00EC41C0552087D23B71BA4ECE
SHA-256:	CD5C6078FA0F906CF735E5ADB6C184F18A9216521CD81DAB418FA558281E7A59
SHA-512:	3E67F7FAAB3DF9E2B877DADE3010CEED6B0EE662056DE7D7346AB6FD90491C84B87A72E4ECED978AA9871123EB6271B9AD8E0563D7104F30B2679AA4F20AD35F
Malicious:	false
Reputation:	low
Preview:	<root></root><root><item name="modernizr" value="modernizr" ltime="2056763168" htime="30879942" /></root><root></root><root></root><root></root><root></root><root><item name="modernizr" value="modernizr" ltime="2467383168" htime="30879942" /></root><root></root><root></root>

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\DOMStore\Q3DXH6Q1\www.youtube[1].xml Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	2703
Entropy (8bit):	5.135318670078789
Encrypted:	false
SSDEEP:	48:0JQ53Q5io1TEhQIio1TEhQ3mhQIio1TEhQ3mhQ4QIio1TEhQ3mhQIio1TEhQ3mhk:uQtQ8gEhQHgEhQ3mhQHgEhQ3mhQ4QHgi
MD5:	54BA69745A39CBBF2BEE75B4655AE5D1
SHA1:	2E5D4C1FE13EA9C1CA94AC1AA43572E8941C94D3
SHA-256:	022B441ABB234D5B720AA27E69923E45050115BD9FCD0D2E2309B57830241CAB
SHA-512:	E6533F99BAC24F3EE9E72DA815F6DA78D9E8233E748C73E28B094E882CB9FCC4D09A519509F9398654960D385D3D0E17F8B1584388A31C8D8F1BC65E7ADA2138
Malicious:	false
Reputation:	low
Preview:	<root></root><root></root><root><item name="__sak" value="1" ltime="2153713168" htime="30879942" /></root><root></root><root><item name="__sak" value="1" ltime="2207193168" htime="30879942" /></root><root></root><root><item name="yt-remote-device-id" value="{"data":"cc052f98-2bcb-46f5-a0cf-4a42a52c9f1e","expiration":1649896719994,"creation":1618360720007}" ltime="2208093168" htime="30879942" /></root><root><item name="yt-remote-device-id" value="{"data":"cc052f98-2bcb-46f5-a0cf-4a42a52c9f1e","expiration":1649896719994,"creation":1618360720007}" ltime="2208093168" htime="30879942" /><item name="yt-remote-connected-devices" value="{"data":"[]","expiration":1618447120165,"creation":1618360720165}" ltime="2209363168" htime="30879942" /></root><root><item name="yt-remote-device-id" value="{"data":"cc052f98-2bcb-46f5-a0cf-4a42a52c9f1e","expiration&q

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\RecoveryStore.{854E3008-9CB9-11EB-ADCF-ECF4BBB5915B}.dat Download File
Process:	C:\Program Files\Internet Explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	33368
Entropy (8bit):	1.8701640884212738
Encrypted:	false
SSDEEP:	96:MRKSKOpkJeaJq0tHhr38Ju2bYeXJuD6a8Hk73:MRKSKOpkJeaA0tN3LBRGa8S3
MD5:	47AC2EA2516136C68385AA6B40E6A96E
SHA1:	6314BC4BBF51088AFD7F3273CF44DBB01A0D114E
SHA-256:	FCA3F6BEB29A17154A08B434138A35B56274DCF822601EFAB2FB026DDC0E1BB5
SHA-512:	1752DCE3A93F4756CDE8844F4F2935D2B9EDD9AB72FD687E7B0EEF9292DCD7EF4FD3DCE07548329F2226D0C62A8D8E23CE6CB28C4BCC3CBC3C3067CBCF70328C
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{854E300A-9CB9-11EB-ADCF-ECF4BBB5915B}.dat Download File
Process:	C:\Program Files\Internet Explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	350516
Entropy (8bit):	3.592168513572414
Encrypted:	false
SSDEEP:	3072:qn3w6shuNdfh3Mv0rMREtit8XN6kyxQU3PKXzq9bNtuL8DRm:a3Uydh3qiRwxQU3MzqzUL8m
MD5:	F3DD614EEF58E609EEC285F7AF8E04F5
SHA1:	28373EAE164FF657C5F17A08D4DDA7091C8BDD82
SHA-256:	8B71C22EC38FD60CFB779D582397445F7D94CD456C7337547F7A9CD73882485E
SHA-512:	0CD4FB7A8A5778B48E8DF3561CF62195A94A5A2F414A8096415CB5F6872AD4009C507D74845CA1068E7EBD3E219312A658F101596D1A7B9E4805FECD89572EFF
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\Recovery\High\Active\{A66EC5B2-9CB9-11EB-ADCF-ECF4BBB5915B}.dat Download File
Process:	C:\Program Files\Internet Explorer\iexplore.exe
File Type:	Microsoft Word Document
Category:	dropped
Size (bytes):	16984
Entropy (8bit):	1.5637341456158451
Encrypted:	false
SSDEEP:	48:IvQGcpUpGwpNoG4pPCGrapgStGQpZfG7HpCQTGIpG:MUKDb4JEeSX/u0EA
MD5:	54EEFE202B5D7727BAB7BF7A6636F52E
SHA1:	7F98D61A148989773228B01C8DDC07A774172047
SHA-256:	52FF1500054F2247889DD75BF50A530401814B04EB65A503870B86939E246C02
SHA-512:	3972259F81449D1EC5AE84AB5548127CA82480AFCFF86D21AB648F7746293062CCDDA9861D19CC79510FB038C81FFD0D42E7F911C7707726B0849953FD7DDB9C
Malicious:	false
Reputation:	low
Preview:	................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................R.o.o.t. .E.n.t.r.y.....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\imagestore\lr5drzg\imagestore.dat Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	34748
Entropy (8bit):	2.9903169596750265
Encrypted:	false
SSDEEP:	192:c/pSGvHjgDv3XHQfYsynKaNsC4OnNq3XHQfYsynkaNsC48nNQpSGvHjgDK:wCbXmYsyBNL0XmYsyTNVKCW
MD5:	5C96CA226070C934556BE1E747319234
SHA1:	98FFB28A6A6FBF40475F68E642FA12436F174894
SHA-256:	DD698A9372B96C86AEA420C7A33F27E6E577EDEE1F4787E61431FACF35E844EA
SHA-512:	35AE976D3C9C2003C96C22C27605AD8CCF06BA04BE735558F4A4F901A4C220A713CF852FB152F510A1601D0D1F7863A57CA6A44374EE5797951772507C011FA9
Malicious:	false
Reputation:	low
Preview:	E.h.t.t.p.s.:././.c.o.v.i.d.-.1.9...o.n.t.a.r.i.o...c.a./.c.1.9.-.b.o.o.k.-.v.a.c.c.i.n.e.-.a.s.s.e.t.s./.f.a.v.i.c.o.n.-.3.2.x.3.2...p.n.g.8....PNG........IHDR... ... .....szz.....pHYs...........~.....IDATX.W[(.Y..{....f\2n..7..(3[<.... .h<)e.<y..@.x@).9..a.t..(N....1..Y.j}.......\|....}.o}.f3&..;....g.1.m.G...d..a......k.3M..........Vb&.-`4.7.{..t..%.D...r.3..Ka.V.U........wK...K..ma....B.$7...aW....l.Y.O.BoU!<..;...n.....p...7b(...gH..{..j.P....%.=<<4.b..5..$.....).~~~...............t:!66Vc.#00....................BP<..".........r.....'P...........3......v....#......EHKK.1aH..I.,.s6.........`kk....auu....uB...........666`nn.....z...2r.....>(@..{....*....kHf......\.....{....cn.$.[...........S,Pl.C...1..&......oFw........M....................4'.....&j....f}}}\|........1:.........v.!++....../.,.#....p1H....l.b.A7-JHH...s~...8xzz..8..............&f...iff.....I..[.q.....i.........-88."##u....4.GGG....j/...7.....z.....{rr..Abb"...r. ...IM`....T.B&..fZ.H.,(

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\RUKONSLK.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	59312
Entropy (8bit):	4.696571424764276
Encrypted:	false
SSDEEP:	1536:jqn2E24AmTI/Diz0/7hcKsKZEO7+bYyc0fwVgFY72sn0KcLuUvwHCsYHKrjAz1Pq:Gn2eDucPMAz1PJlb93m6hL2h
MD5:	88DD819218D5F34C26C4785C363759DE
SHA1:	62959AA53A4696D10A8AB5721059247C4DA8F801
SHA-256:	B07620CAD28717FD7064196B485143A7A8A100F041F0B5BF74A88BCB0F401819
SHA-512:	1CADBBD4CF8E384E9BA5AAC0C90C3622FB40A7C28EFA37B31F20E5B102DE54118C3F02B9E355C862BD934F7731990BD285844A23517FB217EDE96F952680C7EB
Malicious:	false
Reputation:	low
IE Cache URL:	https://covid-19.ontario.ca/
Preview:	<!DOCTYPE html>.<html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. Google Tag Manager -->. <script>. dataLayer = [];. (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-5G4CS4L');. </script>. End Google Tag Manager -->. <meta http-equiv="Content-Type" content="text/html;

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\api[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	852
Entropy (8bit):	5.518736472579191
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZy+KVCetE31tEsLqo40RWUnYN:VKEcixKoe21tFLrwUnG
MD5:	647F2FC22BA401C8613B8A168C02DB1A
SHA1:	CFF6FD91F3B18BC776591420B9B09C321ADA4406
SHA-256:	FE81E776D459F15B4DAEF2EA548D3150A761C08D33C3013DF60D929775548092
SHA-512:	AC598D3755CA8AD371AA8D42AA7DCC53EBC91AA206E80ADC6713ADF09B29EEF31A92CC39218D509FBE0C9274C51DE499B63E6A88A0D6B4CDD049BCF2B3AF6B36
Malicious:	false
Reputation:	low
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;po.src='https://www.gstatic.com/recaptcha/releases/mrdLhN7MywkJAAbzddTIjTaM/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-zy6MpaK2q7ThL2mDEY0TbyvBJDr6lKK9SPTRcXRLbNIBZDn1zpbOT7nMFdXz9mci';var e=d.querySelector('script[nonce]'),n=e&&(e['nonce']\|\|e.getAttribute('nonce'));if(n){po.setAttribute('nonce',n);}var s=d.getElementsByTagName('script')[0];s.parentNode.insertBefore(po, s);})();

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\app-data[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.828758439731455
Encrypted:	false
SSDEEP:	3:YSAjKv8Lt/1QRc3en:YSAjKvax18cu
MD5:	EF2C86230634867F37EA2E4C6778CB2D
SHA1:	2A24277E89F9498B378A63D141A1F6AF3E085733
SHA-256:	B84C538D7F3BE14E5F46BCE49268C34F4479B22FD9997BAA7E6F4C74E177C2CC
SHA-512:	55DEC0004F8D95D4296ED5EEFC5FC5A929EF4F3F3F22FEAD7D552DE7E9C671B3362DE50885FFFB8EC0C4AF7EA5F4FD8B74CE874F34D8E7FAE56236ACC521136F
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/page-data/app-data.json
Preview:	{"webpackCompilationHash":"192fd53b9f665082e06a"}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\app.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	54690
Entropy (8bit):	5.4361647031728735
Encrypted:	false
SSDEEP:	768:3z5xKen7+bC2L1L+LDLvvPdQ60v0X9H48RQ+Y1r4lumyOS5SIQ/WuQ5+hXt/Vs:+b71gXvve6z9LR3lumyOSsNbQ0Ft/Vs
MD5:	90AE69F345F32CEE774C6033DAB3E6AE
SHA1:	DBEA9776D4E0AEFCAE87268E73922C03061DDEBE
SHA-256:	4E8EED0EBB68E95AB82B239AA510F85431D3EE6D0EF444EF1C1AF102BFC232A9
SHA-512:	F1711AE874F4129B617ACEC8997F1D68F6D3F7934C83457817AF6D77BF420303F6586A05C1FDE9F7611AA9CA61B5CBFFC2605FF0FB6E6875D0B983A3756805BC
Malicious:	false
IE Cache URL:	https://www.ontario.ca/js/app.min.js
Preview:	"use strict";!function(c){c(function(){function e(e){var t,a,i="tabindex",n=c("#"+e.attr("data-dropdown")),o=c(s,n);o&&(a=(t=o.eq(0)).attr(i),o.attr(i,"0"===a?"-1":"0"),"0"!==a&&t.focus()),"1"!==n.attr("data-accessibility-processed")&&(c(document).click(function(e){e.target!==n.get(0)&&!1===c(d,n).is(":focus")&&o.attr(i,"-1")}),n.attr("data-accessibility-processed","1"))}var s=["a[href]","area[href]","a.close-reveal-modal","input:not([disabled])","select:not([disabled])","textarea:not([disabled])","button:not([disabled])","iframe","object","embed","[tabindex]","[contenteditable]"].join(","),d=c(".f-dropdown").find(s).attr("tabindex","-1"),a="aria-expanded";c("a[data-dropdown]").on("click",function(){e(c(this))});function t(e){(e=e.find("h1:first-of-type")).length&&(e.is(":focusable")\|\|e.attr("tabindex",-1).on("focusout",function(){c(this).removeAttr("tabindex"),"#ng-view"===window.location.hash&&(window.location.hash="")}),e.focus())}c(".reveal-modal").find(s).attr("tabindex","-1").e

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\co-covid-19-icons-physical-distancing-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 104 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	1948
Entropy (8bit):	7.847009055709759
Encrypted:	false
SSDEEP:	48:Dx9KT/TK/8Ku9aRuwUPQA0XI59CLojba8PsAPBj9+5fOndMk:DKT/TfLaAjPam9wyba8PZv+qdj
MD5:	D06B5237DBB17375F1AD6E49BAF608F3
SHA1:	BBBF067097F5C188FA5A7D3895EA7381F01255D6
SHA-256:	4C7BACBC7729E1F782FD8A14409006E54AFB7F6EB29A1D6C18B6358D7ED0AE11
SHA-512:	789450AD63B4BBD499A088A1CA028435614718FFCD38530DB2E8F6C301FC7029AF74DB0D8E4DA5A999BA3106816FCCEC66D1AB4507AE1B1397E81C1859F4F7E9
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-physical-distancing-2020-12-21.png
Preview:	.PNG........IHDR...h...`.....[F.G....bKGD........UIDATx...{pT........1ND..jLl.)eI.X......Va..N;(......V.#.t..5@........8.........".J1(M..$\..h...?v...M.].=K.=..o.>..d.9{.y..J.Yp..9..w.5f..gZ...c."z...j...f...Y..C...kJ\..!..%:\O.Em...."...!...W].c.q.6..7b.o..F.l.1."..S\|c.k.mGVG...U.7Z\.Q...2+M.-..f...(r...m.ot..FN0^U.n........9.=.&I...z]....-.p9?rt.s.I.&V...r...W.Ni^X....i..d#.B8bH..P..:.s........B']....0.w..g.L........z.XxV....T%.\|>.N1.Q..P)bf@=..B.B..!....#&..t5.!..'.....tZt.$x....P..=.....S!.:.........j.:..h.h.H..1%&...u.<.....B..8..".c.Z...`..1;..... ..k..d.b,.bx.~...Q~........b6.08y.B.(......&....[.uVh@7.v.Zk0..{..X.....C..~.\..".5..{...\C:.L...b.1..S...Ig.Kx... .g76.E"^...ZGu.\|z..iK.Nv..c.=R...U.AK.]z...=H..b.r...j=:.re.r&.".........[....^....q5..B<.U.1...y...b*+C.....I....zL..A....~.!....!..........u...3...]~..C{.9GHA.8.znC..%K9B..`-B.D...!....'.].T(...lA...6.y.Q. .....3.k#.cjh.ZO.5\|<<.9...M....l.U#.......t/"9h.d....G8...@..%@#...H...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\co-covid-19-icons-self-assessment-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	1777
Entropy (8bit):	7.779993403442084
Encrypted:	false
SSDEEP:	48:VKbm+NSVrllm8qP5oU1Yb5mj5qUTc1rZvhklfGy:QNS5Pq51ub8EUA1NvuZ
MD5:	3C19B7F5C2929C2FD3EFFD65F53370F7
SHA1:	95702B5DED97EB44842748ADCA5FA953EC59DBEF
SHA-256:	DDDC4D69E737AA49AEC21E18FB0C50C59DEC5E7127F32577328177D2AFDA4691
SHA-512:	B3F063B3CE5F533609A4FEF34B765CE1CABE7B18332CFACC178F3DCF0EEA9DC2CE8DE2F35553FA8EB3846F08443948E119CEAF57E0636BF2571EC6F317059E13
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-self-assessment-2020-12-21.png
Preview:	.PNG........IHDR...`...`.....H.......bKGD.........IDATx..kl.U...-H1$\..D.../j.X#Q.R.piQj"........_.&RD.Xl..T4j.4.A.T,...c.%...f..rQ.....;.33;;......y.3..\|........+.Kk.....[..{....nn.fn..y.T...C.-..\!..vE.F....r.lX.....i..uJz.c.c..i\.T.~...U....zyZ..K3......:.{qL...g...T.U....TCI.....ZC...J.........o.V..t.N..Gy..~#.TW..@x..u...B..s."..:`...!....P....(....+A...w..Nv....) L...#A(.<.>..7vU.!0.....f...@@.....(.&.8...>......P......a..@-H.L30...$....i.>.p0....(.....P.].z..\..k..e... ...m..(...h..w......../..G...&.........2.........".a.G....<>U...CO........}E..\|.t.~.........={.O=....@{...r..y.H....{.+..[.Z...X....y.H.@qn...?T..{...<...........E...`...G'. .No........D..C:...+...p..K..w'.r.5...........o....X...~..a.......p}j...w.G.`.(.!.>.L..X,..J.....).........,Z....q...$.q..$...a..8."...x..U;D.).........G.B. .`.}..^..!v...z..'...%U..!......%....'...z...$....q. 0..5v......3G..U$...... ..9..[......?.....L.b. .2.....}@>I\|N..0f.+..O...p?....>....g..D..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\co-covid-19-icons-stay-home-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	2224
Entropy (8bit):	7.854566193026311
Encrypted:	false
SSDEEP:	48:542YEZxCrZXskgX9nTjrfS3y7E+WY/zJQdCSzcjhdb2Vf6RdCEgr:7YUEZckgZTgxkACSIjfbIylgr
MD5:	F90F5AF067A6638975D2480687329F91
SHA1:	107E1F4FA829FF14E50AF3B5E2678E71F0F8F1FE
SHA-256:	C41DB7A0402949CC5A46A292469CF5C94AE97A95639AA6808F9F05C2731C5B1B
SHA-512:	5142B81B10D03B927FBB44E42A427B3D38F1D2683511889D71BD1EF8794D8BCED22CFF291D4913FD16E219562349A9A28F94E1C9F45BF0CD3A2FAC8ADF0F05D1
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-stay-home-2020-12-21.png
Preview:	.PNG........IHDR...`...`.....H.......bKGD........iIDATx..{p.....Mx..GB..\|.JgbG...c. E..h.Z.u....R.b...!.v....%..8."..#..F.#.. .(x.7.P..HH..?.&.$.........'.f..~~.....H...h.Ql..E.I.....z%...q=..I..3..h!.i.#:P'.+.&.\'.3W......C'....]....&.M..7.M.e.m..7...J5.y#...{.._.vg.n...=...,..\|Ve..]..\|....{t.P~.z....>...h\|..!.2.u\|......8...1....Y........y.P.tc......Zy~.x.AX.(......sV..e2u...V#....x.A....u^..!z..Z....:.........K..[)..d.k9.......w....S./..Nm..n<.7...zWW!z..7.v...,.r.%9.........Mo.y.@..A.W...ez.3. dS.......E\k.f.7.4.hE..9q.t.p..0..$.m."...+........bj.1....a..S....B..g...9......"\..[..}r...7.s..F...z... .............#.O=.......R....a.... ...z.@_J5.o.N..l...kB6.W........"..%.....r......+..5I.......!a....K..9...#...O}..m..BI......?4L.G.0+.....r..... ...@...w.y..[. \|..@CB*L..S.2..+u...........tB..}#k.....p...B..3..f@\|.'.)....+..hK..w!V.'.....r....q."...rF"......."r..oS.y.y,.C.....X@1.......R&.h...~...;.k.oN..~.... 6J..~...A6.j>...5/..(.s..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\co-covid-19-icons-wear-a-mask-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 98 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	3127
Entropy (8bit):	7.89265984599944
Encrypted:	false
SSDEEP:	96:P9RABuo2YCs4zoTCtNDiNICK5nty2H5mdgv3IS:PMuobyzoTCtNxn82H5wgv4S
MD5:	34C99D948AD789EDE4BE64F085FDE6FA
SHA1:	DF33A0C82B3A9D157C594CAF167F506313E5F6F2
SHA-256:	75FEDC6E4C13AE69F86749B351ACDF08D70120F6EE1A1A9B7830532D5FE38BE7
SHA-512:	E91DBF47105B2DEBE4C38A5CCC2D22872534195CC63C8B5283E88B8622FF2C78512F9724F6E0D335D7A352C4D59770B80C77D72B4EBB7447670E13C3EF8D387C
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-wear-a-mask-2020-12-21.png
Preview:	.PNG........IHDR...b...`.....Ldo.....bKGD.........IDATx..yT.u...@...S!u.B.X......T......m.1.qh&S.-s.4i,......4n.oh......w....5...q_.w..}..s.\|...z..{..=.+R. ;.4...Z..V.LU.n\.MU.2..k..<.48;...\|d...<..\.j5:...R?T.V{.+.(.M.....9V..[.F.Dn.4sl..0=h._...J.y._wJn7u..J..>....Q...B..V+...LA=..T....WC.....=U\..,.r.F9P.PG+..E..,.2.R....$Wu..}....M...d3..(....CFga..at..x..i.X..=.A.Q.7..c..A...D...m%...3F....^.`.B2.....I2...M.0.....L..g_S]\|;..m.,.5E..."..N<..B/.ch..>...0v.^.......P...1..$..J).N.B4...\...y...&.B........v.!..\....#.].4B.o...C{!Q.p...A..5.a.w.2.9.,..YU...P.o....Bh.. .Hmc/...f...Ah.1.~#.!..Fh\|....<....X.@v.W.Sh$..6u...DhL6.9."4'..xK<...../....<. L... ..).`1..d.DQn7.1...O...(`;.....j.+..:mIE .q....x....QX. L...B=..p.&....`..0.........Ew.:....E.........mZ#4.#...y...c..y.E.........H..Q.a...J.!....}.b..!M.a....%.;m..P.G?V#...\.c}J]:...X.i}4....8.....3.]....EtDh@..{.p......6s.c..!......x.8.;..L[.2....ziG.~.i7../#.O0...q...=..zw'.d{.....".1..v..EWF...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\co-covid-vaccine-bg-light-purple-772x772-2021-03-04[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=1], baseline, precision 8, 772x772, frames 3
Category:	downloaded
Size (bytes):	71741
Entropy (8bit):	7.96207803306499
Encrypted:	false
SSDEEP:	1536:heH9zLFMbrOSUDMV3oWI5ew6+ofWN8MS1Szw+GVKl:wH8UG3cew6+HwBVK
MD5:	FB5DFB12F7592D96B116A5B8A08DE140
SHA1:	23F4D7E7C1EE992CDD7B620DD7596F4BE0021AAF
SHA-256:	24062561765546D2361E615F15D242EFF88137C89BDC0FF6E71731CCF619DC82
SHA-512:	F738BFE8781D5300CA2A79092C89F00DC1947EEC9DC12185C07DE5CC42F49055AC14CC4192D9F706380A74B96DC149D237F16C0C8E2973A349E1BA806BE97453
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-03/co-covid-vaccine-bg-light-purple-772x772-2021-03-04.jpg
Preview:	......JFIF.............bExif..MM..............................J...........R.(.............................................C.....................................%...#... , #&'))..-0-(0%()(...C...........(...((((((((((((((((((((((((((((((((((((((((((((((((((..........."........................................O.........................!1"AQ..2aq.B....#R...3b...$CrS....%4..c...6s.&5DT.....................................................1A!Q.............?..............................................................................................................................................................................................................................................................................................]D.S.<.2&u....b*.....,r.w.PD..vR).Ji......#...['.O..+b..................................................................................................................\.G.N.g....T....6....U.v.9z.K.\z....3.:...K,.k...R..,?+...m....t.6Y....c.......%.%...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\co-covid-vaccine-page-intro-tall-704x1050-2020-12-24[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 704x1050, frames 3
Category:	downloaded
Size (bytes):	161050
Entropy (8bit):	7.94871675359959
Encrypted:	false
SSDEEP:	3072:bUnhvJHJ2qPGy0Vm0KRFiM16F4M0dg7p1X7faexTjpo+PFMN5FwW:AnhRHINaWM16FXsM1zPxRoOMuW
MD5:	120B3F99A74158F0128A3922B9E7CB08
SHA1:	17DAE2F38E08B0DE5336CADE57EA7B72D916E1D4
SHA-256:	4A1544507FF1E0A23A5D401CA13AD666748F15402D203BDB8E3EE6DAE4B4047D
SHA-512:	EB1C845358DBF652BE5C1AEF47DA578526901F7BCEBBE7337F77D1D31A6313D3C81E8B31759F87B1AC5FD3BA6B2A5FB0A06E76FC095EBB631EA4504945C3E96D
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-vaccine-page-intro-tall-704x1050-2020-12-24.jpg
Preview:	......JFIF.....d.d......Ducky.......d......Adobe.d................................................................................................................................................................................................................................................!.1..AQ.a"q.....2..B...R#..b3..r..S$45..C%...cs.Dd6..7....TtEeu&.8.....................!.1.Aa..Qq...."2......B#3..Rb..r..$..S4%..Ccs.T56............?..2.......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(......P..@(..........8...dd;.g5.@.f........d`W..?..>v..5J.....X..)..P.L.C...B....E^.+.1m..'.n..;'..m...........J.L8..t.l.1q..&...rm.\.\!....!..9s``;.wY...A^....Z.+.....r.L,f\..dG.s...z9....+,.4...u.)...8.+.$l...j.l....p.[r..-......-_.+G...8......Yl....L...~...F.%."...N.v.,..$.8/..q..`. ..Ms2.$..9.$..p.B....^..r..c..M..A.!r..r'..>8.lNpYb?VW......;}V..l..d\..'.....v...-.Y...ij...W...6..(.x..y..?.I\2...U..r..k.....Z..%..c_..4$9.C...D..l

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\component---src-pages-vaccine-locations-index-js-5583fc738e553f2ae798[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	5054
Entropy (8bit):	5.156297314551839
Encrypted:	false
SSDEEP:	48:lD58jX9pEF0uqgMEXRzU3J83fqDsdGV5sSCCsV1Y9q3Vk7EYf2jdy3YFBAmUvicY:wifqDMGjsSz8Gq3Vk7LI7XUv4nUCbqk
MD5:	028F5D96F2E0C40C886912D324FDA960
SHA1:	263AEE0B07DBA65AAE1D7846A5774B5D0E7DB353
SHA-256:	5E87C1827E16B519451E1D82F600EA35B5F6EB616986F4F60EB4960493F83328
SHA-512:	88E2DECEBBBE3E2C2B6E4B36AC74AB3F653A14DCD874B3909D7E3147EB8AC2314C68EEF2B43D0057F9DDB5D9FBD401691358792C6730927F89FEC76D048766E0
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/component---src-pages-vaccine-locations-index-js-5583fc738e553f2ae798.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[7],{"4pj9":function(e,a,t){"use strict";t.r(a);var n=t("q1tI"),l=t.n(n),r=t("gd65");a.default=function(){return l.a.createElement(r.a,{lang:"en"},l.a.createElement(l.a.Fragment,null,l.a.createElement("h2",{className:"ontario-lead-statement ontario-margin-top-32-! ontario-margin-bottom-32-!"},"Find your closest pharmacy to get the AstraZeneca COVID-19 vaccine if you are age 55 or older."),l.a.createElement("p",null,"Starting April 1, 2021, select pharmacies across the province are booking appointments for AstraZeneca COVID-19 vaccines for eligible people ages 55 or older in 2021."),l.a.createElement("p",null,"You must have an appointment to get vaccinated at a participating pharmacy. Contact a participating pharmacy near you to book an appointment."),l.a.createElement("h3",null,"Before you book"),l.a.createElement("p",null,"You must:"),l.a.createElement("ul",null,l.a.createElement("li",null,"be 55 years old or older in 2021"),l.a.crea

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\component.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	53285
Entropy (8bit):	5.169887911708994
Encrypted:	false
SSDEEP:	768:sy+ta8OMxBTedmgGhnAuhxrZJCGGVbmY2O4BfwPZnuj8VddPm0PjXKYhAClg:LqlRoZjddOiXKYhACO
MD5:	31F620E726F456732B9A64BBE2BE7A40
SHA1:	517BE2F6D5C0537E1B1485803A280F232683D709
SHA-256:	5083CBFC6D40E35C5A2D800E0B1B0A0F624AF5E842D23C0985B4225011A26421
SHA-512:	209977E8F2F413322C62F85F0DA680D821D111DB59DFE90EEFB19E40DC12B39B18EB29C04F31ED6DCF7F7CD18EA1BCF780C43249440E20B992D46884CD996785
Malicious:	false
Preview:	"use strict";angular.module("onesite.component.directives",[]).directive("onesiteHeader",["$filter","$timeout","languageService","routeService","redirectService",function(e,n,i,o,a){var l={en:"page/government-ontario",fr:"fr/page/gouvernement-de-lontario"};return{scope:{contentNode:"=",search:"=",update:"="},restrict:"E",replace:!0,transclude:!0,templateUrl:"/core_modules/component/partials/onesiteHeader.html",link:function(r,t){r.pathLogoHeader="/img/logo-ontario@2x.png",r.pathLogoPrint="/img/ontario@2x-print.png",o.regulateRedirect(t),r.altLang=i.alternativeLanguage(r.contentNode.lang),r.update.header=function(e){r.altLang=i.alternativeLanguage(e.lang),angular.isFunction(r.update.taxonomies)&&r.update.taxonomies(e.taxonomies),function(){var t=this;n(function(){t.click();var e=t.find("p.show-for-sr")[0];e&&angular.isFunction(e.focus)&&e.focus()},0,!1)}.call(t)},r.headerlogoAliasCollection=l,r.aliasToPath=a.aliasToPath,r.changeLangOnly=function(e,t,n){return function(e,t,n){var r=this;

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\covidappbanner_240x182px[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	7664
Entropy (8bit):	4.174995504400109
Encrypted:	false
SSDEEP:	96:CxrHMjARBOhBILB/CUHoSxKY6/8VXZYKd6UWzsMIo94VRoMfvODJkH:6OUHokPXZYKcUOpIWsRoMfvOlkH
MD5:	B34EA8366EE6FBA1AAF196A6C002C57B
SHA1:	46352610A66407C8D4A51B9AAE5F9AE42F578170
SHA-256:	C3E2A241BC53BDDE45287BF91DE137F9DA0E768ADFCC22219EF980206EE8F30E
SHA-512:	80611C744F1C608E69FA5DA4CDD78896D0DE523E1AE1590C5E4EF782D7470F916E7392FD8201739D7F8EB69939E94D161A5DE1C7F698E2585175478778116176
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/covidappbanner_240x182px.svg
Preview:	<svg width="195" height="190" viewBox="0 0 195 190" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0)">.<rect x="11.1429" y="39.1176" width="66.8571" height="114.559" fill="white"/>.<path d="M65.834 10.0745H55.0441H41.2831H23.1435C17.514 10.0745 12.3536 12.4357 8.60064 16.2137C4.84763 19.9917 2.65838 25.3438 2.502 31.0107V49.1135L1.251 49.9005C0.938252 50.0579 0.625501 50.5302 0.312751 50.845C0.156375 51.1599 0 51.6321 0 52.1043V56.0397C0 56.512 0.156375 56.9842 0.312751 57.299C0.469126 57.6139 0.781877 57.9287 1.251 58.2435L2.502 59.0306V67.2162L1.251 68.0033C0.938252 68.1607 0.625501 68.6329 0.312751 68.9478C0.156375 69.2626 0 69.7348 0 70.2071V74.1424C0 74.6147 0.156375 75.0869 0.312751 75.4018C0.469126 75.7166 0.781877 76.0314 1.251 76.3463L2.502 77.1333L2.34563 162.137C2.34563 167.962 4.69126 173.157 8.28789 177.092C12.0409 180.87 17.0449 183.231 22.8308 183.231H65.5213C68.9615 183.231 72.4018 182.287 75.2165 180.712C78.0313 179.138 80.5333 176.777 82.4098

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\details.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	troff or preprocessor input, ASCII text
Category:	downloaded
Size (bytes):	127
Entropy (8bit):	4.461489457578185
Encrypted:	false
SSDEEP:	3:UV9iSKVaJMJMvnFlHg1AoA7PC0lJYuN+KVuBgRllHkw/9V00eK:U/YJuH7llJzNzlHkw/3TeK
MD5:	A3D07AF30E7DC57B0647E417E27AC938
SHA1:	2EEB4A7E1DC2E86A6A0664BD6FC2FE7BA3009BAA
SHA-256:	F31746CBB75773ACC9358471805E24D2F80184A9686F2E4DFBF57530C3A583C0
SHA-512:	BF68F4D01D054F05E1B116CEC941C2B77662C8E950BC0961D256A88D55C39A9627BAE4355A3FDED12DCC4B155A8C89A232FFDF60D18EA7FE62114DB78053A073
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/details.module.css?qrgttk
Preview:	/*. @file. * Collapsible details.. . @see collapse.js. */...js details:not([open]) .details-wrapper {. display: none;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\drupalSettingsLoader[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	519
Entropy (8bit):	5.161310412773144
Encrypted:	false
SSDEEP:	6:Uwq4VCi+5cGMKN0fGLB0PQwPoj/LR7nadOXCuhtdz2mySYuhtdz2myGy5mpq3Wja:UkaFN0fw0PKjNWdAbZbomvNXmirN5fgn
MD5:	49DBE4BAC61E9CA48A5951BCBE0D03E9
SHA1:	020EFEBBF1F6E97D39DDCDDC5262F34C1DB7807F
SHA-256:	5F8F69EC521F7998AF455985A8EDE6D8DCF3527B43795FE3D26F1F1B57A5A554
SHA-512:	C184CC753599864802BC90582698CF0D66E2E782D34ACD2E1EE26CA3F03BBA8C9D4FB2DB40E9B13FE0568DD9ABFE147EDC8A86FDD1B8EB5483AFA867C039C375
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/misc/drupalSettingsLoader.js?v=8.9.13
Preview:	/*. DO NOT EDIT THIS FILE..* See the following change record for more information,.* https://www.drupal.org/node/2815083.* @preserve.**/..(function () {. var settingsElement = document.querySelector('head > script[type="application/json"][data-drupal-selector="drupal-settings-json"], body > script[type="application/json"][data-drupal-selector="drupal-settings-json"]');.. window.drupalSettings = {};.. if (settingsElement !== null) {. window.drupalSettings = JSON.parse(settingsElement.textContent);. }.})();

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\effect-min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	16816
Entropy (8bit):	5.357184455434572
Encrypted:	false
SSDEEP:	192:5vTeXBVAInxCBhjX2sjhlStCsbiXcWzNvwu2LqQ6uZWs74:5vKXBVAWxC3jmQCCsbQ5IdGs74
MD5:	86F1E6B37CFAF2786F58619B88778717
SHA1:	96975EB34AA586AD9FA48C6F994A4AD2D87A0C60
SHA-256:	252B076ABB37EC8CEE93AA75EE776C45E01515D8361A9BAE2341EDFE02D875F7
SHA-512:	756F0D67A468BA5DAF96420DCFE493383A26833A392336180C1D2194190E995C409AD778A87429E0C84C41F77968852A4C0B0A239B473EF77A9BDEF03BDB1891
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/assets/vendor/jquery.ui/ui/effect-min.js?v=1.12.1
Preview:	/! jQuery UI - v1.12.1 - 2017-03-31. http://jqueryui.com.* Copyright jQuery Foundation and other contributors; Licensed /.!function(a){"function"==typeof define&&define.amd?define(["jquery","./version"],a):a(jQuery)}(function(a){var b="ui-effects-",c="ui-effects-style",d="ui-effects-animated",e=a;return a.effects={effect:{}},function(a,b){function c(a,b,c){var d=l[b.type]\|\|{};return null==a?c\|\|!b.def?null:b.def:(a=d.floor?~~a:parseFloat(a),isNaN(a)?b.def:d.mod?(a+d.mod)%d.mod:0>a?0:d.max<a?d.max:a)}function d(b){var c=j(),d=c._rgba=[];return b=b.toLowerCase(),o(i,function(a,e){var f,g=e.re.exec(b),h=g&&e.parse(g),i=e.space\|\|"rgba";if(h)return f=c[i](h),c[k[i].cache]=f[k[i].cache],d=c._rgba=f._rgba,!1}),d.length?("0,0,0,0"===d.join()&&a.extend(d,f.transparent),c):f[b]}function e(a,b,c){return c=(c+1)%1,6c<1?a+(b-a)c6:2c<1?b:3c<2?a+(b-a)(2/3-c)6:a}var f,g="backgroundColor borderBottomColor borderLeftColor borderRightColor borderTopColor color columnRuleColor outlineColor textD

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\favicon-32x32[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1336
Entropy (8bit):	7.776296896714416
Encrypted:	false
SSDEEP:	24:2ELyu9N214knvN7rkS5PA3uEJHg1zTX6M4iQ7VfEVWnGrgbmVs/1:2Ee/ik17bZA3uEJA1zTXH4xEVWnMgya1
MD5:	BB3DEBD3FE12736EE94C99D20D42FFD3
SHA1:	C2C87994245FDAE0B3093B80614B202F90099D27
SHA-256:	EE877BF7E33D22CD354278EDBA7FB9DADCAAB3FABEA37CD8E3AFCA2FD824503D
SHA-512:	02AE48449B746503D22940E24F2796E44E14D52870B82C36DC3F7F902EBBA3D012DF9605BFB7083ABE1212452DEB82D89FFAF9220057A8BEDC2662ABC19D37DA
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/favicon-32x32.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~.....IDATX.W[(.Y..{....f\2n..7..(3[<.... .h<)e.<y..@.x@).9..a.t..(N....1..Y.j}.......\|....}.o}.f3&..;....g.1.m.G...d..a......k.3M..........Vb&.-`4.7.{..t..%.D...r.3..Ka.V.U........wK...K..ma....B.$7...aW....l.Y.O.BoU!<..;...n.....p...7b(...gH..{..j.P....%.=<<4.b..5..$.....).~~~...............t:!66Vc.#00....................BP<..".........r.....'P...........3......v....#......EHKK.1aH..I.,.s6.........`kk....auu....uB...........666`nn.....z...2r.....>(@..{....*....kHf......\.....{....cn.$.[...........S,Pl.C...1..&......oFw........M....................4'.....&j....f}}}\|........1:.........v.!++....../.,.#....p1H....l.b.A7-JHH...s~...8xzz..8..............&f...iff.....I..[.q.....i.........-88."##u....4.GGG....j/...7.....z.....{rr..Abb"...r. ...IM`....T.B&..fZ.H.,(.9........4....)....b......!!...`}}.3hmm.......,PH....+..1pj..........Cjii..c@bL .........N.R..SWLLLp&...:.0...S..0.....?I.X.BWW.V.e&.l......

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\hidden.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1359
Entropy (8bit):	4.625282671725046
Encrypted:	false
SSDEEP:	24:swlJfLWtQ6fATZXTSVEdOWcv3A5NxVKqMmd4lMO+GWNA3sEdy66gmNen:swlJfKt1fA1XWud6v3INxVWmClnHjdmI
MD5:	A40F4B74BED5FC5D74DF3DA6FDCAEE26
SHA1:	2B8F20E668877C8BB4203CE1506753570523734C
SHA-256:	144C2B996574A2F16003848858DE86DC5AD3486FB4FE14A5D5A79D134086E763
SHA-512:	9AA15667D962B0F618DE9C3B080059B49749C0440DAF47E6E1A267F2EE4CE8C3990BF6EF2820E55A29B7419C6625C84DE99439FDAFF1798BB88B30C04C98A18B
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/hidden.module.css?qrgttk
Preview:	/*. @file. * Utility classes to hide elements in different ways.. /../. Hide elements from all users.. . Used for elements which should not be immediately displayed to any user. An. * example would be collapsible details that will be expanded with a click. * from a user. The effect of this class can be toggled with the jQuery show(). * and hide() functions.. /..hidden {. display: none;.}../. Hide elements visually, but keep them available for screen readers.. . Used for information required for screen reader users to understand and use. * the site where visual display is undesirable. Information provided in this. * manner should be kept concise, to avoid unnecessary burden on the user.. * "!important" is used to prevent unintentional overrides.. /..visually-hidden {. position: absolute !important;. overflow: hidden;. clip: rect(1px, 1px, 1px, 1px);. width: 1px;. height: 1px;. word-wrap: normal;.}../. The .focusable class extends the .visually-hidden class

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\icon-alert-warning-white[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	205
Entropy (8bit):	4.780609430792005
Encrypted:	false
SSDEEP:	6:tI9mc4slzXdhyKjUhOqNsN6JASqrNPXA38:t4BdEKjUvGVLrBwM
MD5:	15B5EB20A77A2A1C3CA4CF355CFD49E9
SHA1:	D5F5C8F78E0450E145B7634A1AF79B51C406788E
SHA-256:	F9C8F16E9D72FDBF6555471BCB15D747C4802491D18938726E7B571CD9DDBD27
SHA-512:	916DE3E70C182BFFEF206547A22C140E10EBD3A76D4BBF7CF6ED36BF72569BD78A22EC8DEA00ADBD2CA282666C1A418F6D0A366BDBA043AB76F4BD7CD1A63663
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/assets/icon-alert-warning-white.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none"><path d="M1 21h22L12 2 1 21zm12-3h-2v-2h2v2zm0-4h-2v-4h2v4z" fill="#fff"/><path d="M11 10h2v4h-2zm0 6h2v2h-2z" fill="#000"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\ideas-to-combat-corona-virus[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	5107
Entropy (8bit):	4.8990878582239095
Encrypted:	false
SSDEEP:	96:bZ692TdGO6Tg6YtTWMDcKYSB7ejHNIMFoc+bQVM:bZuTTg6+yMDcKYBN9oc+k6
MD5:	3C1B5D98BF0309FC7F929CCF1EF87F66
SHA1:	E8D338AC254F7AF80EA79F84F6E7F30B4EE9B840
SHA-256:	15E131C58CEE40EAE3D7F1D2BD13E41C9E27F0A55ABCCC19036CCCFB4458948A
SHA-512:	EA325BA276A74F50B8C4530D50000C016DB7BEB1A892F4B76964238C15CFE9CDEE7C9C806B65CAA3FE39FEE939AA3110FB16008C0B7095F210EBE583FD43F8DE
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-03/ideas-to-combat-corona-virus.svg
Preview:	<svg width="359" height="136" viewBox="0 0 359 136" fill="none" xmlns="http://www.w3.org/2000/svg">.<g clip-path="url(#clip0)">.<path d="M27.3462 72.3929C27.3462 72.3929 -15.7078 72.3117 10.4176 60.6291C20.8352 56.0047 40.6937 52.5161 60.7964 49.9199" stroke="black" stroke-width="5" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M101.734 72.3929C101.734 72.3929 144.788 72.3117 118.663 60.6291C108.245 56.0047 88.3867 52.5161 68.2841 49.9199" stroke="black" stroke-width="5" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M101.734 92.0261C101.734 92.0261 144.788 92.1073 118.663 103.79C108.245 108.414 88.3867 111.903 68.2841 114.499" stroke="black" stroke-width="5" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M27.3462 92.0261C27.3462 92.0261 -15.7078 92.1073 10.4176 103.79C20.8352 108.414 40.6937 111.903 60.7964 114.499" stroke="black" stroke-width="5" stroke-miterlimit="10" stroke-lineca

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\item-list.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	285
Entropy (8bit):	4.505137324364592
Encrypted:	false
SSDEEP:	6:UuAVtvA7MmDGjudGj0XQKLt0Gj1IiGHt0GjjVwJ6Ivt0GjHCwJ6EAv:UumvyME/X1iiG9wY9wYPv
MD5:	8C9B6BEC7C9EBFB5351D874B356A38D1
SHA1:	87B4A1A6DB3220CF73F29F80DA1896605B396D74
SHA-256:	5251EC9A6D7F9CC54B205363D70EB38BF67517F8E02B3AE04E85C9CF5F908228
SHA-512:	4896DB2F629D7A2451B0A4A4BF722CA615BCC90F25D18FFF0B26486B51D0C26932294C756AAA6472B40FBA45C069F56CA998DB094CE6582419FDDA83098DD5E0
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/item-list.module.css?qrgttk
Preview:	/*. @file. * Styles for item list.. */...item-list__comma-list,..item-list__comma-list li {. display: inline;.}..item-list__comma-list {. margin: 0;. padding: 0;.}..item-list__comma-list li:after {. content: ", ";.}..item-list__comma-list li:last-child:after {. content: "";.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\js.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	troff or preprocessor input, ASCII text
Category:	downloaded
Size (bytes):	402
Entropy (8bit):	4.560472448460017
Encrypted:	false
SSDEEP:	6:UqEIpVUIkj0EJt/c68eONnP6pjedLeMWuwRsvu1fev/Tez90EJtlQF6D1eONKDdp:UgLkr/vgOeE1RsVv/TuWKWXTEXjfK
MD5:	AC3A25C1A721FF659377D3B401A42F7D
SHA1:	0E8A6AFF9EECED7B68EEEE301A1594294E24F337
SHA-256:	132298C08776FAEA963092E83B7C30712BDE095C62530BD3A613322987C4663E
SHA-512:	0159995C7AA47E0DEBB1AA1C29BCC9F0EFED0277C0BDC67ACF501E07510A9C98D0EDF2EBEE7A5C1F136F136529F396EC23030A577451BA19945337309EBECE7A
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/js.module.css?qrgttk
Preview:	/*. @file. * Utility classes to assist with Javascript functionality.. /../. For anything you want to hide on page load when JS is enabled, so. * that you can use the JS to control visibility and avoid flicker.. /..js .js-hide {. display: none;.}../. For anything you want to show on page load only when JS is enabled.. */..js-show {. display: none;.}..js .js-show {. display: block;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\mobile-chevron-right[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	191
Entropy (8bit):	5.03255814455634
Encrypted:	false
SSDEEP:	3:tRBRNqAR+4FcvW/D7SLvDmJS4RKb58ZSFuHEX7UL30eXFPQ8XX5CKOAwRAHFWFAy:tnrqlW/Dumc4slvIY7y0w3XX5lkAHw6y
MD5:	DB64144AF6DBB1EAF2ABE0E6272B2EFE
SHA1:	A0B6A72117F230E0515F97FD49DE956395F0179E
SHA-256:	6671A41C7316A80D630EF62A72BFD0D67EFD252F2D71D57412A016D7520758A6
SHA-512:	F0550C5AAE74BE35B075DB37C0196211976F3AF3B3176A012569801DA12039477213AD78E3D9C8C8FFA5E83558E9C6DF984BDC680F059B8EFFDC4BD31FD99079
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/images/mobile-chevron-right.svg
Preview:	<svg width="35" height="36" viewBox="0 0 35 36" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M16 33.3359L31.4485 17.6725L15.7851 2.22398" stroke="white" stroke-width="5"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\nowrap.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	96
Entropy (8bit):	4.428008466328818
Encrypted:	false
SSDEEP:	3:UV90vEW5jRP8mqy7LJMm/DPxJUH:UqE4znZ/rTi
MD5:	02DE344715C6EC9A3745FF2186D32B9D
SHA1:	F2F39B2CA9E9397B53AB76A7B3938EDC138A24CF
SHA-256:	4A4FA2A793D87C88F1509F370DBC40B6DEEC2188B6A918F92365F873B7BC566D
SHA-512:	F4146E324FCB514AD4658FF912B8DB937B61F5C4F438BBB9F136709CFD17EECCD2B91FE7B8BFDA3F6D0CA44DCC3E65C6931EE8FC464A2316919146AE1A3C19D8
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/nowrap.module.css?qrgttk
Preview:	/*. @file. * Utility class to prevent text wrapping.. */...nowrap {. white-space: nowrap;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesite-angular-foundation.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	12118
Entropy (8bit):	5.139938442037991
Encrypted:	false
SSDEEP:	192:3NS2OSk1uTnbLykBo1kBo4OAdqzPKThxbMgfkBhcqj+/ggF:3kTSk8H2rNBAOPKTfMgsgggF
MD5:	A428F97770D2F8A1B1A002108F94EF4A
SHA1:	A2A5474D67225963FF8461867EC939FD5BF6949F
SHA-256:	BF9AC2D327C40986A4837C865C29A8F08B37107A94B1F1C4DB4489FF2CB6480B
SHA-512:	A59DD0018A893AC8B7CC27259B0599E493AE605ABFC68E76A509F5A0D1B314E0BA150F66F83BCADE6B29382FD36682F4D70F5CB5AB4E15B70A26821FADAA168C
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-angular-foundation/onesite-angular-foundation.min.js
Preview:	"use strict";angular.module("onesite.angular.foundation",["onesite.angular.foundation.directives","onesite.angular.foundation.controllers","onesite.angular.foundation.services","onesite.angular.foundation.filters"]);."use strict";angular.module("onesite.angular.foundation.directives",[]).directive("onesiteAccordion",[function(){return{scope:!1,restrict:"A",replace:!0,transclude:!0,template:'<ul ng-transclude class="accordion"></ul>',controller:["$scope","$attrs",function(e,n){this.broadcast=function(){e.$broadcast("true"===n.oneOpen?"oneOpen":"multiOpen")}}]}}]).directive("onesiteAccordionGroup",["$compile","onesiteFoundationService","analyticsEventService","analyticsTypeaheadService",function(e,u,d,f){var a;return{scope:{heading:"@",isOpen:"@",toggleOpen:"@",templateUrl:"=",analytics:"=",data1:"@",data2:"@"},restrict:"A",replace:!0,require:"^onesiteAccordion",transclude:!0,templateUrl:(a=/^'(.*)'$/,function(e,n){var t=angular.isString(n.templateUrl)&&""!==n.templateUrl.trim()?n.templa

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesite-body.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3607
Entropy (8bit):	5.057955488770076
Encrypted:	false
SSDEEP:	48:TlJsFGIr0kZVPH4rRVF7GflXv+aEGU7/Jw1NbnW3AMCdvghtd2V9tOAYj2:Tlm3BGRG13U+jMAMCdohtd20vj2
MD5:	9BAC30FFB14C5F96B77117810CCB530A
SHA1:	E3599BF9EB70BAEB73BA0001395B5206CBCBC32D
SHA-256:	40AA79EDB0A65748F49A0089EA387BA2DD987E205BB9B230956A0BDF4EF2B9B1
SHA-512:	6BBCC8BE97091C7A8508C751E8E45B49319BF09AB978E4DDB2FB5732947909B3A025C759B5205F26E5DCC3004CD7C020C3205E02DB1EEF6CA0994857FBD306FB
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-body/onesite-body.min.js
Preview:	"use strict";angular.module("onesite.body",["onesite.body.services","onesite.body.directives"]);."use strict";angular.module("onesite.body.services",[]).factory("bodyService",["componentApiService","dataBindingService","apiEndpointConfig","redirectService","lazyloaderFactory","lazyloadFiles","callbackService","apiKeys","$q","$location",function(l,s,e,a,t,n,r,i,o,u){var c={};r.setupGoogleMapApiCallback();var d={onesiteGooglemap:{regexp:/<onesite-google-map (.=.?)>/,handler:function(){var e=o.defer();return function(){var e=o.defer();if(window.loadGoogleMapApi(!1))e.resolve();else{var a=document.createElement("script");a.type="text/javascript",a.src="https://maps.googleapis.com/maps/api/js?v=3&key="+i.googleMaps+"&libraries=places&callback=loadGoogleMapApi&region=CA",$("head").append(a),window.loadGoogleMapApi(e,"/vendor/google-markerwithlabel/src/markerwithlabel.js")}return e.promise}().then(function(){(function(){var e="onesite.google.map";return t.load(t.instantiate("module",e),{nam

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesite-contact-us.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	4213
Entropy (8bit):	5.0419075599097765
Encrypted:	false
SSDEEP:	96:KTfORuzFDubr04doJaveTCzll8Tt90Sh1:KjQyJD0M37
MD5:	2E45C11110BE0B34805211925E828627
SHA1:	473DDAE6DFEA23DB1B1866EAF15F29432BE38F9B
SHA-256:	9EEE3D778CD03BAD9DEA05343FD1DB44AE38D1802EB1D72B5F6B5F57F8E45C3D
SHA-512:	B097225C21F436CADD4C709FFE151A2F92F57D46AB784E3436D3A8F28D783EED0ADD60A5A3589805D777407284199D0033DF687A29EA3362DF6F166EA6166CE0
Malicious:	false
Preview:	"use strict";angular.module("onesite.contact.us.services",[]).factory("contactUsService",["remoteStorageService","sessionService","dataBindingService","apiEndpointConfig","componentApiService","redirectService","$q","$parse",function(a,e,t,c,s,d,u,l){var r={};return r.getContactNode=function(r,n,e){var i="/"+c["onesite.app"].apiService,o=c["onesite.app"].apiServiceCrossDomain,a=u.defer();return function(e,t){var r="/"+c["onesite.app"].apiService,n=c["onesite.app"].apiServiceCrossDomain,i=u.defer();return s.getEntity({url:d.respectProtocol(t.useRelativeUrl?r:n+r)+"/url/"+e,method:"GET",withCredentials:t.withCredentials}).then(function(e){var t=angular.isArray(e)?l("und[0].id")({und:e}):e.id;t?i.resolve(t):i.reject()},function(){i.reject()}),i.promise}(e,n).then(function(t){if(angular.isString(t)&&""!==t.trim()){var e=encodeURIComponent(t);s.getEntity({url:d.respectProtocol(n.useRelativeUrl?i:o+i)+"/"+e+"?fields="+r,method:"GET",withCredentials:n.withCredentials}).then(function(e){a.reso

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesite-moment.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	18921
Entropy (8bit):	5.1828626911292055
Encrypted:	false
SSDEEP:	384:Ak1AdDaYLsp6fL8Ra1p5OZBmf54OMpUgv8SfcBY2Q/VsOgEpK:OuZRcpHR4O+v8Sfcc/2TEpK
MD5:	F4C2C7DCE7F310308F3202F7672E0FBC
SHA1:	3B9A391C9B34E13A9323895F27E30C6C58D803C4
SHA-256:	F9D8A28DA9F0AF8B8BADA0B6CF7A09141E58302062FDA2FD047B2280B10567F5
SHA-512:	44BB499A1905FC467DBDD678598631C71E8E1B00A8680150BEBBDC6CDC85EEB1D932B75D9C0E9764353DF2AFE9918FBB850AEA60BA7675CFBCBAB45ACE0A1147
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-moment/onesite-moment.min.js
Preview:	"use strict";angular.module("onesite.moment",["onesite.moment.services","onesite.moment.controllers","onesite.moment.factories","onesite.moment.directives"]);."use strict";angular.module("onesite.moment.controllers",[]).controller("OnesiteDateAddImpl",["stringService","timeService",function(i,u){var o=this;o.add=function(n,t,r,e){var a=i.strToDate(n);angular.isNumber(t)&&(a=u.addYear.call(a,t)),angular.isNumber(r)&&(a=u.addMonth.call(a,r)),angular.isNumber(e)&&(a=u.addDay.call(a,e)),o.date=a}}]).controller("OnesiteDateSelectorImpl",["stringService","timeService",function(i,n){function c(n){return angular.isNumber(n)&&!isNaN(n)}var h=this;h.stringToInteger=function(n){var t=(n=angular.isString(n)?n.trim():null)&&""!==n?parseInt(n):null;return c(t)?t:null},h.daysInMonth=n.daysInMonth,h.monthCollection=i.monthCollection,h.dateExists=function(n,t,r){return r<=h.daysInMonth(n,t)},h.updateModel=function(){var n=h.validateYear(h.year),t=h.validateMonth(h.month),r=h.validateDay(h.day),e=angula

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesite-search.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	46362
Entropy (8bit):	5.079097575525367
Encrypted:	false
SSDEEP:	768:8aWN6+8H8Jaav94am51J829kaRbY85YEOHI5Y1Or4GbOnsQ+zcHmzn46SOtVO9Uo:rWNi39kah5n15y6bPQbp6TO9Us0qoFD6
MD5:	9565D9F801992F78AF690B0818F049CD
SHA1:	95DD71F0064D3D10F9D06B19FAF312DB5AD477BD
SHA-256:	5037C5517FB4B285AA35D13EF405625BDDC6D0DA4FC0DA8D1D027BB735973086
SHA-512:	BABEF137038286D66F6A546A3184594F3F2F347CC43938FD139DDE2435EC6F92904F0B7E986CF2025F880193839777E1337B81913E746E110265D5A03CB8C16D
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/onesite-search.min.js
Preview:	"use strict";angular.module("onesite.search",["onesite.search.services","onesite.search.factories","onesite.search.directives","onesite.search.controllers","mm.foundation"]);."use strict";angular.module("onesite.search.factories",[]).directive("onesiteSearch",[function(){return{restrict:"E",scope:{type:"@",lang:"@",title:"@",search:"=",internalTagList:"=",nodeId:"@",resultStatus:"="},replace:!1,template:['<onesite-search-impl ng-switch="type">','<div ng-switch-when="search-result">','<onesite-search-main ng-switch="subType">','<onesite-search-main-tag ng-switch-when="tag"></onesite-search-main-tag>','<onesite-search-main-external-tag ng-switch-when="externalTag"></onesite-search-main-external-tag>',"<onesite-search-main-default ng-switch-default></onesite-search-main-default>","</onesite-search-main>","</div>",'<onesite-search-gazette ng-switch-when="ontario-gazette"></onesite-search-gazette>','<onesite-search-land-registration ng-switch-when="land_registration_all">',"</onesite-search

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesiteBreadcrumb[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	375
Entropy (8bit):	4.393870368051338
Encrypted:	false
SSDEEP:	6:G4dRWV63KlRjHUF21Q6AoWSEVjeFvvB1vivkL+nXNvvgY+je/EKAM4qv:G4/WV6KlRjHc3oWRVjanB1qrXNnd+a/H
MD5:	89C524074C61840A965E575AE45D8B0E
SHA1:	5DE067E7A4E8FDE9C4A08CFB16D533111EAF6B5D
SHA-256:	AA2A2EFEF33D1B542AA54E40B7A5404FD65432374F85115DBD9C05F06ADD2986
SHA-512:	EBD12E60F0444888A828F89F0069D4D1EC07CC34AB6881C671D8F80923B0AF35282FD0BB53F26A11638C7671C2D03780294DE3D13F98B6EF1665DB9D50D27CB3
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteBreadcrumb.html
Preview:	<ul class="breadcrumbs breadcrumbs-ul-no-padding" aria-label="breadcrumbs">. <li ng-repeat="crumb in breadcrumb" class="breadcrumbs-font-size">. <a href="{{ crumb.path }}". analytics-on. analytics-category="Header". analytics-event="breadcrumbs". analytics-label="{{ crumb.name }}">. {{ crumb.name }}. </a>. </li>.</ul>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesiteFootnotes[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	876
Entropy (8bit):	4.478318989033825
Encrypted:	false
SSDEEP:	12:mHHIqC3jlclqvQfawoTbaWju6RPvhXmIzDuqUwwBNr33d+LPqs6HiG7kQh0fYMR:mIJ3jl/wITZRPvNm0yLr33kT+HE45MR
MD5:	6217180C101F83B59264D9D7E28892CC
SHA1:	99A180CA8096917C551F4CE9EA3091DFABBF6A1D
SHA-256:	186BAB01224AF5776B1BAC4175F67B99CA966E9D3EF15090C1A69BD6B6AF7C7C
SHA-512:	5073BCC98B42195766A862BC890D8B9BFBDAB562A781D7F6BAF185106F2882143779758D339C1C4842674D40FFD18962EB462766FF05838E96A596B59F1E9F52
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteFootnotes.html
Preview:	<div class="row" ng-show="footnoteList[0]">. <div class="small-12 medium-12 large-12 columns">. <hr/>. <h2 class="h3">{{ 'Footnotes' \| translate }}</h2>. <ul class="footnotes">. <li ng-repeat="footnote in footnoteList". id="foot-{{ footnote.id }}">. <span class="show-for-sr">{{ 'footnote' \| translate }}</span>. [{{ footnote.id }}]. <a href="#ref-{{ footnote.id }}". id="return-{{ footnote.id }}". rev="footnote". analytics-on. analytics-event="return". analytics-label="{{footnote.id}}\|\|{{footnote.title}}". analytics-category="footnotes">. <span class="show-for-sr">{{ 'Back to paragraph' \| translate }}</span>. <span aria-hidden="true">^</span>. </a>. <span ng-bind-html="footnote.tags"></span>. </li>. </ul>. </div>.</div>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesiteSearch[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	990
Entropy (8bit):	4.630884483312336
Encrypted:	false
SSDEEP:	24:Qyk2vEeAs78s7416W2iF5EMiyLX4C69YKFdyUM6F:ZEeAsF744xCuZOIWevh
MD5:	DDDBAE6448E24EC4A536374EEFF3185C
SHA1:	64667B5FD631CF48F2412A09642285566391717E
SHA-256:	2569F28379560234D7DF645CBE8936F997B3E9E6D77ED467BA17CC833614C876
SHA-512:	6444592396371981296969799EFC0E0F8C836B1DEAA497E531D6D0BADF368E79103CC03550B7ACBEFE71D14134B19DEE92B2DECED9DDA67F54803610D9BB9F10
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/landRegistration/onesiteSearch.html
Preview:	<form name="landRegistrationForm". ng-submit=". onesiteSearchImpl.enableScreenReaderTotal = false;. init(true).then(focusOnSearchButton).then(enableScreenReaderTotal);. current.keyword = onesiteSearchImpl.filterHandler.query.keyword.model.input;. selected.result = [];. ". ng-init=". last={};. selected = {. result: []. };. current = {. keyword: null. };. ". scroll-to-detail="true">.. <link rel="stylesheet" href="/css/hideHeaderSearch.css">.. Search Input -->. <div class="row">. <div class="small-12 medium-8 medium-push-4 end columns". ng-include="'/onesite_modules/onesite-search/partials/landRegistration/searchInput.html'">. </div>. </div>.. Filters, results, related links -->. <div class="row main-content". ng-include="'/onesite_modules/onesite-search/partials/landRegistration/filters/control.html'">. </div>..</form>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesiteSearch[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	615
Entropy (8bit):	4.49011483029449
Encrypted:	false
SSDEEP:	12:5EDNpc37vpC/uHIqC1iF9rc9HvTSuHIqCkFhs+clwgB:e0+J1iF2xT0JkFhf2wS
MD5:	EAAFFC219089C0001EABBD74D2D81CFC
SHA1:	3639184610DB0A35ABE088C0526FF69B3A108913
SHA-256:	8E10F5009F4C90622399F62425FD80F368FD182B60038CE8248C3EC7F33BF338
SHA-512:	92D1D7A6D147C5DD41CB3185E9117E6B92ABC9D74211EE830B64A870C8A473E09B031BC707290336E62775F0868C60A927BCCB605AD852D1752D1555E9C815FD
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/orderInCouncil/onesiteSearch.html
Preview:	<div class="row". ng-init=". last = {};. selected = {. result: []. };. current = {. keyword: null. };. ". scroll-to-detail="true">.. Search Filter -->. <div class="small-12 medium-12 large-4 columns". ng-include="'/onesite_modules/onesite-search/partials/orderInCouncil/control.html'">. </div>.. Result List View -->. <div class="small-12 medium-12 large-8 columns". ng-hide="selected.result[0]". ng-include="'/onesite_modules/onesite-search/partials/orderInCouncil/results.html'">. </div>..</div>

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesiteSearch[3].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1737
Entropy (8bit):	4.7896091906288865
Encrypted:	false
SSDEEP:	48:DvuYV79bsFypmy1dsSAIF25OqxTDr6flpCX6dLH64:DrNswpmy1dJuOOTDr6flpD3
MD5:	6D56B4B349496CFF5EAE548C9F2CBD04
SHA1:	8380311034E856AEDC0E7357D450F5076F841152
SHA-256:	85AFC2E3CAA73BF31D45B4F7E3ADBF2DDDB09B61EB022E6D564148F5E208CD74
SHA-512:	D6A5E6705D62EE7FFB8594301F5086ECAB3EB4833FCEE1E1C0F8FDECEF34639870F07DD81FA14E997FC3FACA4B6611DAFF9A4DDAD7A558918C7DD056F9541864
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/faqs/onesiteSearch.html
Preview:	<div ng-switch="onesiteSearchImpl.lang". ng-show="onesiteSearchImpl.total > 0">. <hr/>. <h2>. {{ 'Frequently asked questions' \| translate }}. </h2>.. <div onesite-accordion. class="faq h4". ng-init="last={}">.. TODO: accessibility -->. <div ng-repeat="paginate in onesiteSearchImpl.pagination \| limitTo: onesiteSearchImpl.pageIdx + 1". ng-init="$last ? (last.paginate = paginate) && (last.remaining = onesiteSearchImpl.total - paginate.idx * onesiteSearchImpl.config.pageSize) : null". aria-hidden="{{ !$last }}">. <div onesite-accordion-group. heading="{{ ::faq.title \| html }}". is-open="false". toggle-open="true". analytics="{category: 'faq', event: null, label: faq.title}". ng-repeat="faq in (onesiteSearchImpl.resultList \| slice:paginate.fromIdx: paginate.toIdx)">. <compile-html html="::faq.content". category="faq">. </compile-html>. </div>. <

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesiteTaxonomies[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	583
Entropy (8bit):	4.565084925266924
Encrypted:	false
SSDEEP:	12:xZ94poJ2q+W/jftNEG0MAyguNhA5LlBN4trTo+QfNPd+Gun/CTfQo:xdJ2PWLftJthwL4trUtflkZI
MD5:	65CC91DF803A37DAD0C9E92C3E1AE3F2
SHA1:	180937AA316F515034DD3F579B8075CE2D5C5135
SHA-256:	CA370086F2C8F70B93FA5C36D0C928374E40C7A3E34F6E99D007F71ECCDC567C
SHA-512:	1B2474D84B29C01E514C05B72B84D838361316F4A8B5B6D7BF2148563D6345E65FED576F26BA15E47EB28DF84DA924180A504008960B994261B3028D98CE773A
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteTaxonomies.html
Preview:	<div>. <h2 class="h4" id="menu-jump" ng-show="vocabularyList[0]">. {{ 'Topics' \| translate }}. </h2>. <nav role="navigation" aria-label="{{ 'Primary navigation' \| translate }}">. <ul class="no-bullet">. <li ng-repeat="vocabulary in vocabularyList">. <a href="{{ ::vocabulary.url }}" target="_self". analytics-on. analytics-category="Footer". analytics-event="{{ ::ministry \| analyticsEvent }}". analytics-label="{{ ::vocabulary.name }}">. {{ ::vocabulary.name }}. </a>. </li>. </ul>. </nav>.</div>

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\onesite[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 48360, version 1.0
Category:	downloaded
Size (bytes):	48360
Entropy (8bit):	6.38943268154998
Encrypted:	false
SSDEEP:	768:z0Zqlr9O272i5zdZVWIE1aFvtZYUKXylaqR2akcPYec87o5kVYTDF3VGVpvpeIBP:z0Zqlr9/dzHVWIvtWUKXQR2akcPYeZ71
MD5:	C3A096A96DCD188F89A38E4156BC099C
SHA1:	4369F0CC5C86B33799DB72254FD842601E8295EC
SHA-256:	B050C96C1880A23F6FDC8CC513CDD646029872488A0A0A612CADBD2EF549DAD7
SHA-512:	7E89D167AF1F28115BB9D6149B74F2CA243553C2AA5A33B0A3893A69DC18023E3F150548081C596CA6F6AD0513A4D68E79650E7B92787E16CFCA78B7E5B2B32A
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/onesite.woff?2lmqj5
Preview:	wOFF........................................OS/2.......`...`....cmap...h...T...T.V.Mgasp................glyf.......<...<..\.head.......6...6"..1hhea...8...$...$....hmtx...\...,...,.\..loca................maxp... ... ... ....name...@.........P..post....... ... ...............................3...................................@.........@...@............... .................................8............. ........... ................................................79..................79..................79.........@............%...#"........3!26764'%#535#.3...J.......J......l......R.............."......". .@.......%...I.w.5.?.P.\|....747635476?.676;.54763!2.......+....#"'&5#...#"'&5#"'&5.35#..........327654'&#".......;.....;.276=.3276=.4'&+.54'&+."....#".......327654'&#"..%......q....\...........n++<=++.++<=++I...m.[..p..I.............%.......m..............m.............................q...........n...<++++<<++++<........o.................................n.................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\ontario-a11y[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2276
Entropy (8bit):	4.842280177369027
Encrypted:	false
SSDEEP:	48:Z5Ur6H64sY4Y59QTGb2IMfY6rx7fU83JOdMCKQwjJD:Z51zQ6MfY+Q83J0nKR5
MD5:	587E5E0F1229A2F93D642B87E7F71AF5
SHA1:	F1DB88F7ABA4F1ED5BB5EC67C147A14B9EE994E2
SHA-256:	79CA829DA1BA9E0623352EA06C78BA00E7EF528F312A80BEB2B4281F1FFC17DE
SHA-512:	E432322BC8DC806E5F6E13D3CBB674B5E274E37EBBD9F9B15D285AE5899B61EEC9829515DA944B0E23527D0EA22CA4D709D9032F7AA9F1D150808E4C8158B5A0
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/js/ontario-a11y.js?v=8.9.13
Preview:	/*. A11Y handling. */.var KEYCODE = {. TAB: 9,. ENTER: 13,. ESCAPE: 27.};..function addA11y(element) {. element.setAttribute("aria-hidden", true);.}..function removeA11y(element) {. element.removeAttribute("aria-hidden");.}..function addA11yVisiblity(element) {. element.style.visibility = "visible";. element.setAttribute("aria-hidden", false);. element.setAttribute("tabindex", -1);.}..function removeA11yVisiblity(element) {. element.style.visibility = "hidden";. element.setAttribute("aria-hidden", true);. element.removeAttribute("tabindex");.}..// keyboard utility to Trap focus.function focusUser(config) {.. if (!config) {. throw new Error("Unable to initialize focus-trapping - missing config");. }. var element = config.element,. escapeCallback = config.callbackOnEscape;.. if (escapeCallback && !(escapeCallback instanceof Function)) {. throw new Error("Unable to initialize focus-trapping - callback is not a function");. }.. var focusableElements = el

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\ontario-icon-alert-warning[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1033
Entropy (8bit):	7.530310454588132
Encrypted:	false
SSDEEP:	24:sbFhgwnhbRnrAiH7Kf5k8K3pNIlMqAnfVG5gCrKNp:14h9rAiHefk3pShA9G5Rw
MD5:	8A54B1F276942D771612AFC3902789BC
SHA1:	F0DDA961C0ED6EA32B936F688B8350BD1C1459F1
SHA-256:	3D831607D0E657E0D4A5C445914645678E92592038FECCBDF66B84ECE56EC281
SHA-512:	BAD13771BFBBFF0F7385BAE0E40C80853DF3AA04A2FFF5D4AFBD1046724AF3B4F6A7CF09A14652437DFC4BE41EF68DD2F82BC3CCF7FC12B45816FB34AF18F853
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario-icon-alert-warning.png
Preview:	.PNG........IHDR...`...`......w8....pHYs..,K..,K..=......sRGB.........gAMA......a.....IDATx...m.@.E...o. .'....A.:.;p:p.)!. ..@^.q....fI..`....!....K.../.j.%"EQ.EQ.EQ.At.}..iH0.$....O......l....1).@B.H .c...}..p.~.Uu.>.0d&.6.../~.v..@.%`8.k.5~#.Vo..!/.5}......Q..k..u=s....#A.J.......ijKB.3..G.r....%..D,...8}-.1..##...sk.'<...'....f.....Z.?....iC@-e=..v.,..4.1X/.lOA#.=...'....^..-.Z.2.....1.O....@.l.....n....=.../.%.Y./......iF....l.....Z.'....+}."...i}R..D<.PG....d.....4#....\|.J....e..8kF.?P^_.[..,...........E....Q...e.O.5cGAT....M.......Rf....hF.E.e..../oQ~....M@:."...6...'...VC.v..\|.......2.....E6}.'..?8.K_....(2.K.....s.........\|...\_..p.r{...rA.%..fD.,.....(`........H_&.@q.../...F..Er}.6.B.0...2Y.XjF...e..l.T;m$,.I..X3.H./.OA./+.F......_3.H./.....i'..q.......B9..[.$..$P3....k...{B..A....QD.K....(......kF.A..k...(..._....Qx...7b.....G...Wo...wuO..Nw<.......Qx.K.)H.{.q...,_3.p...X.fDa...X.fDa)/..X.fD1./GOA+.(&..x...QL...h..2./......./.U.E

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\ontario@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 360 x 91, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6667
Entropy (8bit):	7.942048147330949
Encrypted:	false
SSDEEP:	192:EiBKxzrvo5MCO922wdtBDRYMJvVHbU76yFYO89VqniGGdk:EiKPo5M922qBDR1L7jyyFGirk
MD5:	46718AF8157A5B51C395EEC77FB087E3
SHA1:	3DBC339CF8F44B8C87A0426911F3075AFB1CB464
SHA-256:	F9B9CFB8AFA75DB50F7544B8FF0510B8385FCB0BB83C8BEF5A2688F9FA74E6DF
SHA-512:	3399BE3B0A97D5BA3C4EBBED9E74B52C63880F0F8A56D5B2E855AB8F298AF57B128EFEAA95C6C065C459B77D45933C83D82C9CFC5892F9B5FBA5F74518C42DB8
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/ontario@2x.png
Preview:	.PNG........IHDR...h...[.....^\|.b....IDATx.....^......l...^.m.62.0..qV..l.ii6..c.....s.\|..r.c..VZX.(.K..%3d....r@N.99/.>.sr\...Y'.d.....D..mo?...b..L..rN....#9&.e.T.P...E@...=.T...M2T2.)...%#...).%9P...5e...[/..h......6)&...@....`......Y....[R.@.:.a.G,.-%..@.\..bG%.@......1........T..b.....ho.PI.p[...7...+b_......l...."..`...Cs....j....L.......4.pg..`..~Y]...]...."..........tK.....p.u.s.#!...j..1...b.9.n.eYQ...ciI....e.O.pI....K.O...L+./.S.oK...iG~5.i......o..+X....c...k7...u...Z6}..]@Gum..?. .....B..........]q.....^...P.......>.?wr...Cr.Z.b3..._N...H....E.B..W^x..Lh......#..@.O.n.M.....t...?@.:..}?.>.H9d.0....{..._[.l}N.?.QK.5i....z:.v...k....5.T./.[4iJ...w.~....h.".y.$....[>.5K.y.a9s.....r....-+.....k...\|1(....Z.....\x.....O..~++W..d.~.z.={....r..7.....n=}=.H.ea3...Fa...8..."..2J.By....s...5k$....r..7h.z..`T...N]..{n..;.@..;...~.0j.%..c...SO...1F.y....K]@..q....C.V@a..r......%..#.....p..L8j07..k0....'.(.\|............:5k.....hx.'

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\open-sans-400-d0bad741aefb909e4be56d188b6f02b9[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14260, version 1.1
Category:	downloaded
Size (bytes):	14260
Entropy (8bit):	7.955023552448444
Encrypted:	false
SSDEEP:	384:V0ZkWiwHBFDPthd/jO+yk0iwCebLvVgYGpn/qZOSO7O7RWf5z4Oc:V0hRbVFykgNSnSsSSSRWR8/
MD5:	D0BAD741AEFB909E4BE56D188B6F02B9
SHA1:	1547224E0A0BE06E5178815718797BD6607169A4
SHA-256:	4194A431CCA6678145F2C4D7D2E597087E2A76A4878C26B66315B2BA4F4EA393
SHA-512:	33FB0A386FD3ED97ADA0A6612D818530FED61E8688A0C38BCE29031076430C7FC2AA075C5AA8003E2E091D80C64602FE7A8D7F3B7380601EFB3CEC20285B50D5
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/static/open-sans-400-d0bad741aefb909e4be56d188b6f02b9.woff
Preview:	wOFF......7.......^L........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2......._...`.>..cmap...8...........gasp...............#glyf......$Y..3..~.head..'<...6...6...=hhea..'t.......$....hmtx..'........l..Y.kern..)............loca..3.........C.O.maxp..5`... ... .d..name..5........2../Jpost..6,.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f..8.....u..1...<.f....................{...h..... 0t.vf.....&.O.....)B..q>H..u..R``.....9.x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..z.\S...=so.j.......R.!......V..RDDZ...J.E....H.R.j...R.^k...Z[...W.$.w......~.~...9..9.r...8.....9..9...F\|..#M.f....Y....}.g...\qf.......^..J...;.'..~.h..P?.@..4..........2r.....^./..'....!.1?!..s.H.8.3..U..\g.eP./=/.\@.....^...W...W.-...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\phone[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3983
Entropy (8bit):	3.9233631757088947
Encrypted:	false
SSDEEP:	96:AFxvRl2OV1d/UaGgX2phUt1nExHaQEET+u7hO7VC:yvRlll/UaGgXwhc10HQEiEOo
MD5:	79DEF050C85931B2A5F387892E013F8C
SHA1:	A2AB876984106052B752A224B780C8B2FD58342E
SHA-256:	3D2AF2899747E4C51E45AC7EB1EAA0FDEE399022C94D8F4721922FB8AC740E8C
SHA-512:	2A90F626B9B9ABD202087D1361311863A331662E0ECC67BD4DD067A189E523CCE4E0963FEE27FE454A8531589B67ADCDE9ABF1B3223C368BB83CB1F83C318BF0
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/phone.svg
Preview:	<svg width="104" height="104" viewBox="0 0 104 104" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M82.1171 64.4242C79.988 62.2073 77.4199 61.022 74.6981 61.022C71.9982 61.022 69.4081 62.1853 67.1912 64.4023L60.255 71.3165C59.6843 71.0092 59.1136 70.7238 58.5649 70.4385C57.7747 70.0434 57.0284 69.6702 56.3918 69.2752C49.8947 65.1486 43.9901 59.7708 38.3271 52.8127C35.5833 49.3446 33.7395 46.4253 32.4006 43.4621C34.2005 41.8158 35.8687 40.1037 37.493 38.4575C38.1076 37.8429 38.7222 37.2063 39.3368 36.5917C43.9462 31.9822 43.9462 26.0119 39.3368 21.4024L33.3444 15.4101C32.664 14.7296 31.9616 14.0272 31.3031 13.3248C29.9861 11.9639 28.6033 10.5591 27.1765 9.24214C25.0474 7.13495 22.5012 6.0155 19.8233 6.0155C17.1454 6.0155 14.5553 7.13495 12.3603 9.24214C12.3384 9.26409 12.3384 9.26409 12.3164 9.28604L4.85345 16.8149C2.04386 19.6245 0.441519 23.0486 0.0903206 27.0216C-0.436477 33.4309 1.45122 39.4013 2.89991 43.3084C6.4558 52.9005 11.7677 61.7902 19.6916 71.3165C29.3057 82.7963

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\phus[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	14179
Entropy (8bit):	5.188193851128604
Encrypted:	false
SSDEEP:	96:mFWaR9De/V2l12cLqueeL0WeFSu+IBoaY7UtEXctUtYJtv9TuPwdNeMAXVgoyw/:OR9Det2lvL0WeFKtaY7fqtv9TuYVOLyk
MD5:	45559C2BC574E469047CFB109459D30B
SHA1:	58B6F1850C52F4E4CA2E058E40B3A5FCC6BD6505
SHA-256:	96C67525EE0088F5E938646461BA6116B5632375812446E0BEC9716A4F2D8177
SHA-512:	389931FB5430F61E52400F0A20CE768E62DBDB6F7EDFCD91C598CF2086B4045EA2441286DAA090FA2BE205AB61D763723D72CDD5B024902C4E6822CAA538677A
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/data/phus.json
Preview:	[{"id":"1","name":"District of Algoma Health Unit","on_portal":"No","phu_tool":"http://www.algomapublichealth.com/disease-and-illness/infectious-diseases/novel-coronavirus/covid-19-vaccine/vaccine-clinics-in-algoma/#clinics","phu_call_centre":"Yes","phu_phone":"705-541-2332","phu_general_phone":"705-541-2332","phu_general_web":"http://www.algomapublichealth.com/","r3_en":"http://www.algomapublichealth.com/disease-and-illness/infectious-diseases/novel-coronavirus/covid-19-vaccine/vaccine-clinics-in-algoma/#clinics","r3_fr":"http://www.algomapublichealth.com/disease-and-illness/infectious-diseases/novel-coronavirus/covid-19-vaccine/vaccine-clinics-in-algoma/#clinics","age_threshold":"60"},{"id":"2","name":"Brant County Health Unit","on_portal":"No","phu_tool":"https://www.bchu.org/ServicesWeProvide/InfectiousDiseases/Pages/COVID-19-Vaccine-Clinic-Appointments.aspx","phu_call_centre":"Yes","phu_phone":"519-753-4937 ext. 416","phu_general_phone":"519-753-4937 ext. 438","phu_general_web":"h

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\position-container.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.220495863964869
Encrypted:	false
SSDEEP:	3:USQTWqVYb1MVNMNQMXm/1JrYv:UVtYbymQt/frYv
MD5:	A203BFB5819742D466B5E99AF480009A
SHA1:	CC0323B65FD726EF89264B2A7A6D3D7C4999A5E2
SHA-256:	92931CEB6A0AD1C9B3E8FC6F335B9DFD6F0C7C8EE36F089BB10241C142A78FAA
SHA-512:	D12FB20EDE3211C3C3469D5DC86E2BE654A3D5ACE2FE3F20D3E959596106E0775369CB1A5A1886447497508DD572F4D61A47291EDD25910DD8713883AD015185
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/position-container.module.css?qrgttk
Preview:	/. @file. * Contain positioned elements.. */...position-container {. position: relative;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\postalcodes[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	2786378
Entropy (8bit):	4.307469615088594
Encrypted:	false
SSDEEP:	12288:sPd86m8RsO98KBBBPqqjDaVasEr3/tBibyYKBilSTq1XjOG29:c2n8xguaG7/tnu1XCr
MD5:	BE1588D543EAA359C95DE4C948280691
SHA1:	A1CF4E81AA166CD80D89419D9F6F9B24DEF4D19F
SHA-256:	63EABDD03EB72721BBE660F6B0E108467BFADDB93FC150EC86A0B7778C7C3C78
SHA-512:	DEE6F0ACFEA6ADC556420726D896D8F5959F0C1043D3A94CF79EF20741EBED995D1D1A4AC8E4D95C42980931E02B981CDB1A8CE19AB34E2F9832C35F4534CF9D
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/data/postalcodes.json
Preview:	{"id7":["B0T1B0","N0A1A0","N0A1B0","N0A1G0","N0A1J0","N0A1L0","N0A1N0","N0A1N1","N0A1N2","N0A1N3","N0A1N4","N0A1N5","N0A1N6","N0A1N7","N0A1N8","N0A1N9","N0A1P0","N0A1S0","N0E1C0","N0E1J0","N0E1M0","N0E1P0","N0E1T0","N0E1X0","N0E2A0","N0J1K0","N1A0A1","N1A0A2","N1A0A3","N1A0A4","N1A0A5","N1A0A6","N1A0A7","N1A0A8","N1A0A9","N1A0B1","N1A0B2","N1A0B3","N1A0B4","N1A0B5","N1A0B7","N1A1A1","N1A1A2","N1A1A3","N1A1A4","N1A1A5","N1A1A6","N1A1A7","N1A1A8","N1A1A9","N1A1B1","N1A1B2","N1A1B3","N1A1B4","N1A1B5","N1A1B6","N1A1B7","N1A1B8","N1A1B9","N1A1C1","N1A1C2","N1A1C3","N1A1C4","N1A1C5","N1A1C6","N1A1C7","N1A1C8","N1A1C9","N1A1E1","N1A1E2","N1A1E3","N1A1E4","N1A1E5","N1A1E6","N1A1E7","N1A1E8","N1A1E9","N1A1G0","N1A1G1","N1A1G2","N1A1G3","N1A1G4","N1A1G5","N1A1G6","N1A1G7","N1A1G8","N1A1G9","N1A1H1","N1A1H2","N1A1H3","N1A1H4","N1A1H5","N1A1H6","N1A1H7","N1A1H8","N1A1H9","N1A1J1","N1A1J2","N1A1J3","N1A1J4","N1A1J5","N1A1J6","N1A1J7","N1A1J8","N1A1J9","N1A1K1","N1A1K2","N1A1K3","N1A1K4","N1A1K5","N

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\raleway-modified-400-79edfeb2a0670adbccb268d3b8f344f4[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18244, version 4.20
Category:	downloaded
Size (bytes):	18244
Entropy (8bit):	7.979202840632488
Encrypted:	false
SSDEEP:	384:glcBMfNkCPEVHO5tI+gJqVZ2TlPdIKoJ06nrKJ/mHf5F5gpynNYoe:gy3HP+gJUo5PSKoC6nLHf5fgMnyn
MD5:	79EDFEB2A0670ADBCCB268D3B8F344F4
SHA1:	1D164B4EA5D0CF0747934A42A3C0207EAD3A0404
SHA-256:	7CBDEB6D81C204683D29DACDE6CD1DE7C0B50B2389EAEC166B046A8FABC89067
SHA-512:	E493E91346A3829EDA94541AB2982CE694D85B43AD4361AD108B7D4F1D6437AEAF7D376580A85CBAD3A05E5D4E8F405E0FC67CE4F523973EDC77005CA7E37CD3
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/static/raleway-modified-400-79edfeb2a0670adbccb268d3b8f344f4.woff
Preview:	wOFF......GD................................FFTM...0.........$/.GDEF...L....... ."..OS/2...l...I...`..p.cmap...........bd..xgasp................glyf......6c..nx..D{head..:....1...6....hhea..:D... ...$.\..hmtx..:d........._,.loca..<.........5bQ.maxp..>........ ....name..>....s........post..Ed.........Ldnx.c```d..3.....n.0..H..V..x.c`d``..b...`b`../@...1.....'..x.c`b..8.......i..>C.............0"s.2.R.....R....d``>.....I..:.R``.........x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..}.\|[...eY{\.....-o[...$...NH .B.e'.....(-m...-.P..>..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\raleway-modified-400[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18244, version 4.20
Category:	downloaded
Size (bytes):	18244
Entropy (8bit):	7.979202840632488
Encrypted:	false
SSDEEP:	384:glcBMfNkCPEVHO5tI+gJqVZ2TlPdIKoJ06nrKJ/mHf5F5gpynNYoe:gy3HP+gJUo5PSKoC6nLHf5fgMnyn
MD5:	79EDFEB2A0670ADBCCB268D3B8F344F4
SHA1:	1D164B4EA5D0CF0747934A42A3C0207EAD3A0404
SHA-256:	7CBDEB6D81C204683D29DACDE6CD1DE7C0B50B2389EAEC166B046A8FABC89067
SHA-512:	E493E91346A3829EDA94541AB2982CE694D85B43AD4361AD108B7D4F1D6437AEAF7D376580A85CBAD3A05E5D4E8F405E0FC67CE4F523973EDC77005CA7E37CD3
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/fonts/raleway-modified-400/raleway-modified-400.woff
Preview:	wOFF......GD................................FFTM...0.........$/.GDEF...L....... ."..OS/2...l...I...`..p.cmap...........bd..xgasp................glyf......6c..nx..D{head..:....1...6....hhea..:D... ...$.\..hmtx..:d........._,.loca..<.........5bQ.maxp..>........ ....name..>....s........post..Ed.........Ldnx.c```d..3.....n.0..H..V..x.c`d``..b...`b`../@...1.....'..x.c`b..8.......i..>C.............0"s.2.R.....R....d``>.....I..:.R``.........x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..}.\|[...eY{\.....-o[...$...NH .B.e'.....(-m...-.P..>..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\report-price-gouging-during-corona-virus[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	6814
Entropy (8bit):	4.082683189957993
Encrypted:	false
SSDEEP:	192:zmzBdEFaqO6JpO5+2wiR0WB4+z3H/VqTF+W3TY:zYdEFaqO2pO5+2wRk8F+W3TY
MD5:	22BB5F4589A65EC0D626A05E687D25C4
SHA1:	44836538FEF4DFFCD1C992A447208A934844E2EA
SHA-256:	D04BE8D3F4F462D8568629AB858610E2119F06229AA29137968274AF240B8FB9
SHA-512:	7619B907D6562D3CF630631A17636C48714A6EC58DEFD436B6229110CEA7F03498725419AAB33F4FAB7E527957824CFA5E4E607FF2C08AFAFBC40C4A17B6A81E
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/report-price-gouging-during-corona-virus.svg
Preview:	<svg width="140" height="151" viewBox="0 0 140 151" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M97.3 98.325H51.4V98.4249H5.60001L10.9 148.225H51.4H92L97.3 98.325Z" fill="white"/>.<path d="M51.4 149.925H10.9C10 149.925 9.30001 149.225 9.20001 148.425L3.90001 98.625C3.80001 98.125 4.00001 97.625 4.30001 97.325C4.60001 96.925 5.10001 96.725 5.60001 96.725H51.1C51.2 96.725 51.3 96.725 51.4 96.725H97.3C97.8 96.725 98.3 96.925 98.6 97.325C98.9 97.725 99.1 98.125 99 98.625L93.7 148.525C93.6 149.425 92.9 150.025 92 150.025H51.7C51.6 149.925 51.5 149.925 51.4 149.925ZM12.4 146.525H51.1C51.2 146.525 51.3 146.525 51.4 146.525H90.4L95.3 100.125H51.7C51.6 100.125 51.5 100.125 51.4 100.125H7.50001L12.4 146.525Z" fill="black"/>.<path d="M51.4 100.125H1.7C0.7 100.125 0 99.325 0 98.425C0 97.525 0.8 96.725 1.7 96.725H51.4C52.4 96.725 53.1 97.525 53.1 98.425C53.1 99.325 52.4 100.125 51.4 100.125Z" fill="black"/>.<path d="M42.9 148.825C42 148.825 41.2 148.125 41.2 147.225L38.5 99.6249C38.4 9

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\secondary-navigation[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2607
Entropy (8bit):	4.779907926046658
Encrypted:	false
SSDEEP:	48:YTfAAmKryfJmz/8Rzm62eGTr9dRcCUeQA1NG:Y7AAmg2JmT8Rzcjr3RkSG
MD5:	CE60BE9D9B0E25B5F2E494193DBA554F
SHA1:	D05ADE985C9AF9C24509EB8B07BF1329D4C41748
SHA-256:	A2FD667C55478849BAB73195417AD57A9224C1750C64DE2760852B8F6E4086B6
SHA-512:	F019812C182C9EBD084E8E70D44B78F91DB8021930FD1E2D5C84A18F30F341EFBF24BA74D9F6847FAB675C7149981A6FB30A6A083E59236DA68FD37A36CD414D
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/js/secondary-navigation.js?v=8.9.13
Preview:	(function ($) {. let activeNavListItem = $('.ontario-list-item-active');. let navListItem = $('.ontario-navigation__list-item');. let navListItemAnchor = $('.ontario-navigation__list-item > a');. let subNavContainer = $('.ontario-sub-navigation__container');.. let activeMobileNavListitem = $('.ontario-mobile-list-item--active');. let mobileNavListItem = $('.ontario-mobile-menu__list-item');. let mobileNavListItemAnchor = $('.ontario-mobile-menu__list-item > a');. let mobileSubNavContainer = $('.ontario-mobile-sub-navigation__container');. let mobileSubNavActiveAnchor = $('.ontario-mobile-list__sub-nav-item--active > a').. navListItemAnchor.on('click', function(e) {. if($(this).next('div').hasClass('ontario-sub-navigation__container')) {. e.preventDefault();.. $(this).parent().toggleClass('ontario-list-item--active');. $(this).parent().siblings().removeClass('ontario-list-item--active');.. ($(this).parent().hasClass('ontario-list-item--

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\splash[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text
Category:	downloaded
Size (bytes):	1316
Entropy (8bit):	4.734902870803483
Encrypted:	false
SSDEEP:	24:icZ9fY0mIwC4HheXxvG6wiwkHJ9V9KACYgdZ8hgYnJMH:VmIUH0BtX9QdKhJJu
MD5:	E2F448F78AD6C5A64571929FCEA5E8F7
SHA1:	C0AA5F6FE4D7506432FA9086264BE09D671C60BF
SHA-256:	50DAD750CA6081A33EF23150705E86E1D4B319CB76416FFE0BC1AA88385865ED
SHA-512:	06BE9EC4B56BC1B9E6B404F5BE69246DB0BC353445E27187B91CC0242EB6D5AE615235BE47601F3B76C527F1D31D1ED5A7721F2E4B77E1780C1B1704606EA35E
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/content-type/partials/dashboard/splash.html
Preview:	<style>. body {. background: url("/img/assets/splash/spring-2021.jpg") no-repeat center;. background-size: cover;. height: auto;. }.. .top-margin-6x {. margin-top: 6rem !important;. }.. .site-logo {. width: 315px;. height: auto;. }.. @media screen and (min-width: 64em) {. .panel--semitransparent .button {. min-width: 9.5rem;. }. }.. @media only screen and (max-width: 40em) {. .top-margin-6x {. margin-top: 3rem !important;. }.. .button {. margin-right: 0;. }. }.. @media print {. .text-center {. text-align: center;. }. }.</style>..<main>. <div class="row top-margin-6x">. <div class="small-centered small-10 medium-6 column end no-border panel--semitransparent">.. <div class="row">. <div class="small-12 column text-center top-padding bottom-padding-double">. <img alt="Government of Ontario \| Gouvernement de l.Ontario" src="/img/ontario@2x.png" class="site-logo">. </div>. </div>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\spring-2021[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1080, frames 3
Category:	downloaded
Size (bytes):	64293
Entropy (8bit):	7.846351923438243
Encrypted:	false
SSDEEP:	1536:Fma7QnNHsXD4679zsPckbbtVwWRQOIzdH5sl4ueSd6n1kg:d2NHsmrbEWmfdH50g
MD5:	508FD6E64738121024290EBD8E7A6A74
SHA1:	002BE4D4876CD81414B945DB4FB77E4A65B42C02
SHA-256:	FB969147A45B36F77DA9C817E8199F5A2C7DC24164E08BC5207156DA52455143
SHA-512:	C0671B8DB8A92879A84E0137BE230FC653443D4E82D51B56FFB82780C053845DF346BC96A54A58626150420F6132296A71C413EB31E98B1B3CA2BBB9AC623139
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/assets/splash/spring-2021.jpg
Preview:	......Exif..II*.................Ducky.......(......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 116.164766, 2021/02/19-23:10:07 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="7604F6EC7101F9F3A6EBDB708AB235C7" xmpMM:DocumentID="xmp.did:538CC97A88F611EBB8D7BA14A11AA145" xmpMM:InstanceID="xmp.iid:538CC97988F611EBB8D7BA14A11AA145" xmp:CreatorTool="Adobe Photoshop 21.1 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4f6e4f4a-9343-47ca-b280-5c7c6d910e7f" stRef:documentID="adobe:docid:photoshop:ea19256a-bce7-cf40-9d50-1aabf33ba4b6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\template-page[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2725
Entropy (8bit):	4.41239041853077
Encrypted:	false
SSDEEP:	48:/bhS6xLzOoTMEffMqMRZvLUCwqJWd/MhPV1NQzMqz2zR4u5GUE:NHoEJ4/q/SR/GUE
MD5:	76EBE1801AC566AF044887388AFF2DB6
SHA1:	4A6337C7C3238DA616CB64F8C0B775F483C1BCB4
SHA-256:	66A139CB816CE3D4FE46B69B4BA5B77A01234198C56009DEA8048A3C02E1402C
SHA-512:	D27AA8C429282AF84ECAD3E66D266E37BFE7E4152C39C1A90BEDA3DFA4D83D0E7434FCB74FD780286E5E6AAAAAECDC4530F239866F232836BF59830744A09B8A
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/content-type/partials/page/template-page.html
Preview:	<main>.. <onesite-optimization-banner>. </onesite-optimization-banner>.. <onesite-archive>. </onesite-archive>.. <onesite-intro>. </onesite-intro>.. <div class="row" ng-show="mainController.node.content.greyBox">. <div class="small-12 columns">. <div class="panel">. <compile-html html="mainController.node.content.greyBox">. </compile-html>. </div>. </div>. </div>.. <div class="row". ng-init=". asideEnabled = mainController.node.content.right \|\| mainController.node.content.archive_status === 'associated';. resultStatus = {};. ">. <div class="main-content". ng-class="{'large-8 medium-12 columns': asideEnabled, 'small-12 columns': !asideEnabled}">.. <onesite-toc toc-style="mainController.node.content.tocStyle". toc-list="mainController.node.content.toc". include-faq="resultStatus.total > 0". alias="mainController.node.content.params.alias">. </on

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\trillium_6[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=0], baseline, precision 8, 144x144, frames 3
Category:	downloaded
Size (bytes):	8660
Entropy (8bit):	7.889806609797456
Encrypted:	false
SSDEEP:	192:aknOiayY7s/y3yL8YKPKhU/zplFG8LtTusd3KCNllctSIky5:pnx5K3yL8kIbFG8Lhusd3VSSIkm
MD5:	A18E8422462335FC0879495809189094
SHA1:	F941AC2B0E6086C2D779B5D7093D9D478E68BAF0
SHA-256:	6EFB43B92424429C270E1D5B773A2E999F1231A6A7BA59096171EF475F7D97FF
SHA-512:	30E5D7A8F457CAA353446DC5FAFD2397E231895A8928DDFE8A9C1483966FB99D6D21426F33EF9CD60C40548D1BD4F2DB25A00860EAE7FAF1C0938474372EF851
Malicious:	false
IE Cache URL:	https://files.ontario.ca/trillium_6.jpg
Preview:	......Exif..II*.................Ducky.......<......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmpMM:DocumentID="xmp.did:B82A61F6110911E5B5AE9E5C9EA152F0" xmpMM:InstanceID="xmp.iid:B82A61F5110911E5B5AE9E5C9EA152F0" xmp:CreatorTool="COOLPIX L1V1.2"> <xmpMM:DerivedFrom stRef:instanceID="228B4BD8679281BAB641C70E4070908B" stRef:documentID="228B4BD8679281BAB641C70E4070908B"/> <dc:creator> <rdf:Seq> <rdf:li>Karen Labonte</rdf:li> </rdf:Seq> </dc:creator> <dc:title> <rdf:Alt> <rdf:li xml:lang="x-default">Trilliums</rdf:li> </rdf:Alt> </dc:title> </rdf:Description>

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\urlblockindex[1].bin Download File
Process:	C:\Program Files\Internet Explorer\iexplore.exe
File Type:	data
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	1.6216407621868583
Encrypted:	false
SSDEEP:	3:PF/l:
MD5:	FA518E3DFAE8CA3A0E495460FD60C791
SHA1:	E4F30E49120657D37267C0162FD4A08934800C69
SHA-256:	775853600060162C4B4E5F883F9FD5A278E61C471B3EE1826396B6D129499AA7
SHA-512:	D21667F3FB081D39B579178E74E9BB1B6E9A97F2659029C165729A58F1787DC0ADADD980CD026C7A601D416665A81AC13A69E49A6A2FE2FDD0967938AA645C07
Malicious:	false
IE Cache URL:	https://r20swj13mr.microsoft.com/ieblocklist/v1/urlblockindex.bin
Preview:	.p.J2...........

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5JC0A1KN\www-player[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	365477
Entropy (8bit):	5.242167915306127
Encrypted:	false
SSDEEP:	1536:BDQI0irpHrpj/fn8Mq5G04XGqUDrzltPljuvEMFfyUOP5FRrDJciM/ByDN4A6D65:TijDrzxCQgayRsLb
MD5:	2D4D90F855A60199EE25043D26066129
SHA1:	3E62A44ACF2768ABCCCE8ECCD1736C2D6F67AFFE
SHA-256:	E76089910B3A72BB157C377AF94E140AA5BA385BE2DAD47D13D5E80F3F3C5100
SHA-512:	37F74371CC28C1584DF9A3F308CBF97810CE5D77C7C1624CD9538D274B240ED36D927962E76FEBB30443D8040CF9084790C282D169A139B402F72AFE14305CAD
Malicious:	false
Preview:	.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation;-ms-high-contrast-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode,.html5-video-player.ytp-fullscreen{background-color:#000}.ytp-big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color:inherit;text-decoration:none;-moz-transition:color .1s cubic-bezier(0.0,0.0,0.2,1);-webkit-transition:color .1s cubic-bezier(0.0,0.0,0.2,1);transition:color .1s cubic-bezier(0.0,0.0,0.2,1);outline:0}.html5-video-player a:hover{color:#fff;-moz-transition:color .1s cubic-bezier(0.4,0.0,1,1);-webkit-transition:color .1s cubic-bezier(0.4,0.0,1,1);transition:co

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\8a89caa9-511c-4568-af89-7f2174b4378c[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1405
Entropy (8bit):	4.846601528666309
Encrypted:	false
SSDEEP:	24:YPOTSNBcZCiyIiUvK0+W1Z0V4g1Z0V4gUj0VrCVIBmg9PgT5lHpHmB:YPlQZC5IFK0/1Z0V4g1Z0V4gUj0Vhmgf
MD5:	3432B63D4176808AEB89100F06AE626E
SHA1:	BBD46C3E5790D727611A522F947A40F52CCCCF9D
SHA-256:	77ABF5EB84978F86BE2E216362CEDD5939E06A0E4121A05ED8D3C4EB5559D9D9
SHA-512:	AC0C61540C39CC855C042565E0718006E4E2E0696CC95B7F5822CBC8636034E682F4EC71EAFBA203FBBE9381A4DB1279E848241098B67BFE9130DA62C64E7BD8
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-data/data-catalogue/8a89caa9-511c-4568-af89-7f2174b4378c.json
Preview:	{"help": "https://data.ontario.ca/api/3/action/help_show?name=datastore_search", "success": true, "result": {"sort": "report_date desc", "include_total": true, "resource_id": "8a89caa9-511c-4568-af89-7f2174b4378c", "fields": [{"type": "int", "id": "_id"}, {"info": {"notes": "", "type_override": "timestamp", "label": ""}, "type": "timestamp", "id": "report_date"}, {"info": {"notes": "", "type_override": "", "label": ""}, "type": "text", "id": "previous_day_doses_administered"}, {"info": {"notes": "", "type_override": "", "label": ""}, "type": "text", "id": "total_doses_administered"}, {"info": {"notes": "", "type_override": "", "label": ""}, "type": "text", "id": "total_doses_in_fully_vaccinated_individuals"}, {"info": {"notes": "", "type_override": "", "label": ""}, "type": "text", "id": "total_individuals_fully_vaccinated"}], "records_format": "objects", "records": [{"_id":106,"report_date":"2021-04-13T00:00:00","previous_day_doses_administered":"95,692","total_doses_administered":"3,

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\PHULocator[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 1542 x 184, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	36711
Entropy (8bit):	7.9276537058951995
Encrypted:	false
SSDEEP:	768:nx/NXRsI7/eGgiR/lVc8DcztTx/3TrjoY0vJJpo0MC:nzwliR/lcpTVPtipo0R
MD5:	7EAF9A26FEC2DF8ED8E036759D405A54
SHA1:	7749C2328B8EB5EA92631BA23B2CE43FEE866CB5
SHA-256:	34E31E2B94ABB45BBBFE70B2678D14A61E78C19E7D5960F97306106FA3E1DB4C
SHA-512:	7343664D9AD88C32B5148BBE2652E483EF67BDD053F21573EDDA406731CB02A8BF239F849619D05E0EF592749629ECFCF1ABAEB9C2C297569A1678439660B1B1
Malicious:	false
IE Cache URL:	https://www.phdapps.health.gov.on.ca/phulocator/images/PHULocator.PNG
Preview:	.PNG........IHDR.............(.W.....sRGB.........gAMA......a.....pHYs.................IDATx^....S.....tN..8.&t".].S...D.tQ#tE.t.DM..I....!MQ.!..B..!.....R.......>...Z{}.g...\|.w..}=..../..}....uY..!..B.!..B.!..b. ..B.!..B.!..B.1..c@.!..B.!..B.!..A.1 ..B.!..B.!..B. ...B.!..B.!..B.!f.r..!..B.!..B.!..3.Z.....-^.s7o.n.....Ork.q.{..t..v.$I.$I.$I.$I.$I.$I.aG..]..:vv.............e....$I.$I.$I.$I.$I.$.wa..._.}9..8...:_L&T.$I.$I.$I.$I.$I....=..\|....8...7\.L.$I.$I.$I.$I.$I.$I...<v.^)v...E.H.$I.$I.$I.$I.$I.48a..l.....m....K.$I.$I.$I.$I.$I.4xa..~_B.c...W..6:9..$I.$I.$I.$I.$I.$I.'......w..c.O....$I.$I.$I.$I.$I.4....{..h........w..c@..I.$I.$I.$I.$I.$I.p...j.m...jY.;..1...%I.$I.$I.$I.$I.$i8.:.L..sx.._M.c.~...$I.$I.$I.$I.$I.$i..r...:..?M.c`...N.....f.>..t.e..nsw.y.{...k.*..B.!..B.!..B.......c_.....NN...s[..I:..8....v......-Z..E.!..B.!..B.!.......{h....0.q..Z.L%..Xg./N..n..=.......Z!.!..B.!..B.!..._..c......@..V.S...8..N..6.Wi..=.B.!..B.!..B.!.....t).@'.z...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\Raleway-700[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 16436, version 1.1
Category:	downloaded
Size (bytes):	16436
Entropy (8bit):	7.973528132200105
Encrypted:	false
SSDEEP:	384:BNebrtrBElie10zsjs72g8Ds9ofyEVL7oVFQ54Fo:BsXbEYHWJqwBos5V
MD5:	E4F290693D69F0CA08871D256363EE9A
SHA1:	3FB6D354094ABB99AFDF80B45086FA7B0F073690
SHA-256:	72FFF1685DFB2C91A5AD93B3028E6B53789A4CA50C738B8590ECFC9EB002B25F
SHA-512:	847CA2BE6BDE8C9B9D174399AB5ACF63ED1C6778953EB412EE548B4DD0AAB63B7235378B120E8EA18D68D7DFD054B0D02B3A379EF9E092C3BBD6D5AD72F287A6
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/Raleway-700/Raleway-700.woff
Preview:	wOFF......@4.......D........................GPOS...0.....14.D.rGSUB...\...\...t...OS/2.......[...`.H..cmap................gasp................glyf......m..Nv-...head..9@...6...6.QP.hhea..9x.......$...ihmtx..9.......x.. .loca..;..........1.Xmaxp..=\|... ... .:..name..=.........'.@.post..>........%...#x.L..l.a....w.m{.g.m...`.m{..A.....j....... ..G.Q....p...PYF.C.@h`.8.P`.;..K.{......E....y.A....%Q. ..+.....Q).....;...B..m......J../...J.9.,).....;.^+.g.F?....A....z;..f.......e.......B,..J<.P..4..MiF+Z....=..H':..../...@.0.a.g......2..L`..Lf1.9.c!.X.......b5kX.:..-..0.8...q......x.#..<.5ox....B4..L..d.e..D..fff...."....p..e..e.g.y.2>ffFQ.......[U......P..n..X4..).r..Z.Y..+Tu.MI..iI.4-3Z...m.&....>N.8.&a..................=#......l...o...4u.z[e...:._.1.AM.I.y...4.......4....."G.N. h.}....:@}...z@K..*...8..G/.4._.?..ghN..,...Ec....Q...&.Aob8....V3..h...>.K.=...}.....:kTZ..E..{........J..$...YC........N...Zl..'..j.1..c.bm..{'+I....z.\|..5@...wF...Q..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\Z3VCRLT7.htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	8405
Entropy (8bit):	5.0746341151683
Encrypted:	false
SSDEEP:	96:EGsHG+NLuC/XnuEsejOfrBsrbCspsrbp4IpwVS70qXVTdyrNGz7TzvBAkbfNMhjs:EGsH3IC/XnL8M8uIzybI8jSVg2O+S43
MD5:	0953A2B6FB1D331EFA2AAD3FF8E2DC99
SHA1:	33D9EA08EEFB81ABE8934754EA434A33437B227C
SHA-256:	38BF2EB71CE159B99E4A9C680FED3427D8193EB5DC44CE8A75A684EB00A9F820
SHA-512:	4EDECE89518BDEF904871B360E510F6645E631F1FBF9BE5BC4883131827E4F3B7D1169754E73FC1E27526D78378CB3E37D495B7E3DE7F7280F4D6DE908EB5082
Malicious:	false
IE Cache URL:	https://www.ontario.ca/
Preview:	<!doctype html> <html class="no-js" lang="en"> <head> <meta charset="utf-8"> <meta content="width=device-width,initial-scale=1" name="viewport"> <meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta name="sha" content="d43396df38048fbb44731befe641f3dfc221eaf3"> <title></title> <base href="/"> <link href="/css/combined.css" media="screen" rel="stylesheet"> <link href="/css/print.css" media="print" rel="stylesheet"> <script src="/vendor/modernizr/modernizr.js"></script> <script>!function(a,e,o,n,c,i,t){a.GoogleAnalyticsObject=c,a.ga=a.ga\|\|function(){(a.ga.q=a.ga.q\|\|[]).push(arguments)},a.ga.l=1*new Date,i=e.createElement(o),t=e.getElementsByTagName(o)[0],i.async=1,i.src="//www.google-analytics.com/analytics.js",t.parentNode.insertBefore(i,t)}(window,document,"script",0,"ga"),ga("create","UA-21003310-6",{cookieDomain:"auto",allowLinker:!0}),ga("create","UA-48649528-1",{cookieDomain:"auto",allowLinker:!0,name:"ServiceOntario"}),ga("require","linker"),ga("linker:autoLink",["serviceont

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\ajax-progress.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1035
Entropy (8bit):	5.00154723082934
Encrypted:	false
SSDEEP:	24:0wn7OrsH9HAxr4TAkZxrh794kRxr3yp3XrFgAn6Umey52M9Y:0/MHA94TAE9x94kR9i1FS52+Y
MD5:	C39F9F1EBB648940FC7C7C78FD171595
SHA1:	6BE470262F71975CF7E01C209ADF412B0E43721E
SHA-256:	018BC192232B968B662399F1CB800C44EE22B64285A6334366C667F7EBFEA058
SHA-512:	E0DBB0F400C2D82DF607987057DE053AA74791367BB633CE39FE07F944429F6125FE5A5DF44A3AA3C6DBF29407B39ABFC44AE7911410DB73793241E87862552E
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/ajax-progress.module.css?qrgttk
Preview:	/*. @file. * Throbber.. /...ajax-progress {. display: inline-block;. padding: 1px 5px 2px 5px;.}.[dir="rtl"] .ajax-progress {. float: right;.}..ajax-progress-throbber .throbber {. display: inline;. padding: 1px 5px 2px;. background: transparent url(../../../images/core/throbber-active.gif) no-repeat 0 center;.}..ajax-progress-throbber .message {. display: inline;. padding: 1px 5px 2px;.}.tr .ajax-progress-throbber .throbber {. margin: 0 2px;.}..ajax-progress-bar {. width: 16em;.}../ Full screen throbber /..ajax-progress-fullscreen {. position: fixed;. z-index: 1000;. top: 48.5%;. / Can't do center:50% middle: 50%, so approximate it for a typical window size. /. left: 49%; / LTR */. width: 24px;. height: 24px;. padding: 4px;. opacity: 0.9;. border-radius: 7px;. background-color: #232323;. background-image: url(../../../images/core/loading-small.gif);. background-repeat: no-repeat;. background-position: center center;.}.[dir="rtl"] .ajax-progress-fullscre

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\align.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	484
Entropy (8bit):	4.609557654572897
Encrypted:	false
SSDEEP:	12:Uo/uby0Ehl5oXozfz03jKqKfvXkICf8y53jfZT:AW0EDm+A3jKvUIEvL
MD5:	8628052440E532F890CFC00D4A682FA6
SHA1:	E52C3AF92E150EACDA721A2343791BA41535781F
SHA-256:	97FE5992208187911C3DAFF7FE8556EE254CA0A340AB9AF0E3BA04CE7E40E2E3
SHA-512:	95ED5289C7BB858F837CCB83018D3DA5F6577AE027689DE8503FE934B097E818ADE79CC7EB89742C93859BB64BA4984F52BFB16D5210D3E757614FF7FD01A677
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/align.module.css?qrgttk
Preview:	/*. @file. * Alignment classes for text and block level elements.. /...text-align-left {. text-align: left;.}..text-align-right {. text-align: right;.}..text-align-center {. text-align: center;.}..text-align-justify {. text-align: justify;.}../. Alignment classes for block level elements (images, videos, blockquotes, etc.). */..align-left {. float: left;.}..align-right {. float: right;.}..align-center {. display: block;. margin-right: auto;. margin-left: auto;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\analytics[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	48759
Entropy (8bit):	5.5215063523389265
Encrypted:	false
SSDEEP:	768:/yR3fYFBLbfsce5XqY1TyPnHpX/KWY3SoavPVRhwmCgYUD0lgEw0stZc:/y9gZfA5h1UHpXxY3Soiuw0sU
MD5:	0A4E309B5F2D7439B4F8876B19F37FC7
SHA1:	7AC30F933A2B889EDBE5D3449F4EC90049B0E2A9
SHA-256:	F79723478F4C48501CD49AC52B81D6244A6562B9D3F08CE8AB208A8B8878D4C4
SHA-512:	891337D9CD308331BD0166BAA7C99C2B856D47F0ADE8AF596F71AFFC962546BBE0952554C51CC9A10E28BB4CEE3648AEC819D83A8935E69E95F53F5CBF141C44
Malicious:	false
IE Cache URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};var q={},r=function(){q.TAGGING=q.TAGGING\|\|[];q.TAGGING[1]=!0};var t=function(a,b){for(var c in b)b.hasOwnProperty(c)&&(a[c]=b[c])},v=function(a){for(var b in a)if(a.hasOwnProperty(b))return!0;return!1};var x=/^(?:(?:https?\|mailto\|ftp):\|[^:/?#]*(?:[/?#]\|$))/i;var y=window,z=document,A=function(a,b){z.addEventListener?z.addEventListener(a,b,!1):z.attachEvent&&z.attachEvent("on"+a,b)};var B=/:[0-9]+$/,C=function(a,b,c){a=a.split("&");for(var d=0;d<a.length;d++){var e=a[d].split("=");if(decodeURIComponent(e[0]).replace(/\+/g," ")===b)return b=e.slice(1).join("="),c?b:decodeURIComponent(b).replace(/\+/g," ")}},F=function(a,b){b&&(b=String(b).toLowerCase());if("p

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\app-a9735616a727a9b1be92[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with NEL line terminators
Category:	downloaded
Size (bytes):	145914
Entropy (8bit):	5.33693860599627
Encrypted:	false
SSDEEP:	1536:OA6yRUvHc0r8JZafx/UmLOCQ+mmwZaNbdKibCrPqKO6:jUv8qfx/1OJmlEibCzn
MD5:	6FA4401E25B9F872925DF833A0AEFB2A
SHA1:	2DC0549BC5570185ED5BF734298C22EE71DE9430
SHA-256:	0667759FF26F12E1E7B6594C495B4FA16A3A03A2954078728C489F093E767183
SHA-512:	20F7BA8AC3E044E18F6E98178C50C1C0E2E92572DF95188129D2FEACBE937F73D63B7B42003507F1F474520729C7A7F096B039B18FBEC95C47B2615D3ACA6846
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/app-a9735616a727a9b1be92.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[2],{"+VNo":function(t,e){t.exports="\t\n\v\f\r .................\u2028\u2029\ufeff"},"+ZDr":function(t,e,n){"use strict";n("n7j8"),n("OeI1"),n("JHok"),n("WevN"),n("TAD1"),n("sC2a");var r=n("TqRt");e.__esModule=!0,e.withPrefix=d,e.withAssetPrefix=function(t){return d(t,"/covid-19-ac-assets")},e.navigateTo=e.replace=e.push=e.navigate=e.default=void 0;var o=r(n("8OQS")),i=r(n("pVnL")),a=r(n("PJYZ")),u=r(n("VbXa")),c=r(n("17x9")),s=r(n("q1tI")),l=n("YwZP"),f=n("LYrO"),p=n("cu4x");e.parsePath=p.parsePath;var h=function(t){return null==t?void 0:t.startsWith("/")};function d(t,e){var n,r;if(void 0===e&&(e=""),!v(t))return t;if(t.startsWith("./")\|\|t.startsWith("../"))return t;var o=null!==(n=null!==(r=e)&&void 0!==r?r:"/covid-19-ac-assets")&&void 0!==n?n:"/";return""+((null==o?void 0:o.endsWith("/"))?o.slice(0,-1):o)+(t.startsWith("/")?t:"/"+t)}var v=function(t){return t&&!t.startsWith("http://")&&!t.startsWi

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\back_to_top[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	529
Entropy (8bit):	4.819517992623224
Encrypted:	false
SSDEEP:	12:wm5GQ1j4R3NTDhuyguA2sGjFr1HHL1YsWp8m5GW1u86rHL:56/Dn1ACF1Hr1HWjKrr
MD5:	1539CD1795DA850B1FE05E3D979DFDD3
SHA1:	92DCA6BE12A6906FBEECF2955C731807565CBBA1
SHA-256:	AD501F10C168FD148081CD3533E3C621FCAC63CBB32E36CBE832655C541996C1
SHA-512:	81BBE4965F472A7D22D3823785D1E9A62619EC61507D2ADBA762E5531AEBE645B14D8B233DD26B8DD5621282BAD1F72FCDCDA1F97E091D502806579EF2E853DB
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/modules/contrib/back_to_top/css/back_to_top.css?qrgttk
Preview:	#backtotop {. background: url(../backtotop.png) no-repeat center center;. border: 0;. bottom: 20px;. cursor: pointer;. display: none;. height: 70px;. position: fixed;. right: 20px;. text-indent: -9999px;. width: 70px;. z-index: 300;.}..#backtotop:hover {. opacity: 0.8;.}..#backtotop:focus {. opacity: 0.6;. outline: none;.}..@media (-webkit-min-device-pixel-ratio: 2),.(min-resolution: 192dpi) {. #backtotop {. background: url(../backtotop2x.png) no-repeat center center;. background-size: 70px 70px;. }.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\back_to_top[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1237
Entropy (8bit):	4.59414829644007
Encrypted:	false
SSDEEP:	24:2v/WFCy5VKm2WNcklMHdl2W9cnxcm4LAwEM8ecnxcmqS/cuDlPWSlFGlxqaunv:F5MmOka9nKd4EwrfKdX/pdPGyaG
MD5:	919FAD4E6F86603BBAF5A7606E8F6D02
SHA1:	7A3EF573004FF5DD49BD15DAFC2776066DEC009C
SHA-256:	34FE1A9D6C921F918BC8D1D37913A4DEBE03BF81F2A01CDBFA7897565E819794
SHA-512:	C8F9EF62C17F717C70484D58ECF7CA0049C9BD662C175379F7965B75ACB8E8016A97D50529CBE9AB39AFE4FB1F91E8D7256D5F9952B3BD3355B616935365306E
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/modules/contrib/back_to_top/js/back_to_top.js?v=8.9.13
Preview:	(function ($) {. Drupal.behaviors.backtotop = {. attach: function (context, settings) {. var exist = $('#backtotop').length;. if (exist == 0) {. $("body", context).once('backtotop').each(function () {. $('body').append("<button id='backtotop'>" + settings.back_to_top.back_to_top_button_text + "</button>");. });. }.. backToTop();. $(window).scroll(function () {. backToTop();. });.. $('#backtotop', context).once('backtotop').each(function () {. $(this).click(function () {. $("html, body").bind("scroll mousedown DOMMouseScroll mousewheel keyup", function () {. $('html, body').stop();. });. $('html,body').animate({scrollTop: 0}, 1200, 'easeOutQuart', function () {. $("html, body").unbind("scroll mousedown DOMMouseScroll mousewheel keyup");. });. return false;. });. });.. /*. Hide show back to top links.. */. func

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\banner-icon-alert-xsmall[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	684
Entropy (8bit):	7.561648097484827
Encrypted:	false
SSDEEP:	12:6v/7sYYX5dVmWzel3kMAvpK2Wm3G8Swqf3lOy39rIlh7fnRb:JYU5dVteSZ7q8SwMl9BIX5b
MD5:	9C107EF16D799B14DF23AC4F2BAC0820
SHA1:	F6D0961B1AE9086F3682CC9A302E4B197D150B3B
SHA-256:	B0ED8B23CF003933CA5E0D8C1A7254FAEF9C16458BE3BCEBE1E094CC1E240603
SHA-512:	903BAF4D512B792034E8D50216B24BE15E232686E228A13C1E4D41179E1B6F76EF2F605B35CEB90D9159DFE31E2FAD6AE04E6D4B178929F405BDF59CE09E8980
Malicious:	false
IE Cache URL:	https://files.ontario.ca/banner-icon-alert-xsmall.png
Preview:	.PNG........IHDR...#...#.......Y....pHYs...........~....^IDATX..1h.P....AC.\.A..... ....t..sp.D.4..v..w..(....p..."q...]qh..).!.%..;..K....n....../..^%.".J5.%.......#..\..z..u.J...4.)@...7..zNG.F5.&`...k...J.....Q..q.KJ........jX.`D}.YbY]Y...].m...;\.\|!+.#.Z.0".n..x..&../...._...jX.4g.y.Y]Y.z^.q)od-..4.jX&...U...r..\|T.F......w...?e...4....`..'Ea6T.Z....px.......pF26S..o!..~.>..ZY>..Nd~.K...6.....Y..[]..2.\.^...."J..d.....[......\|.....Q......`M_....;.Q..2......`:.W.......s\..g..=.m..n.i;O5Y.......`M_...kE].N..w>.!";..n..4....1..=..... /'..SC...2..z.zN.t. 5.8T.H.D9..w. .Y .0.@:...b.x.z.-{%b...(r...H+..@.~&6...v....n..Eg.i.x..s..xX.ToI.....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\base[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	1644380
Entropy (8bit):	5.579185646972128
Encrypted:	false
SSDEEP:	12288:vNetzXRr0KR2GRMzKBZcmknN7TTSacwH2AvJRa9DOc9uzP:1et10KfMzKBZcmkN7Te1EsJwzP
MD5:	A3F4FCB79410AB0223E07AF957F25866
SHA1:	658770C407CB2D1C9F66AC5FA8831A9F33831E7E
SHA-256:	4B76A2DD7B5DBE0AAAE16DC3C414486896335CCB82F0C9A4E0F0FF3739FBDDC7
SHA-512:	AC6E586AD38145288532242578324E4283B8702C7F20DD08503BD22BE8ECDE3FE75690CCCE1B83045F88380E07C4CAB6BDCA50D94349C719E3420CCFCC7063C1
Malicious:	false
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var ba,da,aaa,ia,ka,la,pa,qa,ra,ua,va,wa,baa,caa,xa,ya,daa,za,Ba,Ca,Da,Ea,Ia,Ga,La,Ma,gaa,haa,Wa,Xa,Ya,iaa,jaa,Za,kaa,$a,ab,laa,maa,cb,jb,naa,qb,sb,oaa,xb,ub,paa,vb,qaa,raa,saa,Fb,Hb,Ib,Jb,Mb,Pb,Qb,Tb,Zb,ac,ec,fc,ic,kc,lc,vaa,mc,nc,oc,wc,xc,zc,Gc,Nc,Oc,Sc,Qc,zaa,Caa,Daa,Eaa,Xc,Yc,$c,Zc,bd,ed,Faa,Gaa,dd,Haa,kd,ld,md,nd,qd,rd,sd,ud,Jaa,vd,wd,Ad,Bd,Cd,Dd,Ed,Fd,Gd,Hd,Jd,Md,Nd,Pd,Rd,Sd,Laa,Td,Ud,Vd,Wd,Xd,Yd,ee,ge,je,ne,oe,ve,we,ze,xe,Be,Ee,De,Ce,Qaa,le,Qe,Oe,Pe,Se,Re,ke,Te,Saa,Xe,Ze,We,af,.bf,cf,df,ef,ff,gf,lf,mf,nf,Taa,sf,of,uf,xf,yf,Ef,Bf,Cf,Uaa,Ff,Df,Gf,Hf,Vaa,If,Jf,Kf,Lf,Mf,Of,Nf,Pf,Qf,Yaa,$aa,aba,cba,Uf,Vf,Wf,Yf,$f,bg,hg,ig,lg,dba,og,ng,pg,eba,xg,yg,zg,fba,Ag,Bg,Cg,Eg,Fg,Gg,Hg,gba,Ig,Jg,Kg,hba,iba,Lg,Ng,Mg,Pg,Qg,Tg,Rg,kba,Sg,Ug,Vg,Xg,Wg,mba,lba,Yg,oba,nba,pba,ah,qba,ch,dh,eh,bh,fh,rba,gh,sba,tba,ih,xba,jh,kh,lh,yba,nh,ph,sh,yh,Ah,xh,th,Bh,zba,C

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\book-vaccine[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	114036
Entropy (8bit):	4.88625280764325
Encrypted:	false
SSDEEP:	768:YKo9BNvyFBGnbdrFnQQLWRxmk/Y5hfVNp/cOh5fn+Rh0cbyF6QlKA6mPPg/P:YKo9BNvybGbdZnQDxmzmRGjEHP
MD5:	F994B6380BA1CE89DD0EFFF5069DED0C
SHA1:	B2EA52F328956DBCAFB313D8F1303523A5283444
SHA-256:	79CA3D4D80368302418D7BADD8C9D2C046E5179362C0BFDCB962B8E9863338E8
SHA-512:	8512A0EC0D96F0D07F767CD66BF20BBD1EB47BC039EAD85492057613CA10E5DC994AEB81E0EA8E9EB9D9E8139B2872554CCBDB20540FAAF39BF4A58F7EA31824
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/book-vaccine/
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta name="description" content="Find out how you can schedule your COVID-19 vaccine appointments">. <meta property="og:locale" content="en-CA">. <meta property="og:site_name" content="@ONThealth">. <meta property="og:title" content="How to book a COVID-19 vaccine appointment">. <meta property="og:url" content="https://covid-19.ontario.ca/book-vaccine/">. <meta property="og:type" content="website">. <meta property="og:description" content="Find out how you can schedule your COVID-19 vaccine appointments">. <meta property="og:image:url" content="https://covid-19.ontario.ca/c19-book-vaccine-assets/social_image_en.png">. <meta property="og:image" content="https://covid-19.ontario.ca/c19-book-vaccine-assets/social_image_en.png">. <meta name="twitter:title" con

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\co-covid-19-icons-workplace-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 101 x 101, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1734
Entropy (8bit):	7.135004662670737
Encrypted:	false
SSDEEP:	48:4NkKoAuPnrPTrurr+iDobpMPuBLSqS05znEH+SoH:4BD0TLSqfpnp7H
MD5:	630DC64C876E8AA078295DD8B9CEB640
SHA1:	5455A8DB103AF0DE27ADF7825EA0ADDE32D94BFC
SHA-256:	A3ABD4483DE4E1B314DDBB09DCBCB7A8DF8716E2F6A098994AD710682D055D7C
SHA-512:	06D674A9D10261FBCE64C121A2A7BF8E23E6F847CBA4BFAF6FE76E97FC7C34F7EAFA1EEACC7B27FF0C86428285B380395DEE74E5E75702E13703F6D9D31175FB
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-workplace-2020-12-21.png
Preview:	.PNG........IHDR...e...e.....c......(PLTE...................................................................................................................................................................................................................................................................................................................................................................................................................................................$$$)))...333666???BBBEEEHHHMMMRRRSSSUUUVVV\\\fffkkkpppwww.............................................................`".....tRNS.................. "#$%)+,-./0123789:;<=>BDFGHIJKLMNabdefjloprstuvw....................................................................M.......bKGD...;g....IDATh...WW.A...E.T.Gl.P........F..j.@@.$HI.D...HGQ@..DQ..O.{^.-.$[f....sv..........T".i..j...+.Y...[i..<.&%..x.9.T.JbcJ.HHM....";H..0F..s.d..lc.9.a.<._...../.I4......w..t..KBB*@U.......2..^...:..w.[.CZ.<....%..= ;..)/..P.`K}..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\component.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	53285
Entropy (8bit):	5.169887911708994
Encrypted:	false
SSDEEP:	768:sy+ta8OMxBTedmgGhnAuhxrZJCGGVbmY2O4BfwPZnuj8VddPm0PjXKYhAClg:LqlRoZjddOiXKYhACO
MD5:	31F620E726F456732B9A64BBE2BE7A40
SHA1:	517BE2F6D5C0537E1B1485803A280F232683D709
SHA-256:	5083CBFC6D40E35C5A2D800E0B1B0A0F624AF5E842D23C0985B4225011A26421
SHA-512:	209977E8F2F413322C62F85F0DA680D821D111DB59DFE90EEFB19E40DC12B39B18EB29C04F31ED6DCF7F7CD18EA1BCF780C43249440E20B992D46884CD996785
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/component.min.js
Preview:	"use strict";angular.module("onesite.component.directives",[]).directive("onesiteHeader",["$filter","$timeout","languageService","routeService","redirectService",function(e,n,i,o,a){var l={en:"page/government-ontario",fr:"fr/page/gouvernement-de-lontario"};return{scope:{contentNode:"=",search:"=",update:"="},restrict:"E",replace:!0,transclude:!0,templateUrl:"/core_modules/component/partials/onesiteHeader.html",link:function(r,t){r.pathLogoHeader="/img/logo-ontario@2x.png",r.pathLogoPrint="/img/ontario@2x-print.png",o.regulateRedirect(t),r.altLang=i.alternativeLanguage(r.contentNode.lang),r.update.header=function(e){r.altLang=i.alternativeLanguage(e.lang),angular.isFunction(r.update.taxonomies)&&r.update.taxonomies(e.taxonomies),function(){var t=this;n(function(){t.click();var e=t.find("p.show-for-sr")[0];e&&angular.isFunction(e.focus)&&e.focus()},0,!1)}.call(t)},r.headerlogoAliasCollection=l,r.aliasToPath=a.aliasToPath,r.changeLangOnly=function(e,t,n){return function(e,t,n){var r=this;

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\covid-19-main-theme[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	144817
Entropy (8bit):	4.993832219720816
Encrypted:	false
SSDEEP:	768:r8/jk31n3cumEPWbhJKTpydeEFNV5n9fXboaGoswm4lHgKGYsjh+cefR8i:Abssur1EFNVHnGoswm4lHgKGYsjh+cs
MD5:	085E2441EC091BAD5A18860D5762DD73
SHA1:	5544BC5CE438A323882B2C25C9203504F72EED1C
SHA-256:	C4A3F28EAF72B342036F69183E0DE6D708B31F19154ABE583BEE35540D673CB9
SHA-512:	B00D40DC553146187923A461F2816FE3E5DD1EDEE5B1E125A9A8BCD385F85683B5168EC08121F7026099FFE99BC96B23AEC23BC89F78F862584ED01B5B61ECA1
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/refactored-css/covid-19-main-theme.css?qrgttk
Preview:	.ontario-button:active,.ontario-button:focus,.ontario-header-button:focus,.ontario-input:active,.ontario-input:focus{box-shadow:0 0 0 4px #009adb;outline:4px solid transparent;-webkit-transition:box-shadow .1s ease-in-out;transition:box-shadow .1s ease-in-out}.ontario-h1,.ontario-h2,.ontario-h3,.ontario-h4,.ontario-h5,.ontario-h6,.ontario-sidebar--left>ul>li>a:first-of-type,h1,h2,h3,h4,h5,h6{font-style:normal;font-weight:700;text-rendering:optimizeLegibility;margin-bottom:1rem;-webkit-font-feature-settings:normal;font-feature-settings:normal;font-family:Raleway,Open Sans,Helvetica Neue,Helvetica,Arial,sans-serif}.ontario-h1,h1{font-size:2rem;letter-spacing:.04rem;line-height:1.2;margin:2.25rem 0 1.5rem}@media screen and (min-width:40em){.ontario-h1,h1{font-size:2.5rem;letter-spacing:.04rem;line-height:1.29}}.ontario-h2,h2{font-size:1.6875rem;letter-spacing:.03rem;line-height:1.33;margin:0 0 .75rem}@media screen and (min-width:40em){.ontario-h2,h2{font-size:2.0625rem;letter-spacing:.02r

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\favicon-32x32[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1336
Entropy (8bit):	7.776296896714416
Encrypted:	false
SSDEEP:	24:2ELyu9N214knvN7rkS5PA3uEJHg1zTX6M4iQ7VfEVWnGrgbmVs/1:2Ee/ik17bZA3uEJA1zTXH4xEVWnMgya1
MD5:	BB3DEBD3FE12736EE94C99D20D42FFD3
SHA1:	C2C87994245FDAE0B3093B80614B202F90099D27
SHA-256:	EE877BF7E33D22CD354278EDBA7FB9DADCAAB3FABEA37CD8E3AFCA2FD824503D
SHA-512:	02AE48449B746503D22940E24F2796E44E14D52870B82C36DC3F7F902EBBA3D012DF9605BFB7083ABE1212452DEB82D89FFAF9220057A8BEDC2662ABC19D37DA
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/favicon-32x32.png?v=95d5a2a6253850552d499cd53df6b4a2
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~.....IDATX.W[(.Y..{....f\2n..7..(3[<.... .h<)e.<y..@.x@).9..a.t..(N....1..Y.j}.......\|....}.o}.f3&..;....g.1.m.G...d..a......k.3M..........Vb&.-`4.7.{..t..%.D...r.3..Ka.V.U........wK...K..ma....B.$7...aW....l.Y.O.BoU!<..;...n.....p...7b(...gH..{..j.P....%.=<<4.b..5..$.....).~~~...............t:!66Vc.#00....................BP<..".........r.....'P...........3......v....#......EHKK.1aH..I.,.s6.........`kk....auu....uB...........666`nn.....z...2r.....>(@..{....*....kHf......\.....{....cn.$.[...........S,Pl.C...1..&......oFw........M....................4'.....&j....f}}}\|........1:.........v.!++....../.,.#....p1H....l.b.A7-JHH...s~...8xzz..8..............&f...iff.....I..[.q.....i.........-88."##u....4.GGG....j/...7.....z.....{rr..Abb"...r. ...IM`....T.B&..fZ.H.,(.9........4....)....b......!!...`}}.3hmm.......,PH....+..1pj..........Cjii..c@bL .........N.R..SWLLLp&...:.0...S..0.....?I.X.BWW.V.e&.l......

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	2.2429689033058424
Encrypted:	false
SSDEEP:	96:Ml3XHQgQw4F2VF8InOanFxRvYaNsKQZA4/mnNe:63XHQfYsyneaNsC4enN
MD5:	09BD5B5426A668D935E28A5E7B667AC9
SHA1:	1555B05E7D4BE697F795F148D157872361779375
SHA-256:	AEB3B21855F07B7E9E2632483B0A24488A8F294A152E2D64B96C8A4145A55B51
SHA-512:	B57B5ECA260F7B5EEC154969FAACC5224D5ABBC922B1F033F0ADB667AE77544E0002659BA010216D52C634A1ED2B490C5D1E4A2BF3A92D60FF030F2FB276F5B8
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/favicon.ico
Preview:	......00.... .h&..6... .... .(....&........ .h....7..(...0...`..... ................................................................................................,...J...j...................................j...J...,...........................................................................................................................5...z...........................................................................z...5...................................................................................................l...................................................................................................l...................................................................................i...................................................................................................................i...................................................................$..........................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\footer-default-supergraphic-logo[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	655
Entropy (8bit):	5.4192569642679995
Encrypted:	false
SSDEEP:	12:TMHdPhGi/nzVJ/KYf3nwnTDHLdudmT6vb7bULtsXKX:2dMATLf3wnTDrtCg2KX
MD5:	A5F24D16C913DF02269E8AA8515411FB
SHA1:	230ADB5E203A9DDFB0847640A73CCB37A28D4BE9
SHA-256:	CBF618B92A9CDFBC7A976BA731D29E190E08C1F98C4D8A315EFE6F946FEB02FF
SHA-512:	C61FD75534E3D7ACCF1B060E5A1BD50BA61C478E008939AC6FF451D8C814329CCF37924D7A54B6B62BBC89D0D33EB659EE5D86A8379E6FD65D4E207699B43848
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/logos/footer-default-supergraphic-logo.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 4410 4093" xml:space="preserve" height="4093" width="4410">.<style type="text/css">...st0{fill:#1A1A1A;}.</style>.<path class="st0" d="M2494.4,0C1689.4,0,805.7,218.5,0,772.3l362,856.2c590-449.3,1330.4-725.9,2131.5-725.9..c299.5,0,601.5,45.4,880.6,118.1c-227.9,821.4-749.4,1560.5-1556.8,2054l99,1017.9c1586.7-773,2382.7-2252,2493.7-3652..C3831.3,161.3,3177.6,0,2494.4,0z"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\foundation-6-dropdown[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1646
Entropy (8bit):	4.864857788902514
Encrypted:	false
SSDEEP:	24:SUkoiiJBoVwvR1E1ioJfFAjNAEGZr18ApxlQS9EQyKFWaEEd:NiiJNvEtJiuEGZr18ApxlQvQyKFWaEEd
MD5:	1997E1D1A551670EF3A501A65AFAEA60
SHA1:	52B6AE1D335EC323A267A9C0573CC0AE1CDEDA89
SHA-256:	31763C3827BF8E1BA940B539BBD396D090D39BD6BEFB4A01F663BBC5E8770924
SHA-512:	5BB67346AD6A57179ECC8FC158ED2681894FF65A7656E03AC8E1D430C2ECA931BFC6C6CC87568BDB0E6D550DB5FBE9E5EB34852DAA220BADF40E9ADFE6A9FE03
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/vendor-assets/styles/foundation-6-dropdown.css?qrgttk
Preview:	@charset "UTF-8";./*. Foundation for Sites by ZURB. * Version 6.6.1. * foundation.zurb.com. * Licensed under MIT Open Source. */....button.dropdown::after {. display: block;. width: 0;. height: 0;. border: inset 0.4em;. content: '';. border-bottom-width: 0;. border-top-style: solid;. border-color: #fefefe transparent transparent;. position: relative;. top: 0.4em;. display: inline-block;. float: right;. margin-left: 1em;.}...button.dropdown.hollow::after,..button.dropdown.clear::after {. border-top-color: #1779ba;.}...button.dropdown.hollow.primary::after,..button.dropdown.clear.primary::after {. border-top-color: #1779ba;.}...button.dropdown.hollow.secondary::after,..button.dropdown.clear.secondary::after {. border-top-color: #767676;.}...button.dropdown.hollow.success::after,..button.dropdown.clear.success::after {. border-top-color: #3adb76;.}...button.dropdown.hollow.warning::after,..button.dropdown.clear.warning::after {. border-top-color: #ffae00;.}...button.d

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\jquery.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
IE Cache URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\libs.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	415978
Entropy (8bit):	5.237457563501528
Encrypted:	false
SSDEEP:	6144:NO16SvjX9kv4VgkVr/H+Ef0/W9sY6pNaZLutgUJ:NVYtkA3jPsYDyiUJ
MD5:	49763D93C2BABB3D39CF2FECC55E651F
SHA1:	F9CCC005BC35C2DD1ED7D116C2DC9811B3BAD4CA
SHA-256:	6875D73440C8B7D1F3CC68CE7AF3BEBAE7A5F87424D704608FD1CF2899A53AB6
SHA-512:	6B59C94425CEC12FC1B4D4135E707968B416E3237F713B198616DE279BBCDA35BFF220A23B16664351EC75D6A9E2A85DF1B3B2B8963916B1858B726D8087B457
Malicious:	false
IE Cache URL:	https://www.ontario.ca/js/libs.min.js
Preview:	"use strict";var _typeof="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function(t){return typeof t}:function(t){return t&&"function"==typeof Symbol&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t};!function(c,l,n,a){var t,e;t=["foundation-mq-small","foundation-mq-small-only","foundation-mq-medium","foundation-mq-medium-only","foundation-mq-large","foundation-mq-large-only","foundation-mq-xlarge","foundation-mq-xlarge-only","foundation-mq-xxlarge","foundation-data-attribute-namespace"],(e=c("head")).prepend(c.map(t,function(t){if(0===e.has("."+t).length)return'<meta class="'+t+'" />'})),c(function(){"undefined"!=typeof FastClick&&void 0!==n.body&&FastClick.attach(n.body)});function d(t,e){if("string"!=typeof t)return c(t,e);if(e){var i;if(e.jquery){if(!(i=e[0]))return e}else i=e;return c(i.querySelectorAll(t))}return c(n.querySelectorAll(t))}function i(t){var e=[];return t\|\|e.push("data"),0<this.namespace.length&&e.push(this.namespace),e.push(this.name),e.j

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\logo-serviceontario@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 314 x 76, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3429
Entropy (8bit):	7.890173045368409
Encrypted:	false
SSDEEP:	48:C/6BjsSsRFT00zid+42Av1T51eeGM21wq5CBJj/BbpCIdazdCTEetQj4LFBBxxoj:CSBwSC50Kisi+CNbpC6azm+j4Llkj
MD5:	140AB78A5FD95A567C1E91E8BDA59E72
SHA1:	C36C77A4C3D2AD9C926DA8C6A18280BC007BC1E7
SHA-256:	ADE4510791D1B4997FE624230C4621811B9B7624394262500C8B592607AEC214
SHA-512:	4EE41DD144C7F16B5A614279AB7D345BBB7C7C7A94980F35B2051AE1A1C1D60314A7A77A4773D4437147AF94265B166657479D61A5CC1BD2EF3FA3EA3D187331
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/logo-serviceontario@2x.png
Preview:	.PNG........IHDR...:...L......N{4....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx..?.]G..-7.$.P..HX..R..H.....$.(..H...o..."R8U..48R6JJ.LC..F.....HA..P`.)$e..Xgs3.3w.}s.\|..y..}w...9s...d...AX]........ .+.... ..... .":A.... ...N..AD'.. ...A.... ...A.... ...A.Dt. .":A.... ...N..AD'.. ...AD'.. ...A.... ...A.Dt. ..qdV?.......k...}.......{..............fryse.lzr....x.?.6...........sp....y.Wo..l.iGD.c..G...6.o>.........k..l...i........AWrz...'../.\|...'.kv..s.}.j ?A.....~...r..E.-......<.\|../....?7y...w....!.....v.m.&9....4.>u.7........".0.GG.z..........`.v..T..,'.=............y#/..Bvk.~:.1Yn...t.L.s.aV...'<.;...9.S.S.=...%Yfp...+9...Gr...[;!..7...y.Ky..`.g...:.a.<..n......\.%..0h....M^.<.....~....>..$;.vx...F%:/OBY.X.#.+..Gh%..KU....E.[......K.b..f)g.9...<W$W>.!.....7.).1..+}Ze...G...\....uo.d...;zw...\II...n\..j..a#..p..s.Z6.L.$......0..~N.l...Sj.w.fv..f.yU]^.... ...Q..._..g.......w.....~..Jy....c...<.}.E0.T~..y;..u.z..G..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\logo-serviceontario@3x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 828 x 188, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	24516
Entropy (8bit):	7.971561164547846
Encrypted:	false
SSDEEP:	384:yCr/t9JbCkqYQ7rgwk321q5cnq+iq37GTiu9uoozt3mdPh/o51ol7XES5DkE1p1s:yCr//Ju/7rgwxFnqlq37GOztoPS5Kl7g
MD5:	40F71798A45166F3E7D8BEFEC0B0E792
SHA1:	160114222E6595D2FE99B3105F7E1AC4CA0E035D
SHA-256:	B49B863CD7D397BE87B95E00D87BCB29B6A6754EBA20A4A98B65344F0C240CF2
SHA-512:	D254944F64B316DA42EB7695B24EF23177C7E5F5701814FEEE1EB547F5441EA9761B245AECBD39212F08B3660635E70E5AB1D27F2F5F215B62D1BF2BD9C795EE
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/logo-serviceontario@3x.png
Preview:	.PNG........IHDR...<.................sBIT....\|.d.....pHYs..........+......tEXtSoftware.www.inkscape.org..<... .IDATx...w`..?....l....%..l.w.m06.t..@B.......B.$.o8.wI..q)......b....mY.eY....2..C.C\..]i....H..y.l..g....0xd.n.B.!..B.T%"......0..Z!...t..E.!..B.!.1..cT..<0.;)."..B.!...@..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[...B.!..B...<..B.!...E..!..B.!$lQ.C.!..B..[..^.!dja..z......%.(...+.AX.!...cX.y%........v...(.ae$.Q.3...A....Px......W...<..........x ...Q........!. B..... =2...v....V4.t.aed..X....)..8(9..Hp...`...k....K..#..nxE

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\mainstylePHealthPortal-en[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	183016
Entropy (8bit):	5.350996575136658
Encrypted:	false
SSDEEP:	1536:npXGjUEJk15LDm4oUB5eXXmwDm4oUB5el/7kQ:pXcdJkBB567B5s7kQ
MD5:	19B829E81CBE2523FC9BA03C18DA3FE9
SHA1:	E97FAF1F9C6B26629D20AE560288E2076B0658E9
SHA-256:	BBF22F54AB8486ED6CBAAA3BBD09E81A1FB262B2B340868AECA7E4B458FEAEAA
SHA-512:	72C754C622D73063CDA15B6D758018BEDD798873B4E83D209BAAFAA8AA5A4BE329F301B5AA036C42FCA4FA62AB1D0A2CCB3EAB1EABB3685B1A8F9669A67ABDE6
Malicious:	false
IE Cache URL:	https://www.phdapps.health.gov.on.ca/phulocator/Style/mainstylePHealthPortal-en.css
Preview:	/*** begin PLUMTREE PORTAL 4.5ws STYLES ***/..A..{COLOR: #000000;}...inputBox..{FONT: 10px verdana,arial,helvetica,"sans-serif";}...linkCap..{FONT: 10px verdana,arial,helvetica,"sans-serif"; TEXT-TRANSFORM: uppercase; COLOR: #000000;}...linkCap A..{TEXT-TRANSFORM: uppercase; COLOR: #000000;}...wizBckgrndClddNarrow..{BACKGROUND-COLOR: #F4F4F4;}...wizBckgrndClddWide..{BACKGROUND-COLOR: #CCCCCC;}...bnr..{FONT: bold 10px verdana,arial,helvetica,"sans-serif"; COLOR: #FFFFFF;}...bnrDate..{FONT: 10px verdana,arial,helvetica,"sans-serif"; COLOR: #FFFFFF; TEXT-ALIGN: right;}...bnrHead..{FONT: bold 14px verdana,arial,helvetica,"sans-serif"; TEXT-TRANSFORM: uppercase; COLOR: #FFFFFF;}...bnrHelp..{FONT: bold 10px verdana,arial,helvetica,"sans-serif"; TEXT-TRANSFORM: uppercase; COLOR: #FFFFFF;}...bnrHelp A..{FONT: bold 10px verdana,arial,helvetica,"sans-serif"; TEXT-TRANSFORM: uppercase; COLOR: #FFFFFF; TEXT-ALIGN: right; TEXT-DECORATION: none;}...bnrSubHead..{FONT: 12px verdana,arial,helvetica

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\modernizr[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	51351
Entropy (8bit):	4.6306630219418095
Encrypted:	false
SSDEEP:	1536:9RCJ6/KpVsnUMxvXmET56JYFE7qbe/7Y8fjWWy+4GrkfwuXxJ44ipW/VPRLq277a:9j/FjzarzCT71Pts
MD5:	C1FF1650BBA6E39089834E708129D723
SHA1:	7D1CEA058027485E9CCF1A92E38823ACB05C0659
SHA-256:	7DFC3EF73C1284C7AFF3C5CDAC3812D212C8B899037D7860C8BA20A1DEFB9A7F
SHA-512:	94EB43018F4A313D561FD171E894AE64B1F18C2F30988071B0D14BEA024F686EEC2C856848EF720AB6963B0A8B2D7FADC6C3B0D21D9C1EF71426524FBCC968B7
Malicious:	false
IE Cache URL:	https://www.ontario.ca/vendor/modernizr/modernizr.js
Preview:	/!. Modernizr v2.8.3. * www.modernizr.com. . Copyright (c) Faruk Ates, Paul Irish, Alex Sexton. * Available under the BSD and MIT licenses: www.modernizr.com/license/. /../. * Modernizr tests which native CSS3 and HTML5 features are available in. * the current UA and makes the results available to you in two ways:. * as properties on a global Modernizr object, and as classes on the. * <html> element. This information allows you to progressively enhance. * your pages with a granular level of control over the experience.. . Modernizr has an optional (not included) conditional resource loader. * called Modernizr.load(), based on Yepnope.js (yepnopejs.com).. * To get a build that includes Modernizr.load(), as well as choosing. * which tests to include, go to www.modernizr.com/download/. . Authors Faruk Ates, Paul Irish, Alex Sexton. * Contributors Ryan Seddon, Ben Alman. */..window.Modernizr = (function( window, document, undefined ) {.. var version = '2.8.3',..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesite-analytics.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	3387
Entropy (8bit):	5.059305558706283
Encrypted:	false
SSDEEP:	96:N/vaLKsMcz+O7ExvPw9DNLPcjPiB99fkMD5Cp5mCqI+durVi:NkMQuE1oi
MD5:	C39507E3A4CDA01C1BD9B02103241886
SHA1:	828E2A9DCE54355640A572487982A171CA367B45
SHA-256:	91AD764A124D3068A6656221CCE93607FAB7D3C51B4126344D6707F18F228C58
SHA-512:	F3BE53E35E97BBECD2663D6A6BB0F5C58186E979A1B8198994BCC33D547A023EE5542E5D530C299E9F45119F92F157F8A4C9986952DDAE8249CD43210420C5FA
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-analytics/onesite-analytics.min.js
Preview:	"use strict";angular.module("onesite.analytics",["angulartics","angulartics.google.tagmanager","onesite.analytics.directives","onesite.analytics.filters","onesite.analytics.services"]).config(["$analyticsProvider",function(e){e.settings.trackRelativePath=!0,e.registerEventTrack(function(e,t){if(t.category=t.category\|\|"missing-category",t.value){var n=parseInt(t.value,10);t.value=isNaN(n)?0:n}if(window.ga){for(var i={eventCategory:t.category,eventAction:e\|\|null,eventLabel:t.label\|\|null,eventValue:0===t.value?0:t.value\|\|null,nonInteraction:t.noninteraction\|\|null},a=1;a<=20;a++)t["dimension"+a.toString()]&&(i["dimension"+a.toString()]=t["dimension"+a.toString()]),t["metric"+a.toString()]&&(i["metric"+a.toString()]=t["metric"+a.toString()]);ga("send","event",i)}})}]);."use strict";angular.module("onesite.analytics.directives",[]).directive("scrollToBottom",["$window","analyticsTypeaheadService","analyticsEventService",function(n,c,t){return{restrict:"E",scope:!0,template:['<div ng-init="si

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesite-health.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	2716
Entropy (8bit):	5.191556252285694
Encrypted:	false
SSDEEP:	48:/0MiqXssrzHoSbzpDlDvpcijZiWU2LLafkI1HbZ8GVLMDyOlnbxN09Xp2fn:/WszFbzNlDvv02LL211GGV/Olnb052f
MD5:	9CD27F9A2902AC378467C824DB978A5B
SHA1:	05D4E5D36B35783E034ACC6A5268D28E2E69082C
SHA-256:	EC78B2DC4F57E8D83AE6244B7C6DECD315C0544811D137F3D96D92C842F0B845
SHA-512:	EB25B8A78245E0DD88B4A9918CE7BCD4BC9F79DC61D4DF6FE7607D083FBBA0C77182E563F4968C56E55E86D0C8C8AC3CD35C40D79464DC71DA64FE5155B4B50E
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-health/yellowCard/onesite-health.min.js
Preview:	"use strict";angular.module("onesite.health.yellowCard",[]);."use strict";!function(){function e(o,n,r){var t=this;t.component="phuForm",t.phuInfo={},t.errorMessage="",t.errorOccurred=!1,t.iconAvailable=!0,t.setComponent=function(e){t.component=e},t.getHealthUnit=function(e){return l(),e=n.transformPostalCode(e),n.validatePostalCode(e)?n.queryForPHU(e).then(u).catch(h):(i(a),o.resolve(!1))},t._setError=i,t._clearError=l,t._formatPostalCode=c,t._isOnIcon=s,t._handleResponse=u,t._handleAPIError=h;var a="We couldn.t find that postal code in Ontario. Please use one of these formats: M5V 3Y3 or M5V3Y3.";function c(e){return e.slice(0,3)+" "+e.slice(3,6)}function i(e){var o=e!==a?"api":"malformed";window.ga&&ga("send","event",{eventCategory:"icon-lookup",eventAction:"error",eventLabel:o}),t.errorMessage=e,t.errorOccurred=!0}function l(){t.errorOccurred=!1,t.errorMessage=""}function s(e){switch(e){case"https://drhd.icon.ehealthontario.ca":case"https://hrhd.icon.ehealthontario.ca":case"https

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesite-holiday-pay-calculator.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	7106
Entropy (8bit):	5.247064945099283
Encrypted:	false
SSDEEP:	96:vBu1+zG/20SAclNek4zNvIkLCEBcNUaFKTVQcuNQOCCHhQ+H+IF/ms:X0OeBzKkmEFZqZuLK6+eXs
MD5:	1E8EA161887BDB34E5719CFB6E6B3D98
SHA1:	0D1A12896A87757326A6D7E6750C5FBFE44D786D
SHA-256:	3B6FD807B693AA20CB3A9A80410E9A3EE1950F2E7D7D6B7A2317EA66680060DB
SHA-512:	95AFD64FEB218445A632F63F9B675242725564E3DA3DBCC954B6846FB61A0593EDFA930B6EAF223A13AFE20712CFCC2E1A540578231C2CC94D1FEDC1A14E602D
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-holiday-pay-calculator/onesite-holiday-pay-calculator.min.js
Preview:	"use strict";angular.module("onesite.holiday.pay.calculator",["onesite.holiday.pay.calculator.services","onesite.holiday.pay.calculator.controllers","onesite.holiday.pay.calculator.directives"]);."use strict";angular.module("onesite.holiday.pay.calculator.directives",[]).directive("onesiteHolidayPayCalculator",["weekLabels","getDateObject","languageService","daysFromToday","selectedCheckboxes","formatDateForAnalytics","differenceInDays","subdayOptions",function(a,t,o,l,s,c,i,r){return{restrict:"E",scope:!0,replace:!0,templateUrl:"/onesite_modules/onesite-holiday-pay-calculator/partials/onesiteHolidayPayCalculator.html",link:function(e){e.language=o.currentLanguage.get(),e.weekLabels=a,e.daysFromToday=l,e.getDateObject=t,e.selectedCheckboxes=s,e.formatDateForAnalytics=c,e.differenceInDays=i,e.subdayOptions=r}}}]);."use strict";angular.module("onesite.holiday.pay.calculator.controllers",[]).controller("OnesiteHolidayPayCalculatorImpl",["$scope","holidaysOfTheYearService","languageService

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesite-live-chat.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	2509
Entropy (8bit):	5.094125766726055
Encrypted:	false
SSDEEP:	48:d/fhCajQVjQVsyKIcOtqEL2tQp4ojMDkeNzBIVTRAm+/9Rf35z8xLu:dnrj2jHyJcIjrVT45z3
MD5:	9E632AD1FEA5C87150A0EB8734EBF28C
SHA1:	C8F783A25FD2BFB5F73BBAE5FBB96B638DA21245
SHA-256:	4114DD2B4A8CA98EB097AFD2D5673D0FBE89BE50E54DAED20490646D9127D32F
SHA-512:	2180583E252D4707362003EE94125739016D0C99A7AE403004249EC42CC806D6082F3444C3FBBB99FE07D8407AA1E59F711B477E21A3B969737EBE89E08109E4
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-live-chat/onesite-live-chat.min.js
Preview:	"use strict";angular.module("onesite.live.chat",["onesite.live.chat.directives","onesite.live.chat.services"]);."use strict";angular.module("onesite.live.chat.directives",[]).directive("onesiteLiveChat",["redirectService","liveChatService","scopeService","stringService","$parse",function(a,i,n,l,e){var o=e("node.content.id"),r=e("node.content.lang"),s={en:"https://www.webchat.ccm2.gov.on.ca/EO_Webchat/iceMessagingWeb/Chat.html?destinationURI=sip:im_990a_sw03@ccm2.gov.on.ca&lang=en-CA",fr:"https://www.webchat.ccm2.gov.on.ca/EO_Webchat/iceMessagingWeb/Chat.html?destinationURI=sip:im_990a_sw03@ccm2.gov.on.ca&lang=fr-CA"},c={en:"page/employment-ontario-live-chat",fr:"fr/page/clavardage-avec-emploi-ontario"},u=["Sunday","Monday","Tuesday","Wednesday","Thursday","Friday","Saturday"];return{restrict:"E",transclude:!0,scope:{title:"@"},replace:!0,templateUrl:function(e,t){var a=angular.isString(t.type)?angular.lowercase(t.type.trim()):null;return"body"===a?"/onesite_modules/onesite-live-chat/p

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesite-moment.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	18921
Entropy (8bit):	5.1828626911292055
Encrypted:	false
SSDEEP:	384:Ak1AdDaYLsp6fL8Ra1p5OZBmf54OMpUgv8SfcBY2Q/VsOgEpK:OuZRcpHR4O+v8Sfcc/2TEpK
MD5:	F4C2C7DCE7F310308F3202F7672E0FBC
SHA1:	3B9A391C9B34E13A9323895F27E30C6C58D803C4
SHA-256:	F9D8A28DA9F0AF8B8BADA0B6CF7A09141E58302062FDA2FD047B2280B10567F5
SHA-512:	44BB499A1905FC467DBDD678598631C71E8E1B00A8680150BEBBDC6CDC85EEB1D932B75D9C0E9764353DF2AFE9918FBB850AEA60BA7675CFBCBAB45ACE0A1147
Malicious:	false
Preview:	"use strict";angular.module("onesite.moment",["onesite.moment.services","onesite.moment.controllers","onesite.moment.factories","onesite.moment.directives"]);."use strict";angular.module("onesite.moment.controllers",[]).controller("OnesiteDateAddImpl",["stringService","timeService",function(i,u){var o=this;o.add=function(n,t,r,e){var a=i.strToDate(n);angular.isNumber(t)&&(a=u.addYear.call(a,t)),angular.isNumber(r)&&(a=u.addMonth.call(a,r)),angular.isNumber(e)&&(a=u.addDay.call(a,e)),o.date=a}}]).controller("OnesiteDateSelectorImpl",["stringService","timeService",function(i,n){function c(n){return angular.isNumber(n)&&!isNaN(n)}var h=this;h.stringToInteger=function(n){var t=(n=angular.isString(n)?n.trim():null)&&""!==n?parseInt(n):null;return c(t)?t:null},h.daysInMonth=n.daysInMonth,h.monthCollection=i.monthCollection,h.dateExists=function(n,t,r){return r<=h.daysInMonth(n,t)},h.updateModel=function(){var n=h.validateYear(h.year),t=h.validateMonth(h.month),r=h.validateDay(h.day),e=angula

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesiteContentDate[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	367
Entropy (8bit):	4.605116063766543
Encrypted:	false
SSDEEP:	6:nsZCdW5KLTeb4am5rKgJq9TRGHKgJWk3TRa+YNWbyRXTuTHRM/:naCV31arQd05D4xy
MD5:	B734290BF6C29ACD25F37BF6AE7C74A6
SHA1:	DD46AB64053914894DBA40EED5991CA9021CD036
SHA-256:	DD1F871501A564211AEF5F7603BC12B2AD7C2C85CEA48EF06E2C43F1BF47A090
SHA-512:	0ACF6894D03AFF6427EBBFFC2584E82CD1AA2BF22BF76ADA4300AB0655E45604CE5E391545A87C63410185A6AC279EE1C663272FB7F4199E012EC639EAF90475
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteContentDate.html
Preview:	<div class="clearfix">. <small class="right". ng-switch="language">.. <span ng-switch-when="fr">. {{ text \| translate }} : {{ date \| date: 'd' }} {{ date \| date: 'MMMM' \| translate }} {{ date \| date: 'yyyy' }}. </span>.. <span ng-switch-default>. {{ text }}: {{ date \| date: 'MMMM d, yyyy' }}. </span>.. </small>.</div>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesiteSearch[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text
Category:	downloaded
Size (bytes):	2666
Entropy (8bit):	4.837246446994693
Encrypted:	false
SSDEEP:	48:5WhhtO+eV79QPdsCDghJsnFO+b+ax25Aqqb6VLH6y4VWQ:5JmPdob1aKX9yVh
MD5:	9458FFA88509BE41D5770C3F17FFCBAC
SHA1:	772F52826CA4A7E6FDDB77A66B44C1842F00A8E1
SHA-256:	C9C63FAFA69AC1298BFB069000050FAFFCB1D7124698B2E469FB632BC133286A
SHA-512:	2EBFA960F6F3B5E6DEDD3AF1FE10975C7B370814D83E62E91FD21C9BA4CE313DEF69DE9E98914B36B69C346386AD562A3CF6B563DC1756EDA83937E63E6A4174
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/landing/onesiteSearch.html
Preview:	<div class="row h4">.. <div class="small-12 large-8 medium-12 columns main-content". ng-init="last={}". ng-switch="onesiteSearchImpl.lang">. <h2 class="hidden-for-small-up">. 1-{{ pagination[0].size \| formatNumber:onesiteSearchImpl.lang:0 }}. {{ 'of' \| translate }} {{ onesiteSearchImpl.total \| formatNumber:onesiteSearchImpl.lang:0 }} {{ onesiteSearchImpl.total === 1 ? 'page' : 'pages' \| translate }}. </h2>.. <div class="results-page". ng-repeat="paginate in onesiteSearchImpl.pagination \| limitTo: onesiteSearchImpl.pageIdx + 1". ng-init="$last ? (last.paginate = paginate) && (last.remaining = onesiteSearchImpl.total - paginate.idx * onesiteSearchImpl.config.pageSize) : null". aria-hidden="{{ !$last }}". ng-class="{last_range: $last}">.. <div class="search-results". ng-repeat="result in (onesiteSearchImpl.resultList \| slice:paginate.fromIdx: paginate.toIdx)">. <div ng-include="'/onesite_modules/onesite-

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesiteSearch[2].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	1046
Entropy (8bit):	4.767655045044842
Encrypted:	false
SSDEEP:	24:hSk2vEu874Qn6WnFXKM0Nr1iFXByxT0JkFX1NnFXBIMv6F:huEN74XKaz1CW+gV0
MD5:	85A46B07F39569490C6F241998C2D57C
SHA1:	830063ABC7535A4ACCCE58C5F766B5DC639BCED6
SHA-256:	8D3F2276D6BABD9F5CC64F8BF7B9A1CBA1125603DF96C189154DC4981ABFD165
SHA-512:	398C297448116031EB815B2FD382A4012A84AB5091EDFEC85739E7E2DC95C7B04884EBA55FA4F5E86D8BA555ACA43181FFEC11B7F13486A655D9264D4CF4D19A
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/openData/onesiteSearch.html
Preview:	<form name="filterForm". ng-submit=". onesiteSearchImpl.filterHandler.dirty = true;. init(true).then(focusOnSearchButton);. ">.. <link rel="stylesheet" href="/css/hideHeaderSearch.css">.. Keyword Input -->. <div class="row">. <div class="small-12 columns". ng-include="'/onesite_modules/onesite-search/partials/openData/searchInput.html'">. </div>. </div>.. <div class="row". ng-init="last={}">.. Search Filter -->. <div class="small-11 end medium-12 large-4 columns". ng-include="'/onesite_modules/onesite-search/partials/openData/filters/control.html'">. </div>.. Result List View -->. <div class="small-12 medium-12 large-8 columns". ng-include="'/onesite_modules/onesite-search/partials/openData/result/listView.html'">. </div>.. Related Links -->. <hr class="thick">. <div class="small-12 columns". ng-include="'/onesite_modules/onesite-search/partials/openData/filters/relat

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\onesiteSearch[3].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	420
Entropy (8bit):	4.753591950889029
Encrypted:	false
SSDEEP:	12:52cCj6HHIqC1iF1FEOyUMi4vTO6HHIqCkF1FEoDMZ:c56IJ1iFjhyUMikTO6IJkFj5MZ
MD5:	C47FF73E533D3EEC271F37C3248881FB
SHA1:	8764E00EFC0D7231DC7D2F80E25ED01740597239
SHA-256:	58D184A6213BEFF13D2ED89F3A0E5C0918E6B7E618220A1030FEEE0873C90B41
SHA-512:	75E03044D07C193BE1CF86C66268276295674CFE2ABED7530BED9DAD76176D25F6AC6C1D91B63BD4FBB017273DFB2E6A270E4BDCA81649D7BE39CC356E338333
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/tradeCalendar/onesiteSearch.html
Preview:	<div class="row". ng-init="last={}">.. Search Filter -->. <div class="small-12 medium-12 large-4 columns". ng-include="'/onesite_modules/onesite-search/partials/tradeCalendar/filters/control.html'">. </div>.. Result List View -->. <div class="small-12 medium-12 large-8 columns". ng-include="'/onesite_modules/onesite-search/partials/tradeCalendar/result/listView.html'">. </div>..</div>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\ontario-header[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6222
Entropy (8bit):	4.844898050083307
Encrypted:	false
SSDEEP:	96:kBZanKVWpDMRcOjUQ7scwYduZLsknKYidfoeF2:kuAa1F
MD5:	BE99F97DEF9F761341863B11742BD8B7
SHA1:	2DA2BF5C7C092012710C2E2C5E28FA99C0C605EE
SHA-256:	FDFDFF5841C35FCB333180DB8B7D5443B39746D4B9A02A2E70CB4474410E9C8E
SHA-512:	A0DBACB887A904F1111E4AC5EF56A15E44E80F651FB6D90BF1AFD692F68783301140DFAA7C9CB2CFF1BD054978BF31056BCFB496C7D42C7376CB4289ABFF097C
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/js/ontario-header.js?v=8.9.13
Preview:	// Utils.function getClosest(element, selector) {. while (element) {. if (element.matches(selector)) break;. element = element.parentElement;. }. return element;.}..// run asynchronously.function deferInFn(fn) {. if (typeof fn === "function") setTimeout(fn, 0);.}../.Header./.(function () {.. "use strict";.. // review browser support. if (!("addEventListener" in window) \|\| !document.documentElement.classList) return;.. var navPanelSelector = "ontario-header-navigation",. isReadyClass = "ontario-header-navigation--is-ready",. isActiveClass = "ontario-header-navigation--open";.. var header = document.getElementById("ontario-header"),. nav = document.getElementById(navPanelSelector),. openBttnToggler = document.getElementById("ontario-header-menu-toggler"),. closeBttnToggler = document.getElementById("ontario-header-navigation-close-toggler");.. var currentTogger = null,. currentDomEl = null;.. function showNavPanel(navpanel) {. hea

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\ontario-icon--error[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	510
Entropy (8bit):	4.8430341235609795
Encrypted:	false
SSDEEP:	12:tvG1W9ocVn7eSZjocTCccTidtxLJXRit5:tu1OVKSZjoScONLJhit5
MD5:	F6BC09EAE0718AE9A3BB69F9AD988059
SHA1:	CA56C9D304B28E584BB203251E15CE8A7D84EE7A
SHA-256:	2CE06C836E10362D58478F672E0A3A106696419D6A07348A8DEA496D2E8AD7D6
SHA-512:	1C15D76F2809B7FA6DE25F88FEE6C6C4FD97C9F82E1486188F037A5F0613AD8FB9E1C2795F1703D34ABADD2A562E17476F5ED72590CDE21A62817E3D92480762
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario-icon--error.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 36.67 36.67">. <defs>. <style>. .cls-1 {. fill: #cd0000;. }. </style>. </defs>. <path class="cls-1". d="M684.91,385.94h-3.67v-11h3.67Zm0,7.33h-3.67V389.6h3.67Zm-1.83-27.5a18.39,18.39,0,0,0-7,1.39,18.67,18.67,0,0,0-5.95,4,18.34,18.34,0,1,0,31.3,13,18.39,18.39,0,0,0-5.37-13,18.28,18.28,0,0,0-13-5.37Z". transform="translate(-664.74 -365.77)" />.</svg>

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\ontario-icon-new-window[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	202
Entropy (8bit):	6.420930108593124
Encrypted:	false
SSDEEP:	3:yionv//thPl9vt3lP3g9xdd2jFf9RmeLwscX1K8NEnIGFFRF8uvJ2L+JTyj4DoWM:6v/lhPwA5fucHUA7FFRF8uMLQP0Wep
MD5:	496D69FC15BAB1E622274C3F25A82E8D
SHA1:	C6C709EEAD93871857DFBBA3915B31E5741BB627
SHA-256:	C6B27AE847797E0F975DF87449A5AC6390A626BBD678F73C13F27C51E31B1549
SHA-512:	ED8AE5979F3A197E10FB0EA586714C59DE193543CB6395ED2C33BDC27B0A34F06BC6C4C2A2919AD5CA416E676AA02CCE06FFD2F66897FBA329A9B0F24E72FCC6
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario-icon-new-window.png
Preview:	.PNG........IHDR................a....pHYs...........~....\|IDAT8...... .D.'`......&:.!j.V/...G..$#.B9mO.V.......d0.[.`..Wp..G......e.&..Q....W0.....V..)....N.....6....u2z..Z.YJ!.w...2.3PI....IEND.B`.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\open-sans-400--italic-4b52a816817a711e6971955c835ecfbb[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 15076, version 1.1
Category:	downloaded
Size (bytes):	15076
Entropy (8bit):	7.960536136856118
Encrypted:	false
SSDEEP:	384:ihKnWsY3Y02JQ9zxRm7TR7NA0tXn/qZOSO7O7RWf5v1X:e2WPp2J2Ct7TXnSsSSSRWhl
MD5:	4B52A816817A711E6971955C835ECFBB
SHA1:	051C5829D5DF0558FC4C8CE02149FB703EA763CA
SHA-256:	14B889CE4EB170C9DEDE3907438E89A1C43E7A8C3E7F3DEB8FB280042CF57BF1
SHA-512:	2D44B2BBB0A66C162ED206CE58BE93F738E45938D41E497E8C3E525A0E06225F64CD335F1854F2475A9664C31127BEF7ECCD2FF630FBF6888C29EA48E55FC541
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/static/open-sans-400--italic-4b52a816817a711e6971955c835ecfbb.woff
Preview:	wOFF......:.......c4........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`.M.=cmap...8...........gasp...............#glyf......'b..8..O..head..D...6...6..'nhhea..\|..."...$...Khmtx..........l.v>xkern..,............loca..6..........t.Kmaxp..8.... ... .d.Ename..8........l.n5.post..9\.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f.f......:....Q.B3_dHcb```.fccfeabby....A!.(..................ah..e.P``...c.`.............x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..{.\S.....7..R.@..C.DT.... ."""....l.....#".....Z..)...-".n./.j.Uk}.Z...U.]..d...7.....m.?1..;g.9s.;g...3.g)jeXF.0..>r5\|.......P*j}..........;..1.......y.(...b...v'?/..+.F.F.z.E..."%~.r[x..'(.............=.>?...1?T.jx......g..Xxw..H.K...AD..d....?.^I.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\open-sans-600[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 24892, version 1.0
Category:	downloaded
Size (bytes):	24892
Entropy (8bit):	7.980207470715338
Encrypted:	false
SSDEEP:	768:vf5xgpxSPojJurx8g6QGrIGQHgBjHBlBU:Xa6WekIGQABjHB4
MD5:	D1EB144B85E1CCF3C660398D393B9A70
SHA1:	C1710C29F77F73F763CD650F4CC09C7B3B316491
SHA-256:	CBBE982CD6E1A0038E47DD30180F9C3358AACEFB1C85FAC5835E3486839445C1
SHA-512:	6D4336191329D53E6CBD0531ABB273E7FA40B8863F99A08200AF81B4FDA6A9A8B94F7B90567CA82DFE28DB848490610BC013B73A886FA4AA413DECF2C0E50E5F
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/fonts/open-sans-600/open-sans-600.woff
Preview:	wOFF......a<.......8........................FFTM............e..GDEF........... ....GPOS............,..XGSUB.............]..OS/2......._...`...cmap...l.........k.cvt .......:...:....fpgm...,.......eS./.gasp................glyf......M4....f..fhead..X ...4...6....hhea..XT.......$.y.&hmtx..Xt...9......R#loca..Z.........C4h.maxp..\\|... ... ....name..\.........Xt..post..^..........meprep..`...........B.webf..a4..........T=.........=.......L.}.....c5]x.c`d``..b...`b`...@...1...B....x..KlTU...3.a.......26....I..j.Z..i.......BBcHL.....0!.+9<j.L..Y.R..2LW,..im...IW..!..s.).H..\|...9......=s..T.n}.HK..z...zw....;U../wk."..X...7..;zw+.."..c\.xo.].t+t84...w..p....s....}0..)r/r/....-t8.L.6......wm..X..'c{.I..oD.....4........)Y.....IOx::O.w.....T..G.zUM..f=..b^....:..u.fH.....q....8...d. ..A...{......`...9..y...0..`....L...\.kp...M.?.u...)..A=....7....KB3\|.......{8....{.N.I...&.S.!....%f%.p....g.g.\|Mx%a!.%.%.%.%.%.%W)..bO..,<.*...D..@4G4........... ...P....i...`.R........u.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\page-data[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	129
Entropy (8bit):	4.455962451056319
Encrypted:	false
SSDEEP:	3:YGKoVhLET7rWwEdNjupORVSCWdpwvHfeALqQY1:YGKosrWvdN60VSddpM/fL4
MD5:	4A83A91FA24B408D32572A252DE93DAD
SHA1:	A17F9F790C599B645591175B92F9F87B10F52583
SHA-256:	A9908382FEFD57FCD11FBA110E53E925F896C82029239B16B919C8A609174C87
SHA-512:	9620A1D0B364A6E4FB6AC40F66CDD75F56F6B61589A4AE697990337F79198F04FB7C3258B2614DEABEDC1AC2F4CD49C7074185339E8D26DEAD7E8ED99CB33AE8
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/page-data/vaccine-locations/page-data.json
Preview:	{"componentChunkName":"component---src-pages-vaccine-locations-index-js","path":"/vaccine-locations","result":{"pageContext":{}}}

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\phulocator[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	163253
Entropy (8bit):	5.849588667600356
Encrypted:	false
SSDEEP:	3072:G5UJZI5GyGcZkosVNfGLGqbx5dneiGxaByGkdgjecuuMk3LI:G5UlypZZsVNfGdRpGxAy4e23LI
MD5:	F7A61175656B05725C4CB95E2A6379C9
SHA1:	54434BBA2594661B01195E279C0D65D515D549EF
SHA-256:	E89C6213DF66F1E575112C6EE1798C602E4C741577A5D4CAC070B8951AC087E0
SHA-512:	BF27D1B5E6C6384E72F573B0DEF96814BD320C31C779F218C8C9B7AA96E1C3C23EA9CD3F5088EDD499BAD88D62152C3643EA3E82379158FACB83368C433869BA
Malicious:	false
IE Cache URL:	https://www.phdapps.health.gov.on.ca/phulocator/
Preview:	....<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">....<head>.. <meta charset="UTF-8">.. <title>Public Health Unit Locator</title>.. <link type="text/css" href="Style/mainstylePHealthPortal-en.css" rel="StyleSheet" />.. <script language="JavaScript" type="text/javascript" src="js/formval.js"></script>.. <link href="Style/StyleSheet.css" rel="stylesheet" type="text/css" />....</head>..<body style="color: #FFFFFF; text-align: center;">.. <main>...... <a id="lnkSwitchLanguage" href="fr/Default.aspx">Passer au fran.ais</a>.. <br />.. <img src="images/PHULocator.PNG" width="980px" alt="Ontario Logo. Public Health Unit Locator. Ministry of Health." />.. <br /><br />.. <h1 style="font-family: Verdana, Helvetica, sans-serif; font-style: normal; text-transform: none; font-size: 1.0em; background-color: #FFFFFF; color: #0

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\progress.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	826
Entropy (8bit):	4.968884667611879
Encrypted:	false
SSDEEP:	24:4orYIrbdrFwaqmqddMtXzW5LH3XI/3XxtHdtHIDcoIu1+coqu1xX:4eYIrBFwa1CMtDW5LH3Xq3XxtHdtH+/8
MD5:	F7D575F4F9E0EDC90390EF22E98BDD87
SHA1:	0900DB4220019F5E2050A7631783745A66ECFBED
SHA-256:	4D9DE30F44D155113B05E267EDEB3F534339C20B02135B37B954E2BE32F1F061
SHA-512:	4F450B373777A125CE70CF37D013F43A332E944AA0A644E550D3AC5E11F59E00B867BF061F3B0CA817C347C5BA7612CCA1AE4B18780CD94E0418D705E519A95B
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/progress.module.css?qrgttk
Preview:	/*. @file. * Progress behavior.. . @see progress.js. /...progress {. position: relative;.}..progress__track {. min-width: 100px;. max-width: 100%;. height: 16px;. margin-top: 5px;. border: 1px solid;. background-color: #fff;.}..progress__bar {. width: 3%;. min-width: 3%;. max-width: 100%;. height: 1.5em;. background-color: #000;.}..progress__description,..progress__percentage {. overflow: hidden;. margin-top: 0.2em;. color: #555;. font-size: 0.875em;.}..progress__description {. float: left; / LTR /.}.[dir="rtl"] .progress__description {. float: right;.}..progress__percentage {. float: right; / LTR */.}.[dir="rtl"] .progress__percentage {. float: left;.}..progress--small .progress__track {. height: 7px;.}..progress--small .progress__bar {. height: 7px;. background-size: 20px 20px;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\raleway-modified-600-3728a086822b83f3645761f24e68304e[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18168, version 4.20
Category:	downloaded
Size (bytes):	18168
Entropy (8bit):	7.977253386250338
Encrypted:	false
SSDEEP:	384:vBMf8sp4+DJG/v0OgOB+KGObHZLizn1yJd0TZUzj2m99LABAMZsIU/oe:vw6k80OLB9GObHZk0JCN4j2ftU/n
MD5:	3728A086822B83F3645761F24E68304E
SHA1:	245CD1E474602F32EFBE80DD395380EA07AAB1F5
SHA-256:	E07887EC590222EA2E0D3B5655FD6C1FD0275B5AC50175CC67C2AB2E78FECA90
SHA-512:	137B1FAA689E391BA2B8C03DC043DEE8519D0B6FEAF1F011509028D7C739F56423D0EA314B07D50708AE6EF69DA7963D2F278D12676A780077C55AEC0DEDF7FA
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/static/raleway-modified-600-3728a086822b83f3645761f24e68304e.woff
Preview:	wOFF......F.................................FFTM...0........./..GDEF...L....... ."..OS/2...l...N...`.Qp.cmap...........bd..xgasp................glyf......5...k...@.head..9....1...6...chhea..9.... ...$.>..hmtx..:.........."'vloca..<............Tmaxp..>\|....... ...wname..>...........post..E..........Ldnx.c```d..3........h.S9.L..x.c`d``..b...`b`../@...1.....'..x.c`b\|..........A...D..a\|.`......9N.E)....J....000.f..`...._.Y.L.J.....#....x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..}.x#.....^f$.H.uY..-Y.lK...[l..-..+....Y:.B.K.%..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\raleway-modified-600[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18168, version 4.20
Category:	downloaded
Size (bytes):	18168
Entropy (8bit):	7.977253386250338
Encrypted:	false
SSDEEP:	384:vBMf8sp4+DJG/v0OgOB+KGObHZLizn1yJd0TZUzj2m99LABAMZsIU/oe:vw6k80OLB9GObHZk0JCN4j2ftU/n
MD5:	3728A086822B83F3645761F24E68304E
SHA1:	245CD1E474602F32EFBE80DD395380EA07AAB1F5
SHA-256:	E07887EC590222EA2E0D3B5655FD6C1FD0275B5AC50175CC67C2AB2E78FECA90
SHA-512:	137B1FAA689E391BA2B8C03DC043DEE8519D0B6FEAF1F011509028D7C739F56423D0EA314B07D50708AE6EF69DA7963D2F278D12676A780077C55AEC0DEDF7FA
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/fonts/raleway-modified-600/raleway-modified-600.woff
Preview:	wOFF......F.................................FFTM...0........./..GDEF...L....... ."..OS/2...l...N...`.Qp.cmap...........bd..xgasp................glyf......5...k...@.head..9....1...6...chhea..9.... ...$.>..hmtx..:.........."'vloca..<............Tmaxp..>\|....... ...wname..>...........post..E..........Ldnx.c```d..3........h.S9.L..x.c`d``..b...`b`../@...1.....'..x.c`b\|..........A...D..a\|.`......9N.E)....J....000.f..`...._.Y.L.J.....#....x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..}.x#.....^f$.H.uY..-Y.lK...[l..-..+....Y:.B.K.%..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\raleway-modified-700[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18032, version 4.20
Category:	downloaded
Size (bytes):	18032
Entropy (8bit):	7.97894287396032
Encrypted:	false
SSDEEP:	384:2lBMfgPLy423SZ3M5aM+yLgJ40M2aVtm1erVAWUfFTeOJVZ9vSCOFqvdym+LqMmn:2lbfv5MoMu40M2aLDrvUsM5OQymaqMmn
MD5:	FFEC5345D938424D2E531EA4EECD8D9D
SHA1:	2A4C6A7FE809944C54D5ACA0AAC37B26DC270737
SHA-256:	811B7E18E89AC8CFE7DCC86987A6022858872307B653DBF74D9EC8CB700AA856
SHA-512:	B6DA2A18B41ED1CC08DCC7E6ECC1677972CAACA7CC8414F8BBB44E48A4B5C4A708C81207BD195C0CCECC197531F60ED07BD2869043D49C5CC8FC96B075316D67
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/fonts/raleway-modified-700/raleway-modified-700.woff
Preview:	wOFF......Fp.......h........................FFTM...0.........$m.GDEF...L....... ."..OS/2...l...G...`..p.cmap...........bd..xgasp................glyf......5...j.-W.head..9,...1...6....hhea..9`... ...$.P..hmtx..9.........".$.loca..<............maxp..=........ ...wname..>....z.....2..post..D..........Ldnx.c```d..3.....}0..K.....x.c`d``..b...`b`../@...1.....'..x.c`b\|........H.3...1.......P.#2.).(.A..A)...........`j.$...)..F..{.=.x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..].\|[...-/.+.JW.J....e..%...#..,'q.$.$a$$....e<.{...<6.>.:.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\rendezvous-vaccin[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	121982
Entropy (8bit):	4.917868835985533
Encrypted:	false
SSDEEP:	1536:RXxvybGD6OnQD1g/RFwnmlqfF9HhpX7dRvyV1y1yNEHP:RXtb//RSmlSHv5G6KEv
MD5:	6602DC66F94577404D11F10E9A144E2D
SHA1:	9C34B60FFBB13818108508928D003030E94D8C21
SHA-256:	DF123058A78F422944CCA53A861E34DF06508EC865C28020E92559FB33FB0131
SHA-512:	37419D189AA67C6F47E059777F909259F4B0CD477D7D9148F6258010E598921A692E0C4C64F0BE5D4B2833C3BD7BC4A9AE8381CE500A0AE7E39C9B5B6E303D79
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/rendezvous-vaccin/
Preview:	<!DOCTYPE html>.<html lang="fr">. <head>. <meta charset="UTF-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <meta name="description" content="Entrez quelques renseignements ci-dessous pour d.couvrir comment vous pouvez prendre des rendez-vous pour les vaccins.">. <meta property="og:locale" content="fr-CA">. <meta property="og:site_name" content="@ONThealth">. <meta property="og:title" content="Comment prendre un rendez-vous pour les vaccins contre la COVID-19">. <meta property="og:url" content="https://covid-19.ontario.ca/rendezvous-vaccin/">. <meta property="og:type" content="website">. <meta property="og:description" content="Entrez quelques renseignements ci-dessous pour d.couvrir comment vous pouvez prendre des rendez-vous pour les vaccins.">. <meta property="og:image:url" content="https://covid-19.ontario.ca/c19-book-vaccine-assets/social_image_fr.png">. <met

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\system-status-counter[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	742
Entropy (8bit):	4.922535861642357
Encrypted:	false
SSDEEP:	12:Uuaq7R14dbbDQyXjf4Gl9DyYEFr5imFr5oE0Fr5QF4M:97MdPDQiO5iq5+5Q7
MD5:	6FA54C62F3ACAD64A789E2AC504E2CE5
SHA1:	27B83D0C19933B2810E0B68038B63B1B45211C34
SHA-256:	6F0160C0D198D260E42D1394B516E5495EE57C204E41CD2147E4026110843D54
SHA-512:	C94E1340C19FF2F5A25C90B053776AE1342B20E80F83FEAE0C0CF2DBA247C545A402B9F15BFD79B7D68CAFAD5DB97EDCEBA17F65B0120A05291B4456A5EF3737
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/system-status-counter.css?qrgttk
Preview:	/*. @file. * Styles for the system status counter component.. */...system-status-counter__status-icon {. display: inline-block;. width: 25px;. height: 25px;. vertical-align: middle;.}..system-status-counter__status-icon:before {. display: block;. content: "";. background-repeat: no-repeat;. background-position: center 2px;. background-size: 20px;.}...system-status-counter__status-icon--error:before {. background-image: url(../../../images/core/icons/e32700/error.svg);.}..system-status-counter__status-icon--warning:before {. background-image: url(../../../images/core/icons/e29700/warning.svg);.}..system-status-counter__status-icon--checked:before {. background-image: url(../../../images/core/icons/73b355/check.svg);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\system-status-report-counters[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	557
Entropy (8bit):	4.7908473761985215
Encrypted:	false
SSDEEP:	6:UuXyCSKvWexHHd9mHoXrnT9hRXt7fVPpxtvnveUY429GK67xaDIuxNE:UuKyf1Hd9mIXrnhVPrfvh29GK67WA
MD5:	F9C2D6EED3C4ED85C9B6D0AF5A61FF8A
SHA1:	67F7744D5EB28BAB1DEBCEC6F8BEB10262C8A816
SHA-256:	DA6360A75AAC69BE7076B4A5A4A2D0BFBD3BC4A674BBA2E7A9CB698035719159
SHA-512:	32FCAC745E14DA2E9EE1BCFE22544864C03FC7978EAF8E897BC0203DAB6163C81ABD62A667B2B3EF00B696FEB4248D49A55DAD28877C2E1D1BF7D7CA995CB479
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/system-status-report-counters.css?qrgttk
Preview:	/*. @file. * Styles for the system status report counters.. */...system-status-report-counters__item {. width: 100%;. margin-bottom: 0.5em;. padding: 0.5em 0;. text-align: center;. white-space: nowrap;. background-color: rgba(0, 0, 0, 0.063);.}..@media screen and (min-width: 60em) {. .system-status-report-counters {. display: flex;. flex-wrap: wrap;. justify-content: space-between;. }. .system-status-report-counters__item--half-width {. width: 49%;. }. .system-status-report-counters__item--third-width {. width: 33%;. }.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\tools-assessment-centre[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1301
Entropy (8bit):	4.765320160411404
Encrypted:	false
SSDEEP:	24:tK5cDuKk65wjsm6OHU/+qSHYdRzRYRUlWE6+qSHYVcxl8J+qSHYn+qSHY1+qSHy:cc/5459QRzRYRSWk96k2s9j999y
MD5:	6D001D526E1B3BB670632F3F5CC7F2CD
SHA1:	46DC5947F561EEB33C586D1D190B26A644F570A7
SHA-256:	ED04179E7A6E382B19782295B68CAF58CF5946C2C7A9A123FDC265C2F51D754A
SHA-512:	A72C89BFCD7E3ED47EE33309F614E655CCF9650B59F3EF0E4C6418054961BE0467006B18845B294BF6E636B03C0BA431A0FA88BD5AA7393AE092E41EA1FD66F0
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-assessment-centre.svg
Preview:	<svg width="40" height="123" viewBox="0 0 40 123" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M33.0325 33.3529L6.48431 33.983C4.65088 34.0265 3.18163 35.5491 3.17852 37.4088C3.1754 39.2686 4.63966 40.7215 6.47309 40.678L10.9467 40.5718L10.8266 112.208C10.8182 117.267 14.9181 121.335 19.905 121.217C24.892 121.098 29.0058 116.835 29.0143 111.777L29.1342 40.2145L33.0211 40.1223C34.8546 40.0788 36.3238 38.5562 36.3269 36.6965C36.33 34.8367 34.8659 33.3094 33.0325 33.3529Z" stroke="black" stroke-width="3" stroke-miterlimit="10"/>.<path d="M23.8702 7.43875C23.8667 10.492 20.2642 18.8397 20.2642 18.8397C20.2642 18.8397 16.6812 10.6554 16.6848 7.60218C16.6883 4.54897 18.3044 1.98034 20.284 1.93531C22.2637 1.89028 23.8739 4.31106 23.8702 7.43875Z" stroke="black" stroke-width="3" stroke-miterlimit="10"/>.<path d="M23.0837 101.946C23.0873 98.8928 19.5043 90.7085 19.5043 90.7085C19.5043 90.7085 15.9018 99.0563 15.8983 102.109C15.8947 105.163 17.5048 107.658 19.4845 107.613C21.4641 107

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\tools-check-results[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3293
Entropy (8bit):	4.377750953191204
Encrypted:	false
SSDEEP:	48:LSdcv0AR0SyrfonORD3D3p/5QlKCqnd481aXTHgpv6/2qlvGoSLPOWgl8gRNxTmU:0fA2NeO5p/ed+W+aXjL2qlPSLPKP
MD5:	8CD5AD971CD7F400B278A3243E4BA64E
SHA1:	9E732926F06917A6D3E864D8BE43DE85417E4EDC
SHA-256:	B0BC972FA7E01734CAB1825534858D6543478FD4F12AADDE65AF8D1EAB5ED011
SHA-512:	033CD335AEF4F75F7B7C07D1F8205801EB704EE1C1E1912DFCF0B918E5A7B7A0C34555C14A62AFC847788447CE7EE95CA56B33C91CD47F0F96680EE1351052BA
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-check-results.svg
Preview:	<svg width="78" height="128" viewBox="0 0 78 128" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M58.4059 2.22899L49.2795 2.19162L37.7087 2.14423L22.2265 2.08082C17.5003 2.06147 13.0934 3.69956 9.98562 6.44707C6.87789 9.19459 4.90698 12.9128 4.89003 17.0531L4.83689 30.026L3.53144 30.4347C3.20493 30.5714 2.87786 30.8461 2.71376 31.1214C2.54966 31.3968 2.38556 31.6721 2.38386 32.0862L2.37256 34.8464C2.37143 35.1224 2.5327 35.5371 2.69454 35.8138C2.85638 36.0905 3.18119 36.3678 3.50657 36.5072L4.6451 37.0639L4.62136 42.8603L3.47831 43.4076C3.1518 43.5443 2.82473 43.819 2.66063 44.0943C2.49653 44.3697 2.33243 44.6451 2.33073 45.0591L2.31943 47.8193C2.3183 48.0953 2.47957 48.51 2.64141 48.7867C2.80325 49.0634 3.12806 49.3407 3.45344 49.4801L4.59197 50.0368L4.34327 110.761C4.32632 114.901 6.2667 118.636 9.35183 121.408C12.437 124.181 16.8304 125.855 21.5565 125.875L57.8989 126.024C60.8323 126.036 63.7686 125.358 66.2177 124.264C68.6668 123.17 70.7922 121.522 72.4304 119.459C74.3956

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\tools-self-assessment[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2237
Entropy (8bit):	5.115113498114726
Encrypted:	false
SSDEEP:	48:s2x/69sZS8/Zm9z94a909x9r9v49y9sD9M:j7S0L+O
MD5:	5AB53563A412894823B1E744C9920074
SHA1:	355433FE11B41A35597D317ADB68331E0C5A8925
SHA-256:	7A80B423EDB45A20F8F4DA4804112CA8251C70C9DBC6A17D13524C9B5F58809C
SHA-512:	B6D1AC9A8FA5F08C12D06F2D3FB2DEF93EA468CA77B19537413AD014D70745F255AA28F2431989E4A809581FE39B83FE192489B94E259729D5D070E19910A770
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/tools-self-assessment.svg
Preview:	<svg width="93" height="122" viewBox="0 0 93 122" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M62.9479 3.89587H88.0655C89.5008 3.89587 90.6286 5.02361 90.6286 6.35638V118.002C90.6286 119.335 89.5008 120.462 88.0655 120.462H4.20336C2.76807 120.462 1.64034 119.335 1.64034 118.002V6.35638C1.64034 5.02361 2.76807 3.89587 4.20336 3.89587H27.7832H62.9479Z" stroke="black" stroke-width="3" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M60.4874 9.53455H82.3244C83.5546 9.53455 84.5798 10.5598 84.5798 11.79V111.645C84.5798 112.876 83.5546 113.901 82.3244 113.901H9.32941C8.09916 113.901 7.07395 112.876 7.07395 111.645V11.79C7.07395 10.5598 8.09916 9.53455 9.32941 9.53455H29.8336" stroke="black" stroke-width="2.9877" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M60.4874 1.5379H30.2437L32.9092 14.0455H57.8218L60.4874 1.5379Z" fill="#00B2E3" stroke="black" stroke-width="3" stroke-miterlimit="10" stroke-linecap="round"

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\T4O403JZ\vaccine-banner_0[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	382857
Entropy (8bit):	5.968413516007699
Encrypted:	false
SSDEEP:	6144:iDgz20rBryNYMncGZvHyghMP67x470EuLJrEJbpYfayMfSm7IvrBbwfTpg:P20rSew+6d470tLJInYfaDf7IvrBMg
MD5:	771158ABF284E613333214272797B985
SHA1:	01DD1840AC9A5692B5706541BDC9565C4A2FBB35
SHA-256:	41C588243A0E9B7BE2D933F6044E14C7A9640D8A0723ACB70379CFCAA5F32AB8
SHA-512:	DFD5C43CEDF680AC042D16E0D3FC2F062EE2A9371002EDF1804DB33DE95AD9200E7261B31C568D65C0929285D8D23F2F4CB6EC4199558901643E2D5E2428065C
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/vaccine-banner_0.svg
Preview:	<svg width="349" height="213" viewBox="0 0 349 213" fill="none" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink">.<rect y="-52" width="349" height="287" fill="url(#pattern0)"/>.<defs>.<pattern id="pattern0" patternContentUnits="objectBoundingBox" width="1" height="1">.<use xlink:href="#image0" transform="translate(0 -0.52019) scale(0.000976562 0.00118765)"/>.</pattern>.<image id="image0" width="1024" height="1280" xlink:href="data:image/jpeg;base64,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

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\E73PA6oJJcj4lIMVhVoq8TDNFJPSyYzZcTIPIEc7fpc[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	36241
Entropy (8bit):	5.64378921765415
Encrypted:	false
SSDEEP:	384:vrIa8HalNqqDziAvOwL0rklN7mjpXDDedhm0aOQIIKUHTC1GXvVj/ZJyPw5UHJpb:MTaBP2NXnmm0aHk12rmpkRPXwl
MD5:	F14C1DB1CC510B61D5C0BB7F64F672E4
SHA1:	C75D3457B6D744934473597A2E1DA1A52475134A
SHA-256:	13BDCF03AA0925C8F8948315855A2AF130CD1493D2C98CD971320F20473B7E97
SHA-512:	B28EE652214FFDEEDCCEBC25571C06E0ECDF8A434441C860C30BA41926DB0C837A86BB4BC29AF3D594F1E49591B100C3AD3E551056A804E31C7316473D0E5F75
Malicious:	false
IE Cache URL:	https://www.google.com/js/th/E73PA6oJJcj4lIMVhVoq8TDNFJPSyYzZcTIPIEc7fpc.js
Preview:	(function(){var V=function(c,m,k,X,S){if(!(X=(S=u.trustedTypes,k),S)\|\|!S.createPolicy)return X;try{X=S.createPolicy(m,{createHTML:d,createScript:d,createScriptURL:d})}catch(Q){if(u.console)u.console[c](Q.message)}return X},u=this\|\|self,d=function(c){return c};(0,eval)(function(c,m){return(m=V("error","ad",null))&&1===c.eval(m.createScript("1"))?function(k){return m.createScript(k)}:function(k){return""+k}}(u)(Array(7824Math.random()\|0).join("\n")+'(function(){var D=function(m,c,S,X,u,d,k,Q,V,C,f,z,v,I,F,l){if(!(((m>>2)%131\|\|(d=S,d=(u=d<<13,(d\|u)+~(d\|u)-(~d^u)),d^=d>>17,d^=d<<5,(d=(X\|0)-2~d+2~(d\|X)+(~d&X))\|\|(d=1),l=c^d),m\|8)%63)){for(S=[];c--;)S.push(255Math.random()\|0);l=S}if(!((m+7)%((m-9)%160\|\|(u=c&4,d=c&3,X=R(this),S=R(this),k=Y(this,X),u&&(k=ce(10,(""+k).replace(/\\r\\n/g,"\\n"),-64)),d&&O(this,S,J(k.length,2)),O(this,S,k)),103)))if(C=X.v.j[String(d)]){for(V=(z=(C=C.concat(),0),c);z<C.length;++z)(k=C[z])&&!k.P&&k.capture==S&&(Q=k.listener,f=k.B\|\|k.src,k.l&&D(267,0,k,X.v),V=fals

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\api[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	852
Entropy (8bit):	5.518736472579191
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZy+KVCetE31tEsLqo40RWUnYN:VKEcixKoe21tFLrwUnG
MD5:	647F2FC22BA401C8613B8A168C02DB1A
SHA1:	CFF6FD91F3B18BC776591420B9B09C321ADA4406
SHA-256:	FE81E776D459F15B4DAEF2EA548D3150A761C08D33C3013DF60D929775548092
SHA-512:	AC598D3755CA8AD371AA8D42AA7DCC53EBC91AA206E80ADC6713ADF09B29EEF31A92CC39218D509FBE0C9274C51DE499B63E6A88A0D6B4CDD049BCF2B3AF6B36
Malicious:	false
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;po.src='https://www.gstatic.com/recaptcha/releases/mrdLhN7MywkJAAbzddTIjTaM/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-zy6MpaK2q7ThL2mDEY0TbyvBJDr6lKK9SPTRcXRLbNIBZDn1zpbOT7nMFdXz9mci';var e=d.querySelector('script[nonce]'),n=e&&(e['nonce']\|\|e.getAttribute('nonce'));if(n){po.setAttribute('nonce',n);}var s=d.getElementsByTagName('script')[0];s.parentNode.insertBefore(po, s);})();

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\api[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	852
Entropy (8bit):	5.518736472579191
Encrypted:	false
SSDEEP:	24:2jkm94/zKPccAjZy+KVCetE31tEsLqo40RWUnYN:VKEcixKoe21tFLrwUnG
MD5:	647F2FC22BA401C8613B8A168C02DB1A
SHA1:	CFF6FD91F3B18BC776591420B9B09C321ADA4406
SHA-256:	FE81E776D459F15B4DAEF2EA548D3150A761C08D33C3013DF60D929775548092
SHA-512:	AC598D3755CA8AD371AA8D42AA7DCC53EBC91AA206E80ADC6713ADF09B29EEF31A92CC39218D509FBE0C9274C51DE499B63E6A88A0D6B4CDD049BCF2B3AF6B36
Malicious:	false
IE Cache URL:	https://www.google.com/recaptcha/api.js?render=explicit
Preview:	/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.google.com/recaptcha/api2/';(cfg['render']=cfg['render']\|\|[]).push('explicit');w['__google_recaptcha_client']=true;var d=document,po=d.createElement('script');po.type='text/javascript';po.async=true;po.src='https://www.gstatic.com/recaptcha/releases/mrdLhN7MywkJAAbzddTIjTaM/recaptcha__en.js';po.crossOrigin='anonymous';po.integrity='sha384-zy6MpaK2q7ThL2mDEY0TbyvBJDr6lKK9SPTRcXRLbNIBZDn1zpbOT7nMFdXz9mci';var e=d.querySelector('script[nonce]'),n=e&&(e['nonce']\|\|e.getAttribute('nonce'));if(n){po.setAttribute('nonce',n);}var s=d.getElementsByTagName('script')[0];s.parentNode.insertBefore(po, s);})();

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\chevron-right[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	5.0198476251156805
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5zMcBH8+hHiATcvXjXRHoNcHRQag2CiY9uvAZe+H4VNX1X3MHq0Y:tI9mc4slzXdhC/O4RPgVh9SMSmK0Y
MD5:	B6B6C4DB699010301B02593710377F70
SHA1:	DEFACACF10E081BFAD75FF96CD9032C00EFE4339
SHA-256:	8BC3003A5FCE0C51EF013C99396F5168BCE06B077E556E80726CB98871AEEC45
SHA-512:	FD96FF1543B9DA27591AB2DBC9D88DE64BEC0580D992507D510C64F8CB47188F0B57D4660E9D7E3C530C473D7636F522A316D724D67B25C7E7B70C01E83F8D5C
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/assets/chevron-right.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M10 6L8.59 7.41 13.17 12l-4.58 4.59L10 18l6-6z"/><path d="M0 0h24v24H0z" fill="none"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\clearfix.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	306
Entropy (8bit):	4.597062318743618
Encrypted:	false
SSDEEP:	6:UfKcs9so2xgeWDEE0R9A28Ap+vqeVlHSsz740GGqRyFw379ZdmEAv:UVWsvK3Dt0U28A8vLHSIVfqAw37oPv
MD5:	D4013A34D3C8CA1BC905E2333703DB0A
SHA1:	5AC08F4138393F9F87CC4AE99168FC2C51112F29
SHA-256:	A0645960ADE152760A6CEFC0B03736A9565C09A46C94B2DD39E54DA585BDE30D
SHA-512:	624A7400282C7FD739873F18BC175CA59E2FBA40DAB5D08E39177F57DFE6B2B1BCC8E1942F56A588680D4F0C2B8C480FA1DB2039C19B017E102F52E904A05FEE
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/clearfix.module.css?qrgttk
Preview:	/*. @file. * Float clearing.. . Based on the micro clearfix hack by Nicolas Gallagher, with the :before. * pseudo selector removed to allow normal top margin collapse.. . @see http://nicolasgallagher.com/micro-clearfix-hack. */...clearfix:after {. display: table;. clear: both;. content: "";.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\co-covid-19-icons-covid-alert-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 96 x 96, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	4807
Entropy (8bit):	7.914134596874224
Encrypted:	false
SSDEEP:	96:GvNghka0vvdPddKhLRBFu5+tG2O9Ah/mO+qugCaNkNx72uWFQZHxEqTl551:Glunqv5d2L9+KhRjNY7pWcaqTl1
MD5:	11F49C0A92F2E810542EF292EE385099
SHA1:	DAA818B09696AEEA9E8A9A815B5DB5751FC5A9E9
SHA-256:	9C082AB8DD991EEF26304DFE38BD3D84165FFF70C61CA616724D5F0EA8D66587
SHA-512:	5E3F16CACD69C33D55FCAF31CDCAA92B1934F1A0BF82CB8697FC304787B88F42C1F2F97DEC19AC6A911555F45BE3A41740E13B68FF11D54CF627E3D4F4E90040
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-covid-alert-2020-12-21.png
Preview:	.PNG........IHDR...`...`......w8....bKGD.............\|IDATx..].t.....XP..P.<)"]z.E:...rPQ.P...R...GQ.-.....I..AB.=.....@..$.7.Y...........'.vvf...._g..+.<W.^-{....7n......K)...Ja..)%S"&)9....:P.<.6.WN.n.Y.2.'e.r.7R..V..J.(u.}).#.~...`:.`.0.N..1..Q$.1...Ft.....dB.......wv`.7e..,.t...Y...+.1.....,.x{.G.O.L........S(.d#.3J.4..1S2?22.']. ."..6.0........>BH..4..S.N...Z_.RH.b..l(....iX.v.j.f..$].v........;Z.:{.,...%t....B..... .X"k.NA2..\|.uk...\.rYJ.=..y.....]....68.x".M.w..x....I..-g..\|\|\|\2+..;F...O.+G&L.@N.>.0........=.Jc...#E..q...U.R.r.f.a.F......N....b-......>J#./^$....M..iC._O.?O...,!...g.e.......%K..F.......{.:R.U.B1...<P......n..I.&.W>))).k.6m...[....___R.lY..4w.\B.[_.xg...W.....Kj.;u.D..<\|...SGm.}......."?...y.'..z...l.g...W.y.f....?..w=X.X........*V....I...."e1#........>._~.E..+..B..PG........u..'N..;.mV.\....IE..r.Q.kU8p.@.3.......O?.....:.X..e...0,{..e..?..B].k.L{....E.......)Z.(...[..R..}...L.8Q..g.!C..Ql...}.'O&.=...].

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\co-covid-19-icons-up-to-date-info-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 96 x 97, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5264
Entropy (8bit):	7.944383415148047
Encrypted:	false
SSDEEP:	96:1SQGnvZaiNcJJdFysW/KwEuKTNgfkjKtMYryBQzGirw7rIM0iYGg:1SQ/J4sCKyKGOKeYlM0XGg
MD5:	B64C42F6D7EF81363A6505B82E7BE92F
SHA1:	2B2BE9F45CD8982469B79F212D56F132E5CBD935
SHA-256:	5CAC6D18EE7BDC1ADCD63B39AE38970C4981A16ECAC8D67EDCC3FA5273E6D5D1
SHA-512:	EF53B698C657285B0553B457B92400A619BB0AF70D67F2D7CABBFE476EE589A1811358CFAC704F5F0E6EA42E6A07F6415382BBE28D0FF622A56A0F50BD44D242
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-up-to-date-info-2020-12-21.png
Preview:	.PNG........IHDR...`...a.....)......bKGD.............EIDATx.....E....#)YA%...9.J.,Q."`&.H"." .A....'9(Q.0....fQ$..(....._{5.......l..z..........z&)).e...%........w..n.Cl..#}..}&.'.e.=.....t....T..}o.X....S.7.\|.S....g..GT<......t}N-.R)Yy.W..;V...o..i..9..\...k..8........\..l.R...u.P..V..f.F...kY}.K....4V./..R&....).....j..c...q..f.K....+....^.Q..J...".K;.']..).t.ObTfT..;.O>.j.../.Z.l.....o..s.....m......^]\|.......>}.....q.`yu[.YM...n.~.E..7.\|S}..j...g.G..j.%...l.}.........Z.Y..s.N.'O.......(.`.....;Fr..?..C.h.....s3.....O../..B.....W..).......;!.#.m....8p.@...3f...[n..c..u......n.F.M.6U:.U.O.V...\..y....~..._..;;.o...S.5KM.8Q._.>.~.Y...,h..3.8...U.V~....Q.G.\|.....S.?...z.'.J.Ee.M.v.mj...a..q.F.E..?.~.W.2e..O?.v.......}...r...G.(...aCu.7.3.<..Y.H.6.e.h_.p..8...s..J+R.......$.......>....x.86.%3."+.........1T(..P".8..%cv.2x.`..C.=....b./^lVQ....xM..K.N......cvD..9b.).`.)i".G.}T.(P ..S.v.(..>.@..7N..;.."@...9.aoQ/.sD"-

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\co-covid-vaccine-page-intro-box-702x532-2020-12-24[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 702x532, frames 3
Category:	downloaded
Size (bytes):	37295
Entropy (8bit):	7.945453291962927
Encrypted:	false
SSDEEP:	768:Yg8pQSWxP6k8dABRng831zf8zk9vazE3hY23JY8y//ZXAHSmL1ePVVAlcKxS:YgkWxesg8eziL5jHT1eP3x
MD5:	848746B35A4F74578A7246BD164EC2A8
SHA1:	374CB0A270BAD9DCCB806DEA2259043BC14D6E8C
SHA-256:	16641E5E391A08E69DB73BFC0727919414FA9D98C3FC53EFCC2A034A8EDF33B3
SHA-512:	A084A8F9CEC359C1AA2060F13726FFE26B6490047B97A35997397DB1B044747EC3C001A51DF07BFCA882486DCBC908B7DCA3E59760C352A8246B38847ED5C6E9
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-vaccine-page-intro-box-702x532-2020-12-24.jpg
Preview:	......JFIF.............C.....................................'!..%..."."%()+,+. /3/2'+...C..............*************************************************...........................................................................................o0........Jh..UX...dz...............................3:...S....d................................u...dX..&.gf.h............................'......ar.U.mK.7.L............................[....hQ8....6U...a.@............SQ.Yu...............R.\....1..X..0%....d&............b9..6..F.................IC.@....34...&uD.4n-......P........9.y.y..q.jt.1..&.ds5....W.JB..........(..keo3OLT.BUK.....eu.?..............>W.......C...U.wd.1+.......S`..........^F]2.F....4.oOk.......mKN.S..$........8..9....l..B..%yfZ..qmg.5..ww3(.........i"/7/..,+..`bT-L... ..4..}O\..d.........9.<c.Q].:....j$..3t....M.e.^P............[.elZUNT.+.^j.\K:....:._U..............:.6:w.`..IT.&i....H.4.g[s.jd..........iy.v.Ej..I...fs........>..L..g@...........

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\combined[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	217501
Entropy (8bit):	5.245126202176088
Encrypted:	false
SSDEEP:	1536:tt9FOjo31mGptoaUd3q7j4lFKcvJx9AzudZmXsot0o6NxoWIzEKkFgh2z7:tt9FOjo31mGptoaUZvLAze3IzcQ2z7
MD5:	B449AEFACA9C4431F56DFEC90FB83FC2
SHA1:	145676C0316493DE8BF1DC5F3BD779E5A5BE5BC2
SHA-256:	B19E1B48170877D264947758A3D1F707D6F5B8672C5115395D09BC9846F87E78
SHA-512:	634F01B62EBEF5AFF487423FEB4B796483D6036ECB278D2902132A2CA0A47AB73C56AB4B244FCC028336AFEFE09908BD33A8A7BD05B1B4EE4C763C94F3659B75
Malicious:	false
IE Cache URL:	https://www.ontario.ca/css/combined.css
Preview:	/! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background-color:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}dfn{font-style:italic}h1{font-size:2em;margin:.67em 0}mark{background:#ff0;color:#000}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sup{top:-.5em}sub{bottom:-.25em}img{border:0}svg:not(:root){overflow:hidden}figure{margin:1em 40px}hr{box-sizing:content-box}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{color:inherit;font:inherit;margin:0}button{overflow:visible}button,select{text-tran

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\container-inline.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	222
Entropy (8bit):	4.423208034323215
Encrypted:	false
SSDEEP:	6:U/RGETTJjD3H3QK+i5MdeBlEmtvlHkw/3jfK:U/RpHX1+i5eefEmBdkw3jfK
MD5:	6B29A6EC09E466ADF3C0B39A630506AF
SHA1:	F08FD80247FE0BAFFA97DA5C13E6D67D2F10645F
SHA-256:	C5730D19F43F160FAA47AF29F7E1DC2BAFC393BE75AA71D21DC93C775A1833C0
SHA-512:	F1924412B734E9A06B17DEA262158A35FDB35D277FB7AE95BAFD55BBD0E83BB2565BA65302A571D92032BAEBCA51111BED90A1BB8D6C26B27A7331D893142AED
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/container-inline.module.css?qrgttk
Preview:	/*. @file. * Inline items.. /...container-inline div,..container-inline label {. display: inline;.}./ Details contents always need to be rendered as block. */..container-inline .details-wrapper {. display: block;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\covid-19-vaccines-ontario[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	57145
Entropy (8bit):	4.784787902507297
Encrypted:	false
SSDEEP:	1536:jGnR7q1GdP24A0xI/DizM/7hcKsKZEWd4bYyc0fwVgFY72sneZiwC0mCAz1PJlbs:2DjZiwC0mCAz1PJlb93m6L2h
MD5:	6B17DFBBB28B51787B7F7A459B46EE18
SHA1:	9FB6AD3076B983D4A2D6DA42328CA7CAFD552B81
SHA-256:	D50C39AE69A81CB9677CED57DDCF044626DDFC7B84FEBABB39D8E6BF398178E0
SHA-512:	D1811154F69B7C0BD99A928A6FC0E9FB4CB9C417340BDB803789B1216DD8D21A1E99D37E9191D32C2A673ACF47A00AEF534C713B6E25EC4B476C73D21009FEEE
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-vaccines-ontario
Preview:	<!DOCTYPE html>.<html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. Google Tag Manager -->. <script>. dataLayer = [];. (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-5G4CS4L');. </script>. End Google Tag Manager -->. <meta http-equiv="Content-Type" content="text/html;

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\cs4qPsP6COA[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	49434
Entropy (8bit):	5.828427176743343
Encrypted:	false
SSDEEP:	768:v6K5y6kiFe7kIsAFsFV5JSrGBfRYzRk7x8XesrH1zpH2T413y4iVTDnX8wB+rUIX:hdBFYrG8g1Izknr790z
MD5:	1A649E2E4AEA1BD60A669771F2FC2E45
SHA1:	CAC6E834A423D6D7EE6F8E0C448D1B0E7BEAAEA5
SHA-256:	C6DE990B7D94C78E7DCDE2D5DA73C8F31435E0820B0CB65732FD7D56E9EC4363
SHA-512:	93F64F55D4CC77E96E06A2F721DEA73091E48EBBAFB1BB4FCEE7E6325FDB58BB9CC298805B452F82F2B005D0A8BD006BE0611A72EDA0B1D2D176141521958FCD
Malicious:	false
Preview:	<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><style name="www-roboto" nonce="kmB5EV3z9Tjr/WA8HY6ODA">@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}</style><script name="www-roboto" nonce="kmB5EV3z9Tjr/WA8HY6ODA">if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "E"); document.fonts.load("500 10pt Roboto", "E");}</script><link rel="stylesheet" href="/s/player/2cea24bf/www-player.css" name="www-player" nonce="kmB5EV3z9Tjr/WA8HY6ODA"><style nonce="kmB5EV3z9Tjr/WA8HY6ODA">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100%;}h1 {text-align: center; color: #fff;}h3 {margin-top: 6px; margi

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\default[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text
Category:	downloaded
Size (bytes):	1257
Entropy (8bit):	4.705481754828438
Encrypted:	false
SSDEEP:	24:cMk5qodwwhXzWd5D8wKw2J7Krzvy2/pSi:cMk/CwhjWAwK97Krby0Si
MD5:	0053966A329F4AC62C250503BBAC2EA1
SHA1:	3D98750CD2E0C10877FB00EEABC5AC63363DBCE5
SHA-256:	873AEAE49558247BCCC8600268053A2925101B1DBA30E6CB32709CD1C1C354D3
SHA-512:	B50FCDECE24C6A27708B6B7633353DC4488951E2045C2294A97CC3623ACAA623117F08B5C48A2E3FD51CCE44EB6A779F2F2FB0F1492CDAE02442A7DD76D47C84
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/typeahead/default.html
Preview:	<div class="clear-input--wrapper". ng-class="{clearable: !!search.input}">. <input ng-model="search.input". required. ng-focus="enableInputCheck = true". ng-blur="enableInputCheck = false". ng-change="onesiteSearchMainTypeaheadImpl.cacheInput = search.input". ng-keyup="searchByKeyword($event)". maxlength="{{ ::onesiteSearchMainTypeaheadImpl.config.maxLength }}". typeahead-min-length="{{ onesiteSearchMainTypeaheadImpl.config.minLength }}". type="search". typeahead="obj as obj.title for obj in onesiteSearchMainTypeaheadImpl.typeaheadHandler($viewValue)". typeahead-template-url="/onesite_modules/onesite-search/partials/typeahead/suggestion.html". aria-label="{{ 'Search' \| translate }}". autocapitalize="none". role="search". class="no-shadow no-border">. <span class="clear-input">. <a analytics-on. analytics-category="Header". analytics-event="search-clear".

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\drupal.init[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	727
Entropy (8bit):	4.98666298065344
Encrypted:	false
SSDEEP:	12:UkaFN0fw0PXlDlk91R6omRVARZrmEKsyAu4W31oUfCSoUfMPc9VwmWhpmf:SXT8lTomRVA13yrx31j5jM6d
MD5:	561D5E5F6F76F15FD1375A9A1C2A18F1
SHA1:	7F5514D8BDFF39269C12134505B9722484ED6CE7
SHA-256:	41683E0BDFED00E74DE14D86441E289271CA70B2A94C721653B9A49DC32FB24E
SHA-512:	B6FFCCAE5515BD354677128CEC38F5C45B4C806D72463C695673D7582C46DD5F718776C16D604D82210ACDAEEA35209DC04F3B628BB9EFD56A930E6714E31E2B
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/misc/drupal.init.js?v=8.9.13
Preview:	/*. DO NOT EDIT THIS FILE..* See the following change record for more information,.* https://www.drupal.org/node/2815083.* @preserve.**/..if (window.jQuery) {. jQuery.noConflict();.}..document.documentElement.className += ' js';..(function (Drupal, drupalSettings) {. var domReady = function domReady(callback) {. if (document.readyState !== 'loading') {. callback();. } else {. var listener = function listener() {. callback();. document.removeEventListener('DOMContentLoaded', listener);. };. document.addEventListener('DOMContentLoaded', listener);. }. };.. domReady(function () {. Drupal.attachBehaviors(document, drupalSettings);. });.})(Drupal, window.drupalSettings);

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\drupal[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6312
Entropy (8bit):	4.829027756516979
Encrypted:	false
SSDEEP:	192:8y7EabGSafu+3GfZqnWHMZxObyQEvShbIMPr8MZScmtCsLPIjj99Iuerd1:ttzjyIvTS
MD5:	2D083E808846C9D9780ADB0B098027D9
SHA1:	D5B5D83F9C911BD862A4977DE0F41D1BE9BFBAD7
SHA-256:	990FDA61C1303A87F6317B47FEF824552D611209F0537BD4FAAA9648D3DE1363
SHA-512:	827AF9DB47C3D27A27CF0C4BA70BB3C4A59D65DA05A2A6AFF0E8BC03F934E1CF5219AAD1D006D60F215104EA93C0FD034255AB7C977FF0B53D6A30CC8F1B9C12
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/misc/drupal.js?v=8.9.13
Preview:	/*. DO NOT EDIT THIS FILE..* See the following change record for more information,.* https://www.drupal.org/node/2815083.* @preserve.**/..window.Drupal = { behaviors: {}, locale: {} };..(function (Drupal, drupalSettings, drupalTranslations, console, Proxy, Reflect) {. Drupal.throwError = function (error) {. setTimeout(function () {. throw error;. }, 0);. };.. Drupal.attachBehaviors = function (context, settings) {. context = context \|\| document;. settings = settings \|\| drupalSettings;. var behaviors = Drupal.behaviors;.. Object.keys(behaviors \|\| {}).forEach(function (i) {. if (typeof behaviors[i].attach === 'function') {. try {. behaviors[i].attach(context, settings);. } catch (e) {. Drupal.throwError(e);. }. }. });. };.. Drupal.detachBehaviors = function (context, settings, trigger) {. context = context \|\| document;. settings = settings \|\| drupalSettings;. trigger = trigger \|\| 'unload';. var

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ed270bb8-340b-41f9-a7c6-e8ef587e6d11[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4893
Entropy (8bit):	4.802609876268765
Encrypted:	false
SSDEEP:	96:XY5IZ+zP+CZp7K34eqJHJCJ2JXJWGHJaS0LlbSjn8MW3cAI:I5IZ+zP+CZp7K34eqJHJCJ2JXJWGHJao
MD5:	56E4B72640AA66A8AE8B394A4BB1078E
SHA1:	48F4C8EE796419B422899870821207B7B9C4FB05
SHA-256:	3CAC5F6BC1F07A250AC3A2B100EBBFA592A4EC44264C02345402B0E449AEA86B
SHA-512:	E9319FE4BCDBEF4DB939E84064333641E1D1AA0A0F42A976439DBBF33C9D454C0D7D0FA28829C4A9E761058EACA076847B829F2C24EDC7A6AA43F456514A08A7
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-data/data-catalogue/ed270bb8-340b-41f9-a7c6-e8ef587e6d11.json
Preview:	{"help": "https://data.ontario.ca/api/3/action/help_show?name=datastore_search", "success": true, "result": {"sort": "Reported Date desc", "include_total": true, "resource_id": "ed270bb8-340b-41f9-a7c6-e8ef587e6d11", "fields": [{"type": "int", "id": "_id"}, {"info": {"notes": "", "type_override": "timestamp", "label": ""}, "type": "timestamp", "id": "Reported Date"}, {"info": {"notes": "", "type_override": "numeric", "label": ""}, "type": "numeric", "id": "Confirmed Negative"}, {"info": {"notes": "", "type_override": "numeric", "label": ""}, "type": "numeric", "id": "Presumptive Negative"}, {"info": {"notes": "", "type_override": "numeric", "label": ""}, "type": "numeric", "id": "Presumptive Positive"}, {"info": {"notes": "", "type_override": "numeric", "label": ""}, "type": "numeric", "id": "Confirmed Positive"}, {"info": {"notes": "", "type_override": "numeric", "label": ""}, "type": "numeric", "id": "Resolved"}, {"info": {"notes": "", "type_override": "numeric", "label": ""}, "type"

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\favicon[1].ico Download File
Process:	C:\Program Files\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	3.8046022951415335
Encrypted:	false
SSDEEP:	24:suZOWcCXPRS4QAUs/KBy3TYI42Apvl6wheXpktCH2Yn4KgISQggggFpz1k9PAYHu:HBRh+sCBykteatiBn4KWi1+Ne
MD5:	DA597791BE3B6E732F0BC8B20E38EE62
SHA1:	1125C45D285C360542027D7554A5C442288974DE
SHA-256:	5B2C34B3C4E8DD898B664DBA6C3786E2FF9869EFF55D673AA48361F11325ED07
SHA-512:	D8DC8358727590A1ED74DC70356AEDC0499552C2DC0CD4F7A01853DD85CEB3AEAD5FBDC7C75D7DA36DB6AF2448CE5ABDFF64CEBDCA3533ECAD953C061A9B338E
Malicious:	false
IE Cache URL:	http://www.bing.com/favicon.ico
Preview:	...... .... .........(... ...@..... ...................................................................................................................................................................................................N...Sz..R...R...P...N..L..H..DG..........................................................................................R6..U...U...S...R...P...N..L..I..F..B...7...............................................................................S6..V...V...U...S...R...P...N..L..I..F..C...?..:z......................................................................O...W...V...V...U...S...R...P...N..L..I..E..C...?...;..{7..q2$..............................................................T..D..]...S)..p6..J...R...P...N..L..I..E..B..>..;..z7..p2..f,X.........................................................A..O#..N!..N!..N!..P$..q:...P...N..K..I..E..A..=..9..x5..n0..e,...5...................................................Ea.Z,..T$..T$..T

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\footer-default-supergraphic-logo[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	655
Entropy (8bit):	5.4192569642679995
Encrypted:	false
SSDEEP:	12:TMHdPhGi/nzVJ/KYf3nwnTDHLdudmT6vb7bULtsXKX:2dMATLf3wnTDrtCg2KX
MD5:	A5F24D16C913DF02269E8AA8515411FB
SHA1:	230ADB5E203A9DDFB0847640A73CCB37A28D4BE9
SHA-256:	CBF618B92A9CDFBC7A976BA731D29E190E08C1F98C4D8A315EFE6F946FEB02FF
SHA-512:	C61FD75534E3D7ACCF1B060E5A1BD50BA61C478E008939AC6FF451D8C814329CCF37924D7A54B6B62BBC89D0D33EB659EE5D86A8379E6FD65D4E207699B43848
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/footer-default-supergraphic-logo.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 25.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 4410 4093" xml:space="preserve" height="4093" width="4410">.<style type="text/css">...st0{fill:#1A1A1A;}.</style>.<path class="st0" d="M2494.4,0C1689.4,0,805.7,218.5,0,772.3l362,856.2c590-449.3,1330.4-725.9,2131.5-725.9..c299.5,0,601.5,45.4,880.6,118.1c-227.9,821.4-749.4,1560.5-1556.8,2054l99,1017.9c1586.7-773,2382.7-2252,2493.7-3652..C3831.3,161.3,3177.6,0,2494.4,0z"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\formval[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3703
Entropy (8bit):	4.880588540940611
Encrypted:	false
SSDEEP:	96:ztf5l5Sc27Wh78rK5Jguffe8IeKPJC/khNHfAjLPad:Z5l5SJ7m78MJjffeTtb/HfAjLPad
MD5:	28C77E4AF07EAA11ED43F240416ECF6C
SHA1:	660F3DD607C83D82E4C457C0E97BBB5040875644
SHA-256:	A0770F92EE66EECB0C22836558F1FF47BABEDB56E29FCA509E83269987F8CB34
SHA-512:	CFFB14D7A687020F07636D8C42078D9C9FF2E055CED39E5B9B60AD201F15A354F47C6F3C89D0850AFCE65222E4DCBA06B6EF7E1B63D9AE48DA5E7F9FABC03004
Malicious:	false
IE Cache URL:	https://www.phdapps.health.gov.on.ca/phulocator/js/formval.js
Preview:	function containsValue..(.. value..)..{.. if (!((value == void 0) \|\| (value == null) \|\| (value == ''))).. {.. return true;.. } .. else.. {.. return false;.. } ..}....function initializeErrorLog..(.. errorLog..)..{.. if (!containsValue(errorLog)).. {.. return "Please correct the errors below and resubmit the form.\n\n"; .. } .. else.. { .. return errorLog;.. }..}....function addErrorMessageToErrorLog..(.. errorLog,.. errorCount,.. errorMessage..)..{.. errorLog += ++errorCount + errorMessage;..}....function validateUserLogin..(.. form, usernameField, passwordField..)..{.. var errorLog = '';.. var errorCount = 0;.. var username = usernameField.value;.. var password = passwordField.value;.. .. if (!containsValue(username)).. {.. errorLog = initializeErrorLog(errorLog);.. errorLog += ++errorCount + ") Please enter a username

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\foundation-6-off-canvas[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	25858
Entropy (8bit):	4.660758876397811
Encrypted:	false
SSDEEP:	192:NnAswCp9coBo2pxNCUVrysgFpxjA7a6H9whVrys7c+Vrys6V4OVrysvSdLVrys8d:SlCp9coBoYgNA7a6H66oPS4OFoIn80
MD5:	9267F2AB1E2FD2F84FB0C4A56CE6FAEB
SHA1:	25EB9BB5BFC51DBC44A6A05BE4ABE35AB57F4C79
SHA-256:	AF2E4D3A9200B58773D52449E31E59FB19855F1D59AEC82700D6B53E29AB8838
SHA-512:	1F8C8929CA1F0C34E12BC26801C7B93C0B1FDEEAB589D1850AA716AC2567553A26A66D5FADD9A70CEF82BC82E3E405D2AA944112758242D89F1B3470D9B41AED
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/vendor-assets/styles/foundation-6-off-canvas.css?qrgttk
Preview:	@charset "UTF-8";./*. Foundation for Sites by ZURB. * Version 6.6.1. * foundation.zurb.com. * Licensed under MIT Open Source. */...is-off-canvas-open {. overflow: hidden;.}...js-off-canvas-overlay {. position: absolute;. top: 0;. left: 0;. z-index: 11;. width: 100%;. height: 100%;. -webkit-transition: opacity 0.5s ease, visibility 0.5s ease;. transition: opacity 0.5s ease, visibility 0.5s ease;. background: rgba(254, 254, 254, 0.25);. opacity: 0;. visibility: hidden;. overflow: hidden;.}...js-off-canvas-overlay.is-visible {. opacity: 1;. visibility: visible;.}...js-off-canvas-overlay.is-closable {. cursor: pointer;.}...js-off-canvas-overlay.is-overlay-absolute {. position: absolute;.}...js-off-canvas-overlay.is-overlay-fixed {. position: fixed;.}...off-canvas-wrapper {. position: relative;. overflow: hidden;.}...off-canvas {. position: fixed;. z-index: 12;. -webkit-transition: -webkit-transform 0.5s ease;. trans

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\gtm[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	108249
Entropy (8bit):	5.5173214733716405
Encrypted:	false
SSDEEP:	1536:0UKJbOl10E+HlGnK+sCEOzh2aeWgGHcUil1U9aKPt52W11UlBCg+BR424JAQ1:0UKVu106nvsuSGVinWBC1
MD5:	5C6EBF224A0722A3370217A12B788185
SHA1:	F59E35DDC38B0481A215C499920FCF5D45A9CF2C
SHA-256:	9DD223089159869D07F2DDD0D0E80EE1AC206EFE29B4AC23295A50AB2621C775
SHA-512:	C01EBAFB55D518BF3ECEE00DBC848EBD7573E2AE381F9C211F934FB4132B86E177709719DD9CD940F71028DC4873C0BE29D935DEB0C4C4F3AB5645F86A49372C
Malicious:	false
IE Cache URL:	https://www.googletagmanager.com/gtm.js?id=GTM-5G4CS4L
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"12",. . "macros":[{. "function":"__e". },{. "function":"__v",. "vtp_name":"gtm.triggers",. "vtp_dataLayerVersion":2,. "vtp_setDefaultValue":true,. "vtp_defaultValue":"". },{. "function":"__gas",. "vtp_cookieDomain":"auto",. "vtp_doubleClick":false,. "vtp_setTrackerName":false,. "vtp_useDebugVersion":false,. "vtp_fieldsToSet":["list",["map","fieldName","anonymizeIp","value","true"]],. "vtp_useHashAutoLink":false,. "vtp_decorateFormsAutoLink":false,. "vtp_enableLinkId":false,. "vtp_enableEcommerce":false,. "vtp_trackingId":"UA-21003310-20",. "vtp_enableRecaptchaOption":false,. "vtp_enableUaRlsa":false,. "vtp_enableUseInternalVersion":false,. "vtp_enableGA4Schema":false. },{. "function":"__v",. "vtp_name":"gtm.scrollThreshold",. "vtp_dataLayerVersion":1.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\logo-main-serviceontario[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 2336, version 0.0
Category:	downloaded
Size (bytes):	2336
Entropy (8bit):	5.517220988183171
Encrypted:	false
SSDEEP:	48:upM4GSrh87Dj1vkV9qZYX4ReIKX42Y9vezWPbp2Dil:UPGSrh8D1cV864oNXWlPV2DG
MD5:	B119953440B3784AFA76EA69EE86F1AA
SHA1:	75D53F6E9EA142DC6E0B405909C88A9902A509E0
SHA-256:	5DB5E464735C8B3469B62E9F9E785B3A89FCEC6037AA39738303628BD37B15CD
SHA-512:	376BCE067846D9EC610CDB17F32A4BDDBD9D496501C7DE84B71EC0B80F19B0DD416801A156742188F0968AF7152794C71617C8347ADA8B8011143F9FB5C15107
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/logo-main-serviceontario.woff?fvweqx
Preview:	wOFF....... ................................OS/2.......`...`...~cmap...h...T...T.V.gasp................glyf.............z..head.......6...6.>.Yhhea.......$...$....hmtx.......P...P..y.loca...,..........maxp...X... ... ...;name...x.........J..post....... ... .......E.......................3...................................@.........@...@............... .................................8............. ........... ................................................79..................79..................79...........9.......!.!..9..........%...,........#"&'5..32654&'..54632.....#"............A#.8..7..,...8=/O2.5..1..(9D9........C.........%366..?....."&7/.'....O...W........%"&54632.....#..3267...#."..34&#..HUKA)=....../.-..7.....h. .TI@Y)).,.+(..7....2..2.......E......."...#.3.>.32.....#.$.$.OO./!............&8.#..G.....\..........%#.3.73..MqTQR6..&.................%"&54632.....#"....3267...#..FRVG.*..'.)%(,.%.....UFJQ..:..>$)=..6.......@...G........%"&54632.....#..3267...#."..3..#..IV

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\logo-ontario@2x[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 360 x 90, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6685
Entropy (8bit):	7.944455102549109
Encrypted:	false
SSDEEP:	192:2984aRNVS4C+7a2qyRFgge3JhPXtkTnMcN6gmzcNUpEFmMPL:qjqbSe22Dpe3JhPXOXxJNUpjMPL
MD5:	E8A33EC19FDD1999B72BD5068A48E25E
SHA1:	1199C2514782D560AC625C49F7D342A2D863544F
SHA-256:	3716D8CA38EA99B178CC68FDA173E98D05210C126B602B67F0D8B3F130DFD4A2
SHA-512:	5D214AABE15D2850E72C400D828B479C7CD80DE64F7760C21601DD58992C0811E7985F16905FE17F57CE941EE348E71DD11CD54A83057A868A4273098239B5B8
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/logo-ontario@2x.png
Preview:	.PNG........IHDR...h...Z...... ......IDATx.....]A...g.m..qR.m.Qm.W.m.Nm.k.\|'<....RJyb..P!jH.i..U.....:.t.v.j.G..35...\.......T...J:..w.....I.4.""@0......=2SoB..h..%.i"=.....P....x.Rd..v..k.E......"..@{2.IM.....h..4..;..@..'.N..{.(..ZD.U~z....ZD.MQ./..@...(E..h.E..J@....h.q..t..O....h.q.uP..B..h.q..P..<...8K!..VO.-".`..hg)@.-"......i.E..P.v..i..AD..N].\|.{v...+.h...=......%K.q.F..f<......{0..X.v-..X...c..=s&.-].-.7...Sx..%.T/..#...Vf8d..Q..Qc.....'A..p.......Y...."V..H.:..)..-Zb....u.&l..X.p!.n..<;m...5.B..~x.!..... N\d...k......u...x..Vv."k..ID*.o....8.0...................uww...K..........g..wv.{.B.;.WK.I..av.,....h.IT.R...../.....%]05.?..J..).31.Ed..?/.\(........#..4m4.C.J..?..}[......_.P.....K..\.-....Lzq.)^....L.n%...ZQ.'."..3...}/...j......q....p..V.;{N.\........7...9r....J%...?/.....{)..N......>~E...7.B.:U..(..y.L.....0ZM..B!.6.......5"12.>d..>}...+W....(.#u.{.b....g..6....H...l.......+,......@(.F .f..S8.tQb...5.=.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesite-contact-us.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	4213
Entropy (8bit):	5.0419075599097765
Encrypted:	false
SSDEEP:	96:KTfORuzFDubr04doJaveTCzll8Tt90Sh1:KjQyJD0M37
MD5:	2E45C11110BE0B34805211925E828627
SHA1:	473DDAE6DFEA23DB1B1866EAF15F29432BE38F9B
SHA-256:	9EEE3D778CD03BAD9DEA05343FD1DB44AE38D1802EB1D72B5F6B5F57F8E45C3D
SHA-512:	B097225C21F436CADD4C709FFE151A2F92F57D46AB784E3436D3A8F28D783EED0ADD60A5A3589805D777407284199D0033DF687A29EA3362DF6F166EA6166CE0
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-contact-us/onesite-contact-us.min.js
Preview:	"use strict";angular.module("onesite.contact.us.services",[]).factory("contactUsService",["remoteStorageService","sessionService","dataBindingService","apiEndpointConfig","componentApiService","redirectService","$q","$parse",function(a,e,t,c,s,d,u,l){var r={};return r.getContactNode=function(r,n,e){var i="/"+c["onesite.app"].apiService,o=c["onesite.app"].apiServiceCrossDomain,a=u.defer();return function(e,t){var r="/"+c["onesite.app"].apiService,n=c["onesite.app"].apiServiceCrossDomain,i=u.defer();return s.getEntity({url:d.respectProtocol(t.useRelativeUrl?r:n+r)+"/url/"+e,method:"GET",withCredentials:t.withCredentials}).then(function(e){var t=angular.isArray(e)?l("und[0].id")({und:e}):e.id;t?i.resolve(t):i.reject()},function(){i.reject()}),i.promise}(e,n).then(function(t){if(angular.isString(t)&&""!==t.trim()){var e=encodeURIComponent(t);s.getEntity({url:d.respectProtocol(n.useRelativeUrl?i:o+i)+"/"+e+"?fields="+r,method:"GET",withCredentials:n.withCredentials}).then(function(e){a.reso

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteActionBar[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1914
Entropy (8bit):	4.386222794275706
Encrypted:	false
SSDEEP:	48:cjY8iYKFoYT3RdDl+G9xLCAqrTWAWCAurTWAs2bs7ErTf1oz19KsD:Q47xbjNqrTtCurTtXs7ErTf1oB93
MD5:	CDA0D817F00500442BDA07006D60A673
SHA1:	0715D673240E3A86E0C019CFA302FEDC64AA61DA
SHA-256:	0EBC1F7DDC087B1FEE62C71D7143C9AD63003815BF36FF6F0BED2104A919A350
SHA-512:	F14CE1616DCD7595A6C2226C2891D2ED1E257EA1A6A57073DA635FFB79583BF2FE9B4AA2769E07E8450E7C88898B5EAAC8F40117D6D1395B3C3D9E5344C694E2
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteActionBar.html
Preview:	<div>. <scroll-to-bottom></scroll-to-bottom>.. <div class="row action-bar">. <hr ng-if="mainController.node.content.tags.tagList.length \|\| mainController.node.content.tags.externalTagList.length"/>.. <div ng-if="mainController.node.content.type === 'dataset' && mainController.node.content.tags.tagList.length" class="small-12 medium-9 large-10 columns">. <h3>. {{ 'Topics' \| translate }}. </h3>. TODO: ga -->. <ul class="inline-list">. <li ng-repeat="tag in ::mainController.node.content.tags.tagList". tag="tag">. <span ng-switch="mainController.node.content.tags.lang". class="label radius">. <onesite-search-tag-anchor ng-switch-when="fr". query-key="balise". query-val="{{ ::tag.name }}". analytics-event="{{ '' \| analyticsEvent }}">. </onesite-search-tag-anchor>. <

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteAside[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, UTF-8 Unicode text
Category:	downloaded
Size (bytes):	2461
Entropy (8bit):	4.52395668895917
Encrypted:	false
SSDEEP:	48:Anok8XHghh8Wx4YLzOJ19YsYzOVvmq6EUq09qFr:kQghQuM
MD5:	A597AB8F7BB61DA94B4C83B9648D202D
SHA1:	8003CDBB9E31D8EBC590D451E9C2026823E0900A
SHA-256:	4B1EE1B3B0FAA7F96890B2BEF0A78130C009393EA0464E22E21A0B1EFAE4260A
SHA-512:	040BC9BD9E409293F4235AB4802F73B386F805262D2583CBD82395E9C6E2435E06244B85B22843FD41F46C46E67FA7DC5657C5586633536C5345459109D68B86
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteAside.html
Preview:	<aside>. <div class="large-4 medium-12 columns">. <h2 class="show-for-sr">. {{ 'Related information' \| translate }}. </h2>.. <div onesite-accordion. one-open="false". class="sticky">.. <div onesite-accordion-group. heading="{{ 'Accessibility' \| translate }}". is-open="show-for-medium-up". toggle-open="true". ng-if=". mainController.node.content.params.contentType === 'document' &&. mainController.node.content.documentViewer.enable. ". ng-switch="mainController.node.content.lang">. <div ng-switch-when="fr">. <div ng-include="'/core_modules/component/partials/accessibilityNotesFr.html'"></div>. </div>. <div ng-switch-default>. <div ng-include="'/core_modules/component/partials/accessibilityNotes.html'"></div>. </div>. </div>.. <h2 id="section-related" class="h6 sidebar". ng-if="mainController.node.conte

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteFooter[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2553
Entropy (8bit):	4.485231880884312
Encrypted:	false
SSDEEP:	48:52mfrkySSFuheMPVWDoc22rErTfV96Ls83355UFGjXd:7S4oNYDZrErTfVA9UFe
MD5:	36335616D43F1683539C44D8A43F1D9C
SHA1:	8F26F28D75CA2D0EC80B428ACCC39956E6D3410F
SHA-256:	D8E329F006CFF8C329A67726A542EF2A2E18F23613208085A1EB64DB1651FDF4
SHA-512:	E3176CD90CB4168569BFDD38D222961335411E65112365AF3060F73B0B034A9386E0B0C4C5C68EF8E742C50AB495D1481E127DF660D5FCFF02C990ACCB7E93B3
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteFooter.html
Preview:	<footer>. <div class="row" data-equalizer>. <onesite-taxonomies lang="{{ ::mainController.node.content.lang }}". ministry="{{ ::mainController.node.ministerFooter.ministry }}". taxonomies="mainController.node.content.taxonomies". class="show-for-medium-up large-3 medium-4 columns topics" data-equalizer-watch>. </onesite-taxonomies>.. <onesite-contact class="small-5 medium-3 large-2 columns contact" data-equalizer-watch>. </onesite-contact>.. <div class="small-7 medium-5 large-7 columns owner-branding" data-equalizer-watch>.. <div class="row">. <div class="small-12 large-8 medium-12 columns">. <h2 class="h3">. <a ng-if="mainController.node.ministerFooter.ministerExternalLink". href="{{ ::mainController.node.ministerFooter.ministerExternalLink }}". analytics-on analytics-category="Footer". analytics-event="{{ '' \| analyticsEvent }}

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteHeader[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	7035
Entropy (8bit):	4.263274724098631
Encrypted:	false
SSDEEP:	96:zNLLKr1TqSaYhSrzjKVNfBSr1ffmfBSr1ffO0idqr1LxZZ8Sr1Cf60xZNLrSrzkM:S2BXdbJ70xPUX
MD5:	79294BCADECFA768064D62D929CCA8EE
SHA1:	5FB29C02EBB7F13E9D1D19746B384643F45DD163
SHA-256:	49171957780877832549B43ECBE43324548D9872C2EFE995B83E45203458A32D
SHA-512:	D4AB923234C56DF80166D5D879C5C1A62EE5DCAF2C7685B736F2010243D5A03B8DD750080B1CE5159F92FC0CA427F8FFC1DBF545CF652DE7BEFC165C3EA9F009
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteHeader.html
Preview:	<header ng-class="default">. <div class="row">. Note: class site-logo-print--wrapper is used to display the logo when printing -->.. Logo -->. <div onesite-header-logo. class="small-5 medium-4 large-3 columns site-logo-print--wrapper">. <div class="site-logo-print--wrapper">. <a href="{{ aliasToPath(headerlogoAliasCollection[contentNode.lang ]) }}". analytics-on. analytics-category="Header". analytics-event="{{ contentNode.ministry \| analyticsEvent}}". analytics-label="logo">. <span class="iconWrapperLongNoBg iconLogoHeader">. <img class="site-logo". ng-src="{{ pathLogoHeader }}". alt="{{ 'Government of Ontario' \| translate }}">. </span>. </a>. <img class="site-logo-print". ng-src="{{ pathLogoPrint }}". alt="{{ 'Government of Ontario' \| translate }}">. </div>. </div>.. <div class="medium-5 large-6 c

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteIntro[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	2165
Entropy (8bit):	4.501592986180701
Encrypted:	false
SSDEEP:	48:vSSX0nJFOpkYQDv5lUPflRMYobf5ls28o4ZTlxYobf5lsQo:sKGMNGriy
MD5:	A71DB86CD98A06AC64AB437E44B30C0F
SHA1:	EE5F0C974A40E6BEFF37FC7BDD6442338CE1543E
SHA-256:	051DD761C86E94ACD1DF924BB3CEE772B17A05055AFF1E29ABD2AF9529C69FF5
SHA-512:	5B8BE982D87CD8329E4DC28ED4D9ADEB9D8A56F77CDF1F60455C970949BE4E2707736BE85087D153B426167C08F189977E6C0B9B6EC722A8DE66A34B3FDAF028
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteIntro.html
Preview:	<div>. <div. ng-include="'/core_modules/component/partials/onesiteServiceOntarioLogo.html'">. </div>. <div ng-switch="mainController.node.content.banner.type">.. if banner -->. <div ng-switch-when="marketing" class="marketing-banner">. <img. data-interchange="{{ mainController.node.content.banner \| onesiteBannerDataInterchange }}". alt="" />. <div class="row intro">. <div class="small-12 custom-size columns">. <span ng-if="mainController.node.content.tags.breadcrumb">. <onesite-breadcrumb. breadcrumb="mainController.node.content.tags.breadcrumb">. </onesite-breadcrumb>. </span>. <h1 ng-bind-html="mainController.node.content.title"></h1>. <compile-html html="mainController.node.content.intro">. </compile-html>. </div>. </div>. </div>.. if thumbnail -->. <div ng-switch-when="thumbnail" class="row intro">. <div class="small-12 mediu

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteSearch[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, ASCII text
Category:	downloaded
Size (bytes):	333
Entropy (8bit):	4.292135598475572
Encrypted:	false
SSDEEP:	6:5FerD32ojlPjNxxyrNR7vvice7j6F9ARFMGNOiCNdyQBM4y:5EDNpc37vacCj6fTyUMZ
MD5:	D21119BBF53EDDD0B161E0CB6B36B55C
SHA1:	EC84961ACCD9E40FFDD6CBD69C43F55293845E4A
SHA-256:	7215874B4614124BC03966527E0A3167BFC507AD3E97E9A5234F86E5F8F6465C
SHA-512:	91E7F133E1221C11E4AB2778489BB67D4D5BC7D98BB14AAC81412CD07F053E929CC06FF89EF23627EAE4E6041CC556406B95AB6B8EF6E9D6CA68247B8EB88EE1
Malicious:	false
IE Cache URL:	https://www.ontario.ca/onesite_modules/onesite-search/partials/gazette/onesiteSearch.html
Preview:	<div class="row". ng-init=". last = {};. selected = {. result: []. };. current = {. keyword: null. };. ". scroll-to-detail="true">.. Search Filter -->. <div ng-include="'/onesite_modules/onesite-search/partials/gazette/filters/control.html'">. </div>..</div>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteTaxonomiesAsMenu[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	343
Entropy (8bit):	4.4629842635226895
Encrypted:	false
SSDEEP:	6:G4fHdGF2D90MgBy596C59FFrA+KL1vBtvCvkL+qt+Nqf/F3vgY+T96i/u96OUJMv:G4f8FG0MAybN9/rA5L1BdKrU+QfN/d+8
MD5:	B501B706A6535B88F105B0E881F2A764
SHA1:	4D75FA115363C44C4F209550F31594343B9C6377
SHA-256:	215CC3DFD1426400FA0425BE5C0FF76D56987BA17CC20D7559D873C66DA4502C
SHA-512:	968AC7410CFCE334113E2655BE2A1426027E331C6E4CC4FB5DCD190DA60C72662323FF2EF35FBFDB1B162F8CD8AC93DB1B6BFADAEBDD409A4C37ABF0EE547664
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteTaxonomiesAsMenu.html
Preview:	<ul class="no-left-margin">. <li ng-repeat="vocabulary in vocabularyList">. <a href="{{ vocabulary.url }}". target="_self". analytics-on. analytics-category="Header". analytics-event="{{ ministry \| analyticsEvent }}". analytics-label="{{ vocabulary.name }}">. {{ vocabulary.name }}. </a>. </li>.</ul>

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\onesiteToc[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	974
Entropy (8bit):	4.709345214631061
Encrypted:	false
SSDEEP:	24:jZ/3gISo5uBtp+iFh78C6S2LqwrUtflkmROQdgM2k:jlSLv+i77T6S2Lqwr6fljOQdgZk
MD5:	016696ADFEFB395A356F39DB591DE886
SHA1:	C5FB5C7420DD2205670C82643F3686B616FE3C53
SHA-256:	89171A2636AE700EC35E25C39EA3A1238D48BCDB27EE9AC03096DF2746439ABC
SHA-512:	F28A1DDCCE55D41D64460B060C1A0EF1B055ACB8DC12C99AC2833146E02133A83D4250EB23D0351FCCCEC266580FE507CCDD780518ADDF7462A1532EF0857C35
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteToc.html
Preview:	<div ng-show="tocList && tocList[0]" class="row collapse">. <h2 class="toc--header small">. {{ 'On this page' \| translate }}. <a class="show-on-focus text-right smaller indent" href="#toc-end">{{ 'Skip this page navigation' \| translate }}</a>. </h2>. <div id="toc" class="small-12 column">. <ol class="cols" ng-class="{'columns-x-large': tocList.length > SPLIT_THRESHOLD}">. <li ng-repeat="toc in tocList". ng-show="!toc.type \|\| (toc.type === 'faqs' && includeFaq)". ng-class="{'hidden-for-large-up' : toc.section.id === 'section-related'}">. <a href="{{ path }}#{{ toc.section.id }}". data-anchor="{{ toc.section.id }}". analytics-on. analytics-category="page-contents". analytics-event="{{ ::ministry \| analyticsEvent }}". analytics-label="{{ toc.title }}". ng-bind-html="toc.title">. </a>. </li>. </ol>. </div>.. <hr class="thick" id="toc-end">.</div>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ontario-icon-breadcrumb[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	652
Entropy (8bit):	5.227778890961346
Encrypted:	false
SSDEEP:	12:TMHdoI645i/nzVW/KYf3UfW6O4lbyzRtSVhzxuUUUUUUUUUUUUUUcq:2dVB5AALfEfWMlbInSu
MD5:	FB0A3EBD668CEC8C4C654413F20FA336
SHA1:	A5AF6E1B1772677538A8A8177ED52474674E010A
SHA-256:	179C4C5284987677F59E6C0F4D95F15161442A19B1EC3F944703A75935F2C38E
SHA-512:	8D1DD8F1D2D90E98BA63824014DA31B91031C8CDAFB91E685CC3169CF6DD190AED8A3852FBF625E911E28733DEE0EBC62C6779FC49324D45E3D7BB0DD0102D23
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario-icon-breadcrumb.svg
Preview:	<?xml version="1.0" encoding="iso-8859-1"?>.. Generator: Adobe Illustrator 19.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->..<svg version="1.1" id="Capa_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px"... viewBox="0 0 256 256" style="enable-background:new 0 0 256 256;" xml:space="preserve">..<g>...<g>....<polygon points="79.093,0 48.907,30.187 146.72,128 48.907,225.813 79.093,256 207.093,128 .."/>...</g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..<g>..</g>..</svg>..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ontario-icon-menu[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	151
Entropy (8bit):	5.0696140584923
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5zMcBH8+hHSKlkcHCUdE3VtGRI3VvTdahdHqGrqLW:tI9mc4slzXdhyKjCUdezGRI3xTdfw
MD5:	6527BD8C3CC6C6CC92B96721F92A8985
SHA1:	646DB6DCC17B5F62D394DAE3B015CD92036E4048
SHA-256:	F3EFFE3F60382E0D0B5495838FE968CECE0EDE8878F41AC1BA1FCE19E92346C5
SHA-512:	03A2C4BCDE0C57D5952DE018F1DA9B0092DEF78308D84AEDADCDE6E63D669023D0CD58DBDAB972DF5A80D43D8C40EC4500FEE470F330C8CF3BD0486407597826
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/design-system-assets/icons/ontario-icon-menu.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" fill="none"><path d="M3 18h18v-2H3v2zm0-5h18v-2H3v2zm0-7v2h18V6H3z" fill="#fff"/></svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ontario-logo--mobile[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1549
Entropy (8bit):	4.32114655075787
Encrypted:	false
SSDEEP:	24:tI61lCpcmBQzb/gM/J606LKmSzrRrhy9QzYajdQl0nG02BcromgZLlhmVNc41llC:lUBQdJ6X8iQzYaI0nGfchghmVND1lx2
MD5:	8605E4FB97DA8B6A1DC5DF2D7C5BFB4A
SHA1:	085EB70255E3793E4FAF8ACC3F2E912FCFD57A92
SHA-256:	09E16128E7AB76EA7C9248B87FB4265B5D779904A1728BD021D88AFC43DEEB39
SHA-512:	6EDD2753E23B7DA754D0938441AE04E299A75D00BCCFB0C8532CEF49564028BAAE5969ACA8FC45FD085357B14628CC7296B749B2C7B532EE7D230F16D5D45DC4
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/logos/ontario-logo--mobile.svg
Preview:	<svg width="46" height="46" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 46 46" fill="none" xmlns:v="https://vecta.io/nano" tabindex="0">. <path d="M23 0C7.36 0 0 7.36 0 23s7.36 23 23 23 23-7.36 23-23S38.64 0 23 0" fill="#fff" />. <path fill-rule="evenodd". d="M23 13.223c4.728-3.178 10.58-3.613 15.69-1.153l.18.128-.026.18a16.08 16.08 0 0 1-2.07 6.765c-1.405 2.41-3.4 4.408-5.8 5.79h-.025a15.71 15.71 0 0 0-.365.191c-.188.1-.38.203-.58.296.383 5.69-2.172 10.994-6.85 14.197L23 39.72l-.153-.102a15.76 15.76 0 0 1-4.805-5.176 16.12 16.12 0 0 1-2.095-7.944v-.026c0-.333.025-.692.05-1.05-5.086-2.51-8.382-7.38-8.817-13.043l-.026-.18.153-.077c2.147-1.05 4.523-1.59 6.874-1.59 2.786 0 5.494.743 7.897 2.127h.026a17.21 17.21 0 0 1 .895.564zm5.93 8.56c1.763-1.025 3.27-2.46 4.37-4.33.51-.897.894-1.82 1.176-2.69-2.888-.666-5.8-.23-8.433 1.204.23.307.383.64.537 1.076s.18 1.025.05 1.512c-.05.205-.153.4-.256.615h0c-.51.87-1.584 1.512-2.913 1.922.51-1.59-.307-2.998-1.33-3.895-.51-.46-1.1-.846

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ontario-logo[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 360 x 90, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6685
Entropy (8bit):	7.944455102549109
Encrypted:	false
SSDEEP:	192:2984aRNVS4C+7a2qyRFgge3JhPXtkTnMcN6gmzcNUpEFmMPL:qjqbSe22Dpe3JhPXOXxJNUpjMPL
MD5:	E8A33EC19FDD1999B72BD5068A48E25E
SHA1:	1199C2514782D560AC625C49F7D342A2D863544F
SHA-256:	3716D8CA38EA99B178CC68FDA173E98D05210C126B602B67F0D8B3F130DFD4A2
SHA-512:	5D214AABE15D2850E72C400D828B479C7CD80DE64F7760C21601DD58992C0811E7985F16905FE17F57CE941EE348E71DD11CD54A83057A868A4273098239B5B8
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario-logo.png
Preview:	.PNG........IHDR...h...Z...... ......IDATx.....]A...g.m..qR.m.Qm.W.m.Nm.k.\|'<....RJyb..P!jH.i..U.....:.t.v.j.G..35...\.......T...J:..w.....I.4.""@0......=2SoB..h..%.i"=.....P....x.Rd..v..k.E......"..@{2.IM.....h..4..;..@..'.N..{.(..ZD.U~z....ZD.MQ./..@...(E..h.E..J@....h.q..t..O....h.q.uP..B..h.q..P..<...8K!..VO.-".`..hg)@.-"......i.E..P.v..i..AD..N].\|.{v...+.h...=......%K.q.F..f<......{0..X.v-..X...c..=s&.-].-.7...Sx..%.T/..#...Vf8d..Q..Qc.....'A..p.......Y...."V..H.:..)..-Zb....u.&l..X.p!.n..<;m...5.B..~x.!..... N\d...k......u...x..Vv."k..ID*.o....8.0...................uww...K..........g..wv.{.B.;.WK.I..av.,....h.IT.R...../.....%]05.?..J..).31.Ed..?/.\(........#..4m4.C.J..?..}[......_.P.....K..\.-....Lzq.)^....L.n%...ZQ.'."..3...}/...j......q....p..V.;{N.\........7...9r....J%...?/.....{)..N......>~E...7.B.:U..(..y.L.....0ZM..B!.6.......5"12.>d..>}...+W....(.#u.{.b....g..6....H...l.......+,......@(.F .f..S8.tQb...5.=.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ontario@2x-print[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 637 x 162, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4233
Entropy (8bit):	7.890440885738752
Encrypted:	false
SSDEEP:	96:dn8r57dOJ3d9P56ef0wc54KE1aE4W6lizEm2wbZLxAvqOFc:duI3dr6eY4AExzEBMpKvqOFc
MD5:	F4DC8A52B36FCE82D8E252233967B942
SHA1:	0739463222FBE6D07057AD44293778D7DACCE5D4
SHA-256:	5118D295C9B133CA1E0511029D25E93E94EF3C4AC165822DD3D070A3A7996AF5
SHA-512:	6FEBE50A98484B7F57FDB39EBDF23506547525540BDBDD2A973047A7210D71A86B48C38AF80BAAD3CFDD4EAAB47AC9C7E4FC090FF91B00FFE2E0CE83C91464BD
Malicious:	false
IE Cache URL:	https://www.ontario.ca/img/ontario@2x-print.png
Preview:	.PNG........IHDR...}..........Z.,...cPLTE......................................................@@@ppp.................. 000......PPP```....^......tRNS..@ ....P0..`...p.......IDATx......!..a..,-....W....0.0\|...7`Nn!..^K)...?...[....P...._[...X....j....Wo?..c..m...K.y....[.:.>.B...<....C.$z..............C..../..9vg.3.k.....Q35..]s.g.._4...\.C..a}\|W....-...w^.....nh.._....3.......tC.)...h.V?......e.b..E...:...'.2...J4....a. ...........t}.3Q....(`..c.....Oy'...Nd..v{..R.TM.X..i.lw...x...p8.........R...I(..=.N...n.....Y...kI.........c.1......;...H.a..94....a.R$~.c..N..wC...t...S........B..... X...d..v..}...a...V.D.Y.m.....>x.O.<...k...r..x.....&p.......V.H.........._.]u.R.}Rp....s<-.3.,...$]^...k..\|...p..v..3*.<..[..u.......b.$.j..>..{.>o..;hc.j..wO..a.H..F,.T..}..._w$F.p.......wj..A...R.v.\'.\|O...0....>...W...V...A.7.\.}.>.c.....Q.o.....^yf.^ &......zq.h.....o$.WX`R.k./.ga........v.`.....Q$.B.c.A..[~.A...a...}..).T..6...K.).g..2....@.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\ontarios-covid-19-vaccination-plan[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	82652
Entropy (8bit):	4.665790778588548
Encrypted:	false
SSDEEP:	1536:j+ySM/YNSq24AmTq/DizM/7hcKsKZEW7ibYyc0fwVgFY72snx3azI7lTmrAz1PJy:GDa3azIQrAz1PJlb93m6L2h
MD5:	0316A40C28B53E7E26871F4B80C45326
SHA1:	0F768BC3CF2381B19464020C5531ED1B371B7393
SHA-256:	DF58701984C9F91D8CB5A7730DD53062B56F7423AEC16C7ABB8EF10A18666D46
SHA-512:	B675670C541A233DEF1A0F7FF9DBAC64EAEA5292DD298EBCAC4ABC91CB62A710B3A639BCAE4AC2A3DAFBB6B358C964AB80DA6142EEA32C98DCA45274FA8D2F6E
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/ontarios-covid-19-vaccination-plan
Preview:	<!DOCTYPE html>.<html lang="en" dir="ltr" prefix="content: http://purl.org/rss/1.0/modules/content/ dc: http://purl.org/dc/terms/ foaf: http://xmlns.com/foaf/0.1/ og: http://ogp.me/ns# rdfs: http://www.w3.org/2000/01/rdf-schema# schema: http://schema.org/ sioc: http://rdfs.org/sioc/ns# sioct: http://rdfs.org/sioc/types# skos: http://www.w3.org/2004/02/skos/core# xsd: http://www.w3.org/2001/XMLSchema# ">. <head>. Google Tag Manager -->. <script>. dataLayer = [];. (function(w,d,s,l,i){w[l]=w[l]\|\|[];w[l].push({'gtm.start':. new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],. j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src=. 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);. })(window,document,'script','dataLayer','GTM-5G4CS4L');. </script>. End Google Tag Manager -->. <meta http-equiv="Content-Type" content="text/html;

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\open-sans-400--italic[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 15076, version 1.1
Category:	downloaded
Size (bytes):	15076
Entropy (8bit):	7.960536136856118
Encrypted:	false
SSDEEP:	384:ihKnWsY3Y02JQ9zxRm7TR7NA0tXn/qZOSO7O7RWf5v1X:e2WPp2J2Ct7TXnSsSSSRWhl
MD5:	4B52A816817A711E6971955C835ECFBB
SHA1:	051C5829D5DF0558FC4C8CE02149FB703EA763CA
SHA-256:	14B889CE4EB170C9DEDE3907438E89A1C43E7A8C3E7F3DEB8FB280042CF57BF1
SHA-512:	2D44B2BBB0A66C162ED206CE58BE93F738E45938D41E497E8C3E525A0E06225F64CD335F1854F2475A9664C31127BEF7ECCD2FF630FBF6888C29EA48E55FC541
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/fonts/open-sans-400--italic/open-sans-400--italic.woff
Preview:	wOFF......:.......c4........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`.M.=cmap...8...........gasp...............#glyf......'b..8..O..head..D...6...6..'nhhea..\|..."...$...Khmtx..........l.v>xkern..,............loca..6..........t.Kmaxp..8.... ... .d.Ename..8........l.n5.post..9\.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f.f......:....Q.B3_dHcb```.fccfeabby....A!.(..................ah..e.P``...c.`.............x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..{.\S.....7..R.@..C.DT.... ."""....l.....#".....Z..)...-".n./.j.Uk}.Z...U.]..d...7.....m.?1..;g.9s.;g...3.g)jeXF.0..>r5\|.......P*j}..........;..1.......y.(...b...v'?/..+.F.F.z.E..."%~.r[x..'(.............=.>?...1?T.jx......g..Xxw..H.K...AD..d....?.^I.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\open-sans-400--italic[2].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 15076, version 1.1
Category:	downloaded
Size (bytes):	15076
Entropy (8bit):	7.960536136856118
Encrypted:	false
SSDEEP:	384:ihKnWsY3Y02JQ9zxRm7TR7NA0tXn/qZOSO7O7RWf5v1X:e2WPp2J2Ct7TXnSsSSSRWhl
MD5:	4B52A816817A711E6971955C835ECFBB
SHA1:	051C5829D5DF0558FC4C8CE02149FB703EA763CA
SHA-256:	14B889CE4EB170C9DEDE3907438E89A1C43E7A8C3E7F3DEB8FB280042CF57BF1
SHA-512:	2D44B2BBB0A66C162ED206CE58BE93F738E45938D41E497E8C3E525A0E06225F64CD335F1854F2475A9664C31127BEF7ECCD2FF630FBF6888C29EA48E55FC541
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/fonts/open-sans-400--italic/open-sans-400--italic.woff
Preview:	wOFF......:.......c4........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`.M.=cmap...8...........gasp...............#glyf......'b..8..O..head..D...6...6..'nhhea..\|..."...$...Khmtx..........l.v>xkern..,............loca..6..........t.Kmaxp..8.... ... .d.Ename..8........l.n5.post..9\.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f.f......:....Q.B3_dHcb```.fccfeabby....A!.(..................ah..e.P``...c.`.............x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..{.\S.....7..R.@..C.DT.... ."""....l.....#".....Z..)...-".n./.j.Uk}.Z...U.]..d...7.....m.?1..;g.9s.;g...3.g)jeXF.0..>r5\|.......P*j}..........;..1.......y.(...b...v'?/..+.F.F.z.E..."%~.r[x..'(.............=.>?...1?T.jx......g..Xxw..H.K...AD..d....?.^I.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\open-sans-400[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14260, version 1.1
Category:	downloaded
Size (bytes):	14260
Entropy (8bit):	7.955023552448444
Encrypted:	false
SSDEEP:	384:V0ZkWiwHBFDPthd/jO+yk0iwCebLvVgYGpn/qZOSO7O7RWf5z4Oc:V0hRbVFykgNSnSsSSSRWR8/
MD5:	D0BAD741AEFB909E4BE56D188B6F02B9
SHA1:	1547224E0A0BE06E5178815718797BD6607169A4
SHA-256:	4194A431CCA6678145F2C4D7D2E597087E2A76A4878C26B66315B2BA4F4EA393
SHA-512:	33FB0A386FD3ED97ADA0A6612D818530FED61E8688A0C38BCE29031076430C7FC2AA075C5AA8003E2E091D80C64602FE7A8D7F3B7380601EFB3CEC20285B50D5
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/fonts/open-sans-400/open-sans-400.woff
Preview:	wOFF......7.......^L........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2......._...`.>..cmap...8...........gasp...............#glyf......$Y..3..~.head..'<...6...6...=hhea..'t.......$....hmtx..'........l..Y.kern..)............loca..3.........C.O.maxp..5`... ... .d..name..5........2../Jpost..6,.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f..8.....u..1...<.f....................{...h..... 0t.vf.....&.O.....)B..q>H..u..R``.....9.x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..z.\S...=so.j.......R.!......V..RDDZ...J.E....H.R.j...R.^k...Z[...W.$.w......~.~...9..9.r...8.....9..9...F\|..#M.f....Y....}.g...\qf.......^..J...;.'..~.h..P?.@..4..........2r.....^./..'....!.1?!..s.H.8.3..U..\g.eP./=/.\@.....^...W...W.-...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\open-sans-400[2].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14260, version 1.1
Category:	downloaded
Size (bytes):	14260
Entropy (8bit):	7.955023552448444
Encrypted:	false
SSDEEP:	384:V0ZkWiwHBFDPthd/jO+yk0iwCebLvVgYGpn/qZOSO7O7RWf5z4Oc:V0hRbVFykgNSnSsSSSRWR8/
MD5:	D0BAD741AEFB909E4BE56D188B6F02B9
SHA1:	1547224E0A0BE06E5178815718797BD6607169A4
SHA-256:	4194A431CCA6678145F2C4D7D2E597087E2A76A4878C26B66315B2BA4F4EA393
SHA-512:	33FB0A386FD3ED97ADA0A6612D818530FED61E8688A0C38BCE29031076430C7FC2AA075C5AA8003E2E091D80C64602FE7A8D7F3B7380601EFB3CEC20285B50D5
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/scss/base/ontario-design-system/fonts/open-sans-400/open-sans-400.woff
Preview:	wOFF......7.......^L........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2......._...`.>..cmap...8...........gasp...............#glyf......$Y..3..~.head..'<...6...6...=hhea..'t.......$....hmtx..'........l..Y.kern..)............loca..3.........C.O.maxp..5`... ... .d..name..5........2../Jpost..6,.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f..8.....u..1...<.f....................{...h..... 0t.vf.....&.O.....)B..q>H..u..R``.....9.x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..z.\S...=so.j.......R.!......V..RDDZ...J.E....H.R.j...R.^k...Z[...W.$.w......~.~...9..9.r...8.....9..9...F\|..#M.f....Y....}.g...\qf.......^..J...;.'..~.h..P?.@..4..........2r.....^./..'....!.1?!..s.H.8.3..U..\g.eP./=/.\@.....^...W...W.-...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\open-sans-600-19453553409b80307b0255bee10ec189[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14344, version 1.1
Category:	downloaded
Size (bytes):	14344
Entropy (8bit):	7.957145836515912
Encrypted:	false
SSDEEP:	384:dFhWFP62nFfi/zfl8RNuqIS4icin/qZOSO7O7RWfJjgGc:nhh2Fq/h8RNuqY6nSsSSSRWxS
MD5:	19453553409B80307B0255BEE10EC189
SHA1:	2482CA1307C1099B935E8B12B2703ECBC0692632
SHA-256:	5A5C13D56F3D40CBCC0DD9F8954737C2E1446CC3E0ACBFA3B1671427331A4DC5
SHA-512:	310EDA49A6468496B61ED08D231D0E008042D3FB018D9E3950F60960B7A2FC9BF0F2E0108009A7BBD3A3F15E68EFC959379F8529E39AB019A8131289FC70E1D5
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/static/open-sans-600-19453553409b80307b0255bee10ec189.woff
Preview:	wOFF......8......._.........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`....cmap...8...........gasp................glyf......$...4rE.R4head..'t...6...6...Ghhea..'........$....hmtx..'........l..S3kern..)............loca..3.........K.W.maxp..5.... ... .Y..name..5........h..52post..6........(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`fy.......:....Q.B3_dHc.................B4.......:.;.).......0.p.2E(00.....n..10........x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.............x..Z.@L....73..M..Z...o-.if6.@5..h.6.....I.6IB....6.mccI,..k.c......[3....^....}...M..{........2..IR...a.Tr..\..h.8.l.T...qw..2..6..-.2..Y.x...J.T.....<A...1.......UlK......C..l1z.>...;. ....(.\|I-O...H[7"S.. ....mUJ..AM/..AE.-......\|..]...W.e.-.._.K

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\open-sans-600[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14344, version 1.1
Category:	downloaded
Size (bytes):	14344
Entropy (8bit):	7.957145836515912
Encrypted:	false
SSDEEP:	384:dFhWFP62nFfi/zfl8RNuqIS4icin/qZOSO7O7RWfJjgGc:nhh2Fq/h8RNuqY6nSsSSSRWxS
MD5:	19453553409B80307B0255BEE10EC189
SHA1:	2482CA1307C1099B935E8B12B2703ECBC0692632
SHA-256:	5A5C13D56F3D40CBCC0DD9F8954737C2E1446CC3E0ACBFA3B1671427331A4DC5
SHA-512:	310EDA49A6468496B61ED08D231D0E008042D3FB018D9E3950F60960B7A2FC9BF0F2E0108009A7BBD3A3F15E68EFC959379F8529E39AB019A8131289FC70E1D5
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/fonts/open-sans-600/open-sans-600.woff
Preview:	wOFF......8......._.........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`....cmap...8...........gasp................glyf......$...4rE.R4head..'t...6...6...Ghhea..'........$....hmtx..'........l..S3kern..)............loca..3.........K.W.maxp..5.... ... .Y..name..5........h..52post..6........(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`fy.......:....Q.B3_dHc.................B4.......:.;.).......0.p.2E(00.....n..10........x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.............x..Z.@L....73..M..Z...o-.if6.@5..h.6.....I.6IB....6.mccI,..k.c......[3....^....}...M..{........2..IR...a.Tr..\..h.8.l.T...qw..2..6..-.2..Y.x...J.T.....<A...1.......UlK......C..l1z.>...;. ....(.\|I-O...H[7"S.. ....mUJ..AM/..AE.-......\|..]...W.e.-.._.K

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\raleway-modified-700-ffec5345d938424d2e531ea4eecd8d9d[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18032, version 4.20
Category:	downloaded
Size (bytes):	18032
Entropy (8bit):	7.97894287396032
Encrypted:	false
SSDEEP:	384:2lBMfgPLy423SZ3M5aM+yLgJ40M2aVtm1erVAWUfFTeOJVZ9vSCOFqvdym+LqMmn:2lbfv5MoMu40M2aLDrvUsM5OQymaqMmn
MD5:	FFEC5345D938424D2E531EA4EECD8D9D
SHA1:	2A4C6A7FE809944C54D5ACA0AAC37B26DC270737
SHA-256:	811B7E18E89AC8CFE7DCC86987A6022858872307B653DBF74D9EC8CB700AA856
SHA-512:	B6DA2A18B41ED1CC08DCC7E6ECC1677972CAACA7CC8414F8BBB44E48A4B5C4A708C81207BD195C0CCECC197531F60ED07BD2869043D49C5CC8FC96B075316D67
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/static/raleway-modified-700-ffec5345d938424d2e531ea4eecd8d9d.woff
Preview:	wOFF......Fp.......h........................FFTM...0.........$m.GDEF...L....... ."..OS/2...l...G...`..p.cmap...........bd..xgasp................glyf......5...j.-W.head..9,...1...6....hhea..9`... ...$.P..hmtx..9.........".$.loca..<............maxp..=........ ...wname..>....z.....2..post..D..........Ldnx.c```d..3.....}0..K.....x.c`d``..b...`b`../@...1.....'..x.c`b\|........H.3...1.......P.#2.).(.A..A)...........`j.$...)..F..{.=.x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..].\|[...-/.+.JW.J....e..%...#..,'q.$.$a$$....e<.{...<6.>.:.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\raleway-modified-700[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 18032, version 4.20
Category:	downloaded
Size (bytes):	18032
Entropy (8bit):	7.97894287396032
Encrypted:	false
SSDEEP:	384:2lBMfgPLy423SZ3M5aM+yLgJ40M2aVtm1erVAWUfFTeOJVZ9vSCOFqvdym+LqMmn:2lbfv5MoMu40M2aLDrvUsM5OQymaqMmn
MD5:	FFEC5345D938424D2E531EA4EECD8D9D
SHA1:	2A4C6A7FE809944C54D5ACA0AAC37B26DC270737
SHA-256:	811B7E18E89AC8CFE7DCC86987A6022858872307B653DBF74D9EC8CB700AA856
SHA-512:	B6DA2A18B41ED1CC08DCC7E6ECC1677972CAACA7CC8414F8BBB44E48A4B5C4A708C81207BD195C0CCECC197531F60ED07BD2869043D49C5CC8FC96B075316D67
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/fonts/raleway-modified-700/raleway-modified-700.woff
Preview:	wOFF......Fp.......h........................FFTM...0.........$m.GDEF...L....... ."..OS/2...l...G...`..p.cmap...........bd..xgasp................glyf......5...j.-W.head..9,...1...6....hhea..9`... ...$.P..hmtx..9.........".$.loca..<............maxp..=........ ...wname..>....z.....2..post..D..........Ldnx.c```d..3.....}0..K.....x.c`d``..b...`b`../@...1.....'..x.c`b\|........H.3...1.......P.#2.).(.A..A)...........`j.$...)..F..{.=.x.c```f.`..F .....1..,..@.........e.cX...1..../.1.[Lw..(.(.(H).)().)X).(.(T*,VX..........$.$.$.$......?...i......M......4a.....i.`.J..+F.M...&.5-.h.......?..........;....o.r=..`.m..>..`...<.\|...........x...{...w..{+.M.......F6....L@..].0.YX..98..yx......ED..%$..ed......UT..54..ut......ML..-,..ml......]\..=<..}\|......CB..#"..cb.....Z.:.&M..h..K..X.r..uk.o.e....v....0%5.J....G....g~(..%...5.)..j..;..s.3\|\|.S...2...3g/^:w~..#7.^...C.....M=.}..z.Le.<{...O.00...J..rU.9..........x..].\|[...-/.+.JW.J....e..%...#..,'q.$.$a$$....e<.{...<6.>.:.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\remote[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	99101
Entropy (8bit):	5.449684214425236
Encrypted:	false
SSDEEP:	3072:fYjXm4iEdKWvGnDusHYy4ygw0vyhD19xR90+2YDSTv:Gm4iEdKWunDusHYy4ygw0vyhD19xR903
MD5:	84F5DA8C439AA470BFE96AD5159A4F84
SHA1:	CAB4E9AF5E02109299BF1F029912271C434AA00D
SHA-256:	EC6FF1EA69B3A469ABF3AA04FC67782BBEDFFF4553BFAEEC5AB17534D1F12403
SHA-512:	0FF368F9196EE1B130F6F795F1E48660D17759A2EF47DF7375703F3418E536DB6FDFD2B5E3DA1C20174D675F5084868786A01F951CF07EC070DABA18A51D9943
Malicious:	false
Preview:	(function(g){var window=this;'use strict';var mJa=function(a,b){return g.Nb(a,b)},j4=function(a,b,c){a.l.set(b,c)},k4=function(a){j4(a,"zx",Math.floor(2147483648Math.random()).toString(36)+Math.abs(Math.floor(2147483648Math.random())^g.Ta()).toString(36));.return a},l4=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.Vm(a.l,b,c)},nJa=function(a,b){var c=[];.g.Si(b,function(d){try{var e=g.Jn.prototype.l.call(this,d,!0)}catch(f){if("Storage: Invalid value was encountered"==f)return;throw f;}void 0===e?c.push(d):g.In(e)&&c.push(d)},a);.return c},oJa=function(a,b){b=nJa(a,b);.g.Bb(b,function(c){g.Jn.prototype.remove.call(this,c)},a)},pJa=function(a){if(a.W){if(a.W.locationOverrideToken)return{locationOverrideToken:a.W.locationOverrideToken};.if(null!=a.W.latitudeE7&&null!=a.W.longitudeE7)return{latitudeE7:a.W.latitudeE7,longitudeE7:a.W.longitudeE7}}return null},qJa=function(a,b){g.gb(a,b)\|\|a.push(b)},m4=function(a){var b=0,c;.for(c in a)b++;return b},rJa=function(a,b){b=b instanceof

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\sddefault[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, frames 3
Category:	downloaded
Size (bytes):	22598
Entropy (8bit):	7.88700795949574
Encrypted:	false
SSDEEP:	384:vfnkKdi5ZqOGuogFif91QNI4k34nz15zaznbkk1wQfZOPXwImnWzRszK8MUVomu:vfkKw8OLogFifHQNI4Lnz0nbNw4e0C9J
MD5:	76BE5EFEC5A2DAE287717D6CB046E887
SHA1:	EAA78B0439D81D3D24D0259609D30E8109CBCF26
SHA-256:	72CAC192E205E81DDD0D49C84E720F0EAD39C4DD69C73D6620D9978331186A7D
SHA-512:	0D91B7F7C162F7A31B8B49DE954CAB4043B8B3DBD248C457791A9030B92A0F56D1F82F194820AE9FCE2BAF69EDB71B29B45CDAC4171702859AA517177343ECE3
Malicious:	false
IE Cache URL:	https://i.ytimg.com/vi/cs4qPsP6COA/sddefault.jpg
Preview:	......JFIF...........................................................................................................................................................".........................................T........................!..1AQaq..".............2Bbd.#DRc......er....CES...$4T..3U...............................0........................!.1.AQ.."Ra..2.q.B...#............?............................................................................................................................................................................................................................................................................................................................................................................F.d....m.......p~M...[.U...J......)?#..Z^H/...>..../...o..&.....b.....K..^...5.b......[..w..........Z..}...m-.v.....Y..j.......1.<%.....Fx.?%.....{..%.S.....N..\|....+.............!a........\|......Y...........\|Cr.d0&\|.....!....r.!.7.......?k...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\sticky-header.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	163
Entropy (8bit):	4.711564923747027
Encrypted:	false
SSDEEP:	3:UV91G2AVgULbvlFPFlHgQEBYPiK0EcIAFwF0Sf4IAwHEZCXLFSKPxC:UNGgiqBYqKhgwF0SwIjlhRw
MD5:	47DD1A9AB77932B92B6C8E68B9B41E77
SHA1:	EE55F889A03FDCF021FA916B6B7CFED8DB417249
SHA-256:	0B61E01FA0FA02EBA3C6A074427DDF2A6CF98C01727B2796309B2B5B005FAC70
SHA-512:	29F9277A71D16CAF1EC6EA5E70963D8F98EFCFCC92F34EDDDD1F6697532553865088113A66B22BE830DE6EF534128527AB18400C9ACF34BA031EA6FEF82FB570
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/sticky-header.module.css?qrgttk
Preview:	/*. @file. * Table header behavior.. . @see tableheader.js. */..table.sticky-header {. z-index: 500;. top: 0;. margin-top: 0;. background-color: #fff;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\system-status-report-general-info[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	255
Entropy (8bit):	4.708599223122268
Encrypted:	false
SSDEEP:	6:UdmEnCWRKuyWfy7MmsBAhxNIRDfy7MmIAF+g/RA:UdzntRbymyImyAh/IZfyImIAZO
MD5:	3F385ED519713C40ED2B0A54D46FA41F
SHA1:	F6CB306AD8ABAC4C5118C3F6156027C48C20A53A
SHA-256:	D106F9CE97021E6CE9A05E593A70EC7E4956667EAB83726C9EB1B473B709FB8E
SHA-512:	151DD0821BE9CE6F4DB4A4B76C37F7A05F4C435C00ADB54FD8C1C7F1FE584FF80A30CEA3735D5F2095C33E070FC791E77BC7BA8261235DBC61FC7F7AE9A6FA9E
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/system-status-report-general-info.css?qrgttk
Preview:	/*. @file. * Default styles for the System Status general info.. */...system-status-general-info__item {. margin-top: 1em;. padding: 0 1em 1em;. border: 1px solid #ccc;.}...system-status-general-info__item-title {. border-bottom: 1px solid #ccc;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\tabledrag.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1840
Entropy (8bit):	4.979542674814808
Encrypted:	false
SSDEEP:	48:02cxDZDI4f1Ba4fgwrE3QA1R53934s44XG4046XfX0u:02cxe4Xa4brE3r1L3t4j4W4046vku
MD5:	E5C74E1C6FD604D03DC784CF615E849B
SHA1:	A2F9F7270EA674F70A6702F5CE4201106EF398D9
SHA-256:	8188BAD0F77AAF0E06C5D199B36C85263048A4AC6361BED201939FDAB3DD196F
SHA-512:	4B47BF98B65F151AA42628A3E3BC69770AF9BD684900971F329059B396AFA83F549FD345D94BA2F1C6DE3726A8B9B21BCCB4399AD1A330903613A9417AB864CF
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/tabledrag.module.css?qrgttk
Preview:	/*. @file. * Table drag behavior.. . @see tabledrag.js. /..body.drag {. cursor: move;.}.tr.region-title {. font-weight: bold;.}.tr.region-message {. color: #999;.}.tr.region-populated {. display: none;.}.tr.add-new .tabledrag-changed {. display: none;.}..draggable a.tabledrag-handle {. float: left; / LTR /. overflow: hidden;. height: 1.7em;. margin-left: -1em; / LTR */. cursor: move;. text-decoration: none;.}.[dir="rtl"] .draggable a.tabledrag-handle {. float: right;. margin-right: -1em;. margin-left: 0;.}.a.tabledrag-handle:hover {. text-decoration: none;.}.a.tabledrag-handle .handle {. width: 14px;. height: 14px;. margin: -0.4em 0.5em 0;. padding: 0.42em 0.5em;. background: url(../../../images/core/icons/787878/move.svg) no-repeat 6px 7px;.}.a.tabledrag-handle:hover .handle,.a.tabledrag-handle:focus .handle {. background-image: url(../../../images/core/icons/000000/move.svg);.}..touchevents .draggable td {. padding: 0 10px;.}..touchevents .draggable .m

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\tablesort.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	373
Entropy (8bit):	4.956232052467826
Encrypted:	false
SSDEEP:	6:UNnzjrp0kUoQK1WHX/x3FMVGnr5CBA3EMufKRSzLLBGmF/r5CBA3EMufKRSYdn:UNz/+kZ14HX/fr5CK01H/r5CK0Yd
MD5:	6544EB8B69F4E47510D33641EC3C3C8F
SHA1:	243B2BDEEC0AC48451D0B0C43ADAAEC0B2B5C02C
SHA-256:	750E66789618A2E5A917B34AA2E29ABD2713041F80259CE54EF1B4F0FDFFCBDB
SHA-512:	CA8A268FAB513F87EDBFCD7BF464044F80818476F16A04C1F8944234679701C5AF11E95D9CBCB2090BD33A68429E7B5A6D2D8A15151F75489B906B98C3EDC403
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/tablesort.module.css?qrgttk
Preview:	/*. @file. * Table sort indicator.. . @see tablesort-indicator.html.twig. */...tablesort {. display: inline-block;. width: 16px;. height: 16px;. background-size: 100%;.}..tablesort--asc {. background-image: url(../../../images/core/icons/787878/twistie-down.svg);.}..tablesort--desc {. background-image: url(../../../images/core/icons/787878/twistie-up.svg);.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\vaccine-locations[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	3324780
Entropy (8bit):	4.7455302260695875
Encrypted:	false
SSDEEP:	6144:zmMgpgZYmS0sXNzM703DUCbkfEE8jli/X:KrEX
MD5:	2A9CFBD4EDA5F7C390C9CE66A935124A
SHA1:	60AEFDB6586C5ACAD90257ADD696477B8DE0844D
SHA-256:	A0F36A5E352EF8FA3BF5C731ACCF3EF679726E21573862B9E89F7659377C96F4
SHA-512:	B4178C77462094083E5611BE7175733BF881480AD2010CE6DDD2CB6725B1B433A51F22005A6C6927542DA90CF323E52ABDDD58544837B185154DE414883E808B
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/vaccine-locations/
Preview:	<!DOCTYPE html><html lang="en"><head><meta charSet="utf-8"/><meta http-equiv="x-ua-compatible" content="ie=edge"/><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"/><style data-href="/covid-19-ac-assets/styles.a7d39651337128709fc0.css">.ontario-callout{padding:.9375rem 2rem .9375rem .9375rem;margin:2.5rem 0}.ontario-callout--double{padding:2rem;margin:2.5rem 0}.ontario-callout--full-width{margin-bottom:0;position:relative;top:-2rem}@media screen and (max-width:39.9375em){.ontario-callout--full-width{top:-1rem}}.ontario-callout__title{font-weight:700;position:relative;top:.2rem}.ontario-callout h2,.ontario-callout h3,.ontario-callout h4{margin-bottom:0}.ontario-callout h2,.ontario-callout h3{font-size:1.5rem;line-height:1.3}.ontario-callout__list{padding:0;margin:0;list-style-type:none}.ontario-callout__list li{margin-bottom:1rem}.ontario-callout__list li a,.ontario-callout__list li a:visited{text-decoration:underline}.ontario-callout__list li a:activ

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\webpack-runtime-ff3f45081dd6bd1465aa[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	4116
Entropy (8bit):	5.404637001162482
Encrypted:	false
SSDEEP:	48:EzHpJUuj8WDKY14BqH8aMJj8awUUHXlFwTctbNglK2fYwcW314BqH8aMJjzlL15f:ETpJUbWOOdFHX8TMzscplLB/UyUvqX6+
MD5:	A10A853459944CC249AE96130A432D40
SHA1:	2B03BD576AA087D24D13C4AAD233CFDA2663EF3B
SHA-256:	DB74DAA4291EB2A710031F3513622F6BF0B3FC7FC9A3676AE1F2862F2867F7A6
SHA-512:	DFF8EE0B93A47A8D4B844565093E8D9DB30CB1EFD450651DFDFDD70B2CC6214840581110C609D1059E20F10319FAEE2B28D71989C0FA45986DFDE5E48B953F38
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/webpack-runtime-ff3f45081dd6bd1465aa.js
Preview:	!function(e){function t(t){for(var r,o,s=t[0],i=t[1],u=t[2],d=0,l=[];d<s.length;d++)o=s[d],Object.prototype.hasOwnProperty.call(c,o)&&c[o]&&l.push(c[o][0]),c[o]=0;for(r in i)Object.prototype.hasOwnProperty.call(i,r)&&(e[r]=i[r]);for(f&&f(t);l.length;)l.shift()();return a.push.apply(a,u\|\|[]),n()}function n(){for(var e,t=0;t<a.length;t++){for(var n=a[t],r=!0,o=1;o<n.length;o++){var i=n[o];0!==c[i]&&(r=!1)}r&&(a.splice(t--,1),e=s(s.s=n[0]))}return e}var r={},o={9:0},c={9:0},a=[];function s(t){if(r[t])return r[t].exports;var n=r[t]={i:t,l:!1,exports:{}};return e[t].call(n.exports,n,n.exports,s),n.l=!0,n.exports}s.e=function(e){var t=[];o[e]?t.push(o[e]):0!==o[e]&&{1:1}[e]&&t.push(o[e]=new Promise((function(t,n){for(var r=({0:"4178e9cc986fc140f048cd41cab70b6192963e31",1:"styles",3:"component---src-pages-404-js",4:"component---src-pages-assessment-centre-locations-index-js",5:"component---src-pages-centres-depistage-index-js",6:"component---src-pages-emplacements-pour-la-vaccination-index-js

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\XNHC0JWC\www-embed-player[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	188279
Entropy (8bit):	5.603499513857841
Encrypted:	false
SSDEEP:	3072:lWkDbAK3HmUrgO7S3uKlQGW4f1exHWBDmzlr4h3bC:FiUrv7S3uItf1ex29mzlL
MD5:	092015B896FFE2E69A18D2CAE63E3A25
SHA1:	E4F74658E3CE9903F9A6869C25529481AE6424AB
SHA-256:	3E7878E1663715360661D68893E34F41B705C615C3A5594D37C2E685DBF13360
SHA-512:	086FF88EF8DC06B9E7FD25E93D8B5D2310F9A6C03DC475190E2FAB87DF97F1855A9B0308430C5410A9FC7C553AFD4ED814742C78020280DBDF933D0C20705E2D
Malicious:	false
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var m;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var ea=da(this);function t(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(e){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c("jscomp_symbol_"

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1182568
Entropy (8bit):	5.161210199357169
Encrypted:	false
SSDEEP:	12288:PpWIQs2+4jrfEzIgG+J73BSeFs4kYUmj4IWc/xlg:tQs21
MD5:	06D71E0D0186B4BE7DB61D2BDD5B74FE
SHA1:	A03DFAF7EF2D974836135E627A8BF6C0E664368C
SHA-256:	86AB84AC202B84229AC6C0CC546A2D702C8213CAAD237CEBEF1370294C1F5E3B
SHA-512:	E96B0E9CE21379B0872B9A1E6E74778F29942D13B9FDEF2FBB1C7951A8627F2AAC4960AFB6F30CA2B90EE7FA735C5B698949E26D75F7630DC84382E843C6D56F
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/4178e9cc986fc140f048cd41cab70b6192963e31-551c0acc8f79274f589f.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[0],{"+ar0":function(e,a,t){var n=t("P8UN");n(n.S+n.F*!t("QPJK"),"Object",{defineProperties:t("YmeT")})},"0HXF":function(e,a,t){"use strict";t.d(a,"a",(function(){return o}));var n={lastWeek:"'last' eeee 'at' p",yesterday:"'yesterday at' p",today:"'today at' p",tomorrow:"'tomorrow at' p",nextWeek:"eeee 'at' p",other:"P"};function o(e,a,t,o){return n[e]}},"2W6z":function(e,a,t){"use strict";t("sC2a");var n=function(){};e.exports=n},"7Qib":function(e,a,t){"use strict";t.d(a,"h",(function(){return n})),t.d(a,"i",(function(){return o})),t.d(a,"a",(function(){return s})),t.d(a,"j",(function(){return r})),t.d(a,"b",(function(){return c})),t.d(a,"f",(function(){return v})),t.d(a,"g",(function(){return g})),t.d(a,"d",(function(){return f})),t.d(a,"c",(function(){return N})),t.d(a,"e",(function(){return k})),t.d(a,"k",(function(){return C}));t("zGcK"),t("v9g0");function n(e){return e.reduce((function(e,a){var t=e.find((function(e){return e.tit

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\KFOmCnqEu92Fr1Mu4mxM[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 19824, version 1.1
Category:	downloaded
Size (bytes):	19824
Entropy (8bit):	7.970306766642997
Encrypted:	false
SSDEEP:	384:ozNCb8EbW9Wg166uwroOp/taiap3K6MC4fsPPuzt+7NCXzS65XZELt:K4zbWcDVwt230hfs+x+Bb65X2
MD5:	BAFB105BAEB22D965C70FE52BA6B49D9
SHA1:	934014CC9BBE5883542BE756B3146C05844B254F
SHA-256:	1570F866BF6EAE82041E407280894A86AD2B8B275E01908AE156914DC693A4ED
SHA-512:	85A91773B0283E3B2400C773527542228478CC1B9E8AD8EA62435D705E98702A40BEDF26CB5B0900DD8FECC79F802B8C1839184E787D9416886DBC73DFF22A64
Malicious:	false
IE Cache URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff
Preview:	wOFF......Mp.......P........................GDEF.......G...d....GPOS...............hGSUB............7b..OS/2.......R...`tq#.cmap...........L....cvt .......T...T+...fpgm.......5....w.`.gasp...@............glyf...L..:+..j.....hdmx..Fx...g........head..F....6...6.j.zhhea..G........$....hmtx..G8...]......Vlloca..I.........?.#.maxp..Kt... ... ....name..K........t.U9.post..Ld....... .m.dprep..Lx.......I.f..x...1..P......PB..U.=l.@..B)..w.......Y.e.u.m.C.s...x.h.~R....R.....2.x.....[....#N..m.m.m.mfm....SP..NuM..9]..=.U..!...[........w...\|......^p....H......;...)..........;..EoDo....E.E.D...`.0.GG.aA.H.V.Mx\xA....../..d3.Eb_.J...R.^v........\^ob.}.z..k.x).v$f$..O)+.2..*....y}6`C6b.6cs...l...........!.........<..\|.\|..\|..\|..\|.\|....o....I%.4.L.SI.&C.6..!`...{...c..\.J.(.2.C....V.A..?.M<nG......v..m.;..R.C..aj.H...=..{.>.:.....}i_Y......:....o.&k..KY.2..6k....i]..{,.p}../.....VO3.o].fJ....R-TZ..;...RN..&V...C...3.?.......&..z.s&.D....r,.I...t.R..a$k..Mm..Y.U...+b.%kQ..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\LoginPage[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with CRLF line terminators
Category:	downloaded
Size (bytes):	16398
Entropy (8bit):	4.925632999755716
Encrypted:	false
SSDEEP:	192:GkoY5qWBUcbXhcnQzTiKbiiO7kolO1iOWLkB7Mcw9IljOF7aLlyN31lOcs:GOUEXhcnQzhbiiO7kolO1iOWLsyIlhgQ
MD5:	18431EAA2FE6A86BB56494349FC1E82F
SHA1:	F6AC9F77A285FA55A189B6DDDD454CA3DE2B2A82
SHA-256:	C2048C079C2AD8E5FBAD997189292D9F35F1601C18FFEC33C3937AEB45F2CA1B
SHA-512:	2335925C4329FC09E6DCFB85A96B3CB37890AD35C880458C30451DC840804441B5EB6BFB7186F0D1B31B1B9ACE5C3D48E6A26AFC6CA1761AB1E652DE71CF9CBA
Malicious:	false
IE Cache URL:	https://www.phdapps.health.gov.on.ca/LoginPage.aspx?ReturnUrl=%2ffavicon.ico
Preview:	....<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en">..<head id="Head1"><meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /><title>...PHDApps - Home and Login Page..</title><link href="App_Themes/app_main.css" rel="stylesheet" type="text/css" /><link href="App_Themes/StyleSheet.css" rel="stylesheet" type="text/css" /><link href="App_Themes/AjaxCalendar/Calendar.css" rel="stylesheet" type="text/css" />..<style type="text/css">.. .IE8Fix {z-index: 100; }.... .MainContentToSkipClass {.. visibility:hidden.. }....a.skip-main {.. left:-999px;.. position:absolute;.. top:auto;.. width:1px;.. height:1px;.. overflow:hidden;.. z-index:-999;..}..a.skip-main:focus, a.skip-main:active {.. color: #fff;.. background-color:#000;.. left: auto;.. top: auto;.. width: 30%;.. height: auto;

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\Open-Sans-600[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14344, version 1.1
Category:	downloaded
Size (bytes):	14344
Entropy (8bit):	7.957145836515912
Encrypted:	false
SSDEEP:	384:dFhWFP62nFfi/zfl8RNuqIS4icin/qZOSO7O7RWfJjgGc:nhh2Fq/h8RNuqY6nSsSSSRWxS
MD5:	19453553409B80307B0255BEE10EC189
SHA1:	2482CA1307C1099B935E8B12B2703ECBC0692632
SHA-256:	5A5C13D56F3D40CBCC0DD9F8954737C2E1446CC3E0ACBFA3B1671427331A4DC5
SHA-512:	310EDA49A6468496B61ED08D231D0E008042D3FB018D9E3950F60960B7A2FC9BF0F2E0108009A7BBD3A3F15E68EFC959379F8529E39AB019A8131289FC70E1D5
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/Open-Sans-600/Open-Sans-600.woff
Preview:	wOFF......8......._.........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`....cmap...8...........gasp................glyf......$...4rE.R4head..'t...6...6...Ghhea..'........$....hmtx..'........l..S3kern..)............loca..3.........K.W.maxp..5.... ... .Y..name..5........h..52post..6........(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`fy.......:....Q.B3_dHc.................B4.......:.;.).......0.p.2E(00.....n..10........x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.............x..Z.@L....73..M..Z...o-.if6.@5..h.6.....I.6IB....6.mccI,..k.c......[3....^....}...M..{........2..IR...a.Tr..\..h.8.l.T...qw..2..6..-.2..Y.x...J.T.....<A...1.......UlK......C..l1z.>...;. ....(.\|I-O...H[7"S.. ....mUJ..AM/..AE.-......\|..]...W.e.-.._.K

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\Open-Sans-italic[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 15076, version 1.1
Category:	downloaded
Size (bytes):	15076
Entropy (8bit):	7.960536136856118
Encrypted:	false
SSDEEP:	384:ihKnWsY3Y02JQ9zxRm7TR7NA0tXn/qZOSO7O7RWf5v1X:e2WPp2J2Ct7TXnSsSSSRWhl
MD5:	4B52A816817A711E6971955C835ECFBB
SHA1:	051C5829D5DF0558FC4C8CE02149FB703EA763CA
SHA-256:	14B889CE4EB170C9DEDE3907438E89A1C43E7A8C3E7F3DEB8FB280042CF57BF1
SHA-512:	2D44B2BBB0A66C162ED206CE58BE93F738E45938D41E497E8C3E525A0E06225F64CD335F1854F2475A9664C31127BEF7ECCD2FF630FBF6888C29EA48E55FC541
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/Open-Sans-italic/Open-Sans-italic.woff
Preview:	wOFF......:.......c4........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2.......^...`.M.=cmap...8...........gasp...............#glyf......'b..8..O..head..D...6...6..'nhhea..\|..."...$...Khmtx..........l.v>xkern..,............loca..6..........t.Kmaxp..8.... ... .d.Ename..8........l.n5.post..9\.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f.f......:....Q.B3_dHcb```.fccfeabby....A!.(..................ah..e.P``...c.`.............x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..{.\S.....7..R.@..C.DT.... ."""....l.....#".....Z..)...-".n./.j.Uk}.Z...U.]..d...7.....m.?1..;g.9s.;g...3.g)jeXF.0..>r5\|.......P*j}..........;..1.......y.(...b...v'?/..+.F.F.z.E..."%~.r[x..'(.............=.>?...1?T.jx......g..Xxw..H.K...AD..d....?.^I.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\Open-Sans-regular[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 14260, version 1.1
Category:	downloaded
Size (bytes):	14260
Entropy (8bit):	7.955023552448444
Encrypted:	false
SSDEEP:	384:V0ZkWiwHBFDPthd/jO+yk0iwCebLvVgYGpn/qZOSO7O7RWf5z4Oc:V0hRbVFykgNSnSsSSSRWR8/
MD5:	D0BAD741AEFB909E4BE56D188B6F02B9
SHA1:	1547224E0A0BE06E5178815718797BD6607169A4
SHA-256:	4194A431CCA6678145F2C4D7D2E597087E2A76A4878C26B66315B2BA4F4EA393
SHA-512:	33FB0A386FD3ED97ADA0A6612D818530FED61E8688A0C38BCE29031076430C7FC2AA075C5AA8003E2E091D80C64602FE7A8D7F3B7380601EFB3CEC20285B50D5
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/Open-Sans-regular/Open-Sans-regular.woff
Preview:	wOFF......7.......^L........................GDEF...X............GPOS...p............GSUB...\|...Y...t...OS/2......._...`.>..cmap...8...........gasp...............#glyf......$Y..3..~.head..'<...6...6...=hhea..'t.......$....hmtx..'........l..Y.kern..)............loca..3.........C.O.maxp..5`... ... .d..name..5........2../Jpost..6,.......(..j.....................................x...5.A...../0.E....-..E.m....2..mz.....)@.]-R...X...@..DN^Q].Md`....]h.,4s...../.......x.c`f..8.....u..1...<.f....................{...h..... 0t.vf.....&.O.....)B..q>H..u..R``.....9.x.c```d`.b.......@Z.A.....`.d.c8.p..?.!c0.1.[Lw.D...........\.J..(......T......... .ja.....jK.......?........=.s..........}.......Ly.. ...@w...@G7.................x..z.\S...=so.j.......R.!......V..RDDZ...J.E....H.R.j...R.^k...Z[...W.$.w......~.~...9..9.r...8.....9..9...F\|..#M.f....Y....}.g...\qf.......^..J...;.'..~.h..P?.@..4..........2r.....^./..'....!.1?!..s.H.8.3..U..\g.eP./=/.\@.....^...W...W.-...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\Raleway-regular[1].woff Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Web Open Font Format, TrueType, length 23124, version 1.1
Category:	downloaded
Size (bytes):	23124
Entropy (8bit):	7.9802653055017405
Encrypted:	false
SSDEEP:	384:XP9TKdqY0+Y88aLOawgz1t17MtnTwl92F7ut/Wa/9sdfPv90WXpI6xP6clYjvmXb:8dq5E8aFwQt1On8Tiw/vF+nv91XpIElj
MD5:	B6CEF9B4764DADA896F1C38229F0AFD8
SHA1:	5665332C0F80F26586D3AA0C5E02FF8664152BB6
SHA-256:	673D9390D7C73824F6509A6FB152F8A3DB97D3325950635A581AD6F31E7ACBD3
SHA-512:	8F02AA4BAE8A1D36CBB9CC9B8B313E7E2B069CF617B051B5FCC8E9178FA318C9B4004328F5427A70E8BB2643B0034BEE45879AB3CC548D0BEFEA0EB33BBAC4B7
Malicious:	false
IE Cache URL:	https://www.ontario.ca/fonts/Raleway-regular/Raleway-regular.woff
Preview:	wOFF......ZT................................GPOS...D.........G.qGSUB.......X...t...!OS/2... ...Z...`..i.cmap...\|.......L....gasp................glyf......p..P.[..Ehead..?....5...6..`8hhea..?........$.2..hmtx..?.... ...p..'Hkern..B.........H..loca..V .........\j.maxp..W.... ... ....name..W...........7epost..X........!.p.Kx.$......E_pV..k.m.m.m...9f..o..O...=......./.@........{.x..t.v.....^).4P...[.S..k.p.w...i....................C..-..#J.}.h..P..T.....1.:]=..T.k...p..Q.w..}...F......[..9..i...[5..vA....>l.t.;#....h.h.......y%V963.6^5.>.5.5.L.O.LlN.O.N.L......tEBE.."A..iIGF2.... ..(Ha.P.b...%)GyP..T....OC..&4...iK;:..t..}....2...e8#..h.0..Lb2S..4.3.Y.f>.X.R...Mlc'...>.s....(.8.INs..\..W..-ns..<..a~7f..q.Y...L.......4...E.0..0(..).D..h.(J..."....n...W_}......VW.s......l8.>......f....*ao......l(4eWB..w..e~....[Y...VNY..r(\|w..~M........[........9[.-Y..Bh...D..:..........7[.....H.{.el.l...-a....lk...`..m-.....3.....z&.....e,.#......c..rAL..=.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\StyleSheet[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode (with BOM) text, with CRLF line terminators
Category:	downloaded
Size (bytes):	365
Entropy (8bit):	4.369578807143019
Encrypted:	false
SSDEEP:	6:vwJAICvFNz31qCsF8W1oyyWfLFh3Ndq5ZlqsFq/FGsS9:YJApvF531pW1RygFh3NdWU/FGj9
MD5:	CE8A1243377C52E18BD2EBAE83FC9526
SHA1:	F5DB0349AC56CC13A73F8F388D0E41477BD60B34
SHA-256:	377FF0000A1D592CCA8E326D57E7B4E75B1BDD1B08A24B291C6E939D28F63855
SHA-512:	8DB913A472910AA2CA499570A3410189502AC75B9739A00127415FD946BC184742B7AE7F5EC557A7F4C55A11BC3BA835B9C7DA04452A07567D68012A172ED46E
Malicious:	false
IE Cache URL:	https://www.phdapps.health.gov.on.ca/phulocator/Style/StyleSheet.css
Preview:	..hidden-element {.. clip: rect(1px, 1px, 1px, 1px);.. height: 1px;.. overflow: hidden;.. position: absolute !important;.. width: 1px;..}.....visuallyhidden {.. border: 0;.. clip: rect(0 0 0 0);.. height: 1px;.. margin: -1px;.. overflow: hidden;.. padding: 0;.. position: absolute;.. width: 1px;..}..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\YrjmP_ueahQ[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	dropped
Size (bytes):	49617
Entropy (8bit):	5.822357822825411
Encrypted:	false
SSDEEP:	768:tCKc1xdf23MSVu3DjLgDJHWFAsNRU5WNDxgYXp0d1cvgZc:f3gL/FAC6MsYX8coG
MD5:	6F79F924DE96C334167A79C2C688EFFB
SHA1:	720D99D6FC7DF5E29891CBE517C4EA4B5489AE88
SHA-256:	0D9D4DA649A21640F9F9D8794DB6F493CE1791E1EA32DE0FA0E63CDB58617FFE
SHA-512:	0F2534B398FFD93289E0D72E544FFFB161DD949D5F183A17927D72DA4EE8855CCA4A273234E6564CDD1AF9C605A8248255872686F8D7B71FF641F5CFA130D18D
Malicious:	false
Preview:	<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><style name="www-roboto" nonce="lscDgOEp4mkrXyOCDcpR4g">@font-face{font-family:'Roboto';font-style:normal;font-weight:400;src:url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxM.woff)format('woff');}</style><script name="www-roboto" nonce="lscDgOEp4mkrXyOCDcpR4g">if (document.fonts && document.fonts.load) {document.fonts.load("400 10pt Roboto", "E"); document.fonts.load("500 10pt Roboto", "E");}</script><link rel="stylesheet" href="/s/player/2cea24bf/www-player.css" name="www-player" nonce="lscDgOEp4mkrXyOCDcpR4g"><style nonce="lscDgOEp4mkrXyOCDcpR4g">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 100%; height: 100%;}h1 {text-align: center; color: #fff;}h3 {margin-top: 6px; margi

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\about-ontario[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	8405
Entropy (8bit):	5.0746341151683
Encrypted:	false
SSDEEP:	96:EGsHG+NLuC/XnuEsejOfrBsrbCspsrbp4IpwVS70qXVTdyrNGz7TzvBAkbfNMhjs:EGsH3IC/XnL8M8uIzybI8jSVg2O+S43
MD5:	0953A2B6FB1D331EFA2AAD3FF8E2DC99
SHA1:	33D9EA08EEFB81ABE8934754EA434A33437B227C
SHA-256:	38BF2EB71CE159B99E4A9C680FED3427D8193EB5DC44CE8A75A684EB00A9F820
SHA-512:	4EDECE89518BDEF904871B360E510F6645E631F1FBF9BE5BC4883131827E4F3B7D1169754E73FC1E27526D78378CB3E37D495B7E3DE7F7280F4D6DE908EB5082
Malicious:	false
IE Cache URL:	https://www.ontario.ca/page/about-ontario
Preview:	<!doctype html> <html class="no-js" lang="en"> <head> <meta charset="utf-8"> <meta content="width=device-width,initial-scale=1" name="viewport"> <meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta name="sha" content="d43396df38048fbb44731befe641f3dfc221eaf3"> <title></title> <base href="/"> <link href="/css/combined.css" media="screen" rel="stylesheet"> <link href="/css/print.css" media="print" rel="stylesheet"> <script src="/vendor/modernizr/modernizr.js"></script> <script>!function(a,e,o,n,c,i,t){a.GoogleAnalyticsObject=c,a.ga=a.ga\|\|function(){(a.ga.q=a.ga.q\|\|[]).push(arguments)},a.ga.l=1*new Date,i=e.createElement(o),t=e.getElementsByTagName(o)[0],i.async=1,i.src="//www.google-analytics.com/analytics.js",t.parentNode.insertBefore(i,t)}(window,document,"script",0,"ga"),ga("create","UA-21003310-6",{cookieDomain:"auto",allowLinker:!0}),ga("create","UA-48649528-1",{cookieDomain:"auto",allowLinker:!0,name:"ServiceOntario"}),ga("require","linker"),ga("linker:autoLink",["serviceont

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\ad_status[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
IE Cache URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\autocomplete-loading.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	troff or preprocessor input, ASCII text
Category:	downloaded
Size (bytes):	611
Entropy (8bit):	4.896700024326516
Encrypted:	false
SSDEEP:	12:U5iyFWHeGeyXGRL7r5/9lms77usaRLI3Mr5ANUmsI3M7usv:IiykHeoXGL5/C7V15+VO
MD5:	655F22AE0B9C622DFE2ED7B80CFF2317
SHA1:	95412E0F07B21DB6AD752CEB72B5B63B98AD26EB
SHA-256:	F5AC9ECF677F9A456C8FAF304F9CD9A6DEB61B2F7CAD70BAC84C63428BC7DBE3
SHA-512:	078851755AB36957614B03549F78C4BD486C75800A2DAE810FEAE9C4DF0363AB4C54687B82A3997F3ECBBC570685FC27501BABBCBA4474BDC340F3EFF32ED83D
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/autocomplete-loading.module.css?qrgttk
Preview:	/*. @file. * Visual styles for animated throbber.. . @see autocomplete.js. /...js input.form-autocomplete {. background-image: url(../../../images/core/throbber-inactive.png);. background-repeat: no-repeat;. background-position: 100% center; / LTR /.}..js[dir="rtl"] input.form-autocomplete {. background-position: 0% center;.}..js input.form-autocomplete.ui-autocomplete-loading {. background-image: url(../../../images/core/throbber-active.gif);. background-position: 100% center; / LTR */.}..js[dir="rtl"] input.form-autocomplete.ui-autocomplete-loading {. background-position: 0% center;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\base[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	1644380
Entropy (8bit):	5.579185646972128
Encrypted:	false
SSDEEP:	12288:vNetzXRr0KR2GRMzKBZcmknN7TTSacwH2AvJRa9DOc9uzP:1et10KfMzKBZcmkN7Te1EsJwzP
MD5:	A3F4FCB79410AB0223E07AF957F25866
SHA1:	658770C407CB2D1C9F66AC5FA8831A9F33831E7E
SHA-256:	4B76A2DD7B5DBE0AAAE16DC3C414486896335CCB82F0C9A4E0F0FF3739FBDDC7
SHA-512:	AC6E586AD38145288532242578324E4283B8702C7F20DD08503BD22BE8ECDE3FE75690CCCE1B83045F88380E07C4CAB6BDCA50D94349C719E3420CCFCC7063C1
Malicious:	false
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var ba,da,aaa,ia,ka,la,pa,qa,ra,ua,va,wa,baa,caa,xa,ya,daa,za,Ba,Ca,Da,Ea,Ia,Ga,La,Ma,gaa,haa,Wa,Xa,Ya,iaa,jaa,Za,kaa,$a,ab,laa,maa,cb,jb,naa,qb,sb,oaa,xb,ub,paa,vb,qaa,raa,saa,Fb,Hb,Ib,Jb,Mb,Pb,Qb,Tb,Zb,ac,ec,fc,ic,kc,lc,vaa,mc,nc,oc,wc,xc,zc,Gc,Nc,Oc,Sc,Qc,zaa,Caa,Daa,Eaa,Xc,Yc,$c,Zc,bd,ed,Faa,Gaa,dd,Haa,kd,ld,md,nd,qd,rd,sd,ud,Jaa,vd,wd,Ad,Bd,Cd,Dd,Ed,Fd,Gd,Hd,Jd,Md,Nd,Pd,Rd,Sd,Laa,Td,Ud,Vd,Wd,Xd,Yd,ee,ge,je,ne,oe,ve,we,ze,xe,Be,Ee,De,Ce,Qaa,le,Qe,Oe,Pe,Se,Re,ke,Te,Saa,Xe,Ze,We,af,.bf,cf,df,ef,ff,gf,lf,mf,nf,Taa,sf,of,uf,xf,yf,Ef,Bf,Cf,Uaa,Ff,Df,Gf,Hf,Vaa,If,Jf,Kf,Lf,Mf,Of,Nf,Pf,Qf,Yaa,$aa,aba,cba,Uf,Vf,Wf,Yf,$f,bg,hg,ig,lg,dba,og,ng,pg,eba,xg,yg,zg,fba,Ag,Bg,Cg,Eg,Fg,Gg,Hg,gba,Ig,Jg,Kg,hba,iba,Lg,Ng,Mg,Pg,Qg,Tg,Rg,kba,Sg,Ug,Vg,Xg,Wg,mba,lba,Yg,oba,nba,pba,ah,qba,ch,dh,eh,bh,fh,rba,gh,sba,tba,ih,xba,jh,kh,lh,yba,nh,ph,sh,yh,Ah,xh,th,Bh,zba,C

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\chevron-right[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	5.0198476251156805
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5zMcBH8+hHiATcvXjXRHoNcHRQag2CiY9uvAZe+H4VNX1X3MHq0Y:tI9mc4slzXdhC/O4RPgVh9SMSmK0Y
MD5:	B6B6C4DB699010301B02593710377F70
SHA1:	DEFACACF10E081BFAD75FF96CD9032C00EFE4339
SHA-256:	8BC3003A5FCE0C51EF013C99396F5168BCE06B077E556E80726CB98871AEEC45
SHA-512:	FD96FF1543B9DA27591AB2DBC9D88DE64BEC0580D992507D510C64F8CB47188F0B57D4660E9D7E3C530C473D7636F522A316D724D67B25C7E7B70C01E83F8D5C
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/images/chevron-right.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="24" height="24" viewBox="0 0 24 24"><path d="M10 6L8.59 7.41 13.17 12l-4.58 4.59L10 18l6-6z"/><path d="M0 0h24v24H0z" fill="none"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\co-covid-19-icons-find-zone-measures-2020-12-21[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 96 x 96, 8-bit gray+alpha, non-interlaced
Category:	downloaded
Size (bytes):	2676
Entropy (8bit):	7.886452581502459
Encrypted:	false
SSDEEP:	48:pJsSyytBDsbZwrsZi2Kvm+jdXjSWtbwb8YRvbYIklf2j6r+qdQM:Pp1KZwrljvmYdmWlwHRTYhlM4dQM
MD5:	3583AD9104F497B624FBA67E7806E98E
SHA1:	F6B0C507C7A61F244AECB8318BD189995328FE34
SHA-256:	82B4F6002CC3723973CFE31501B19563EBD061BE909206A896146A4B34A4702C
SHA-512:	F73723F41510AFF57DFB5F2CFAFB2AA06B025FC7AD573AF1BF10BA06DC96394B653F8E0850A2492B0FF2102E63977FA8D27911542A951A5E6B8178AE2CE99E88
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2020-12/co-covid-19-icons-find-zone-measures-2020-12-21.png
Preview:	.PNG........IHDR...`...`.....H.......bKGD........-IDATx..{pT....B.P.AG#N..;.ZG..:...."...i.Z.S[T......x.QZA.T@.U.6V..0\MHb.H".d....^.....?.l.${.~.M......e.<.w..~.{.....i*...a..2Sm..!s.f.1.L..6efItndfS.9:..4...]m.i..X.9sc.c..xs....x.Q....I..>z.)6mY...m.8zQ...\.-.:..Q..v.....f{..O.m.......Q../.1.N...E...s...'..3++........'........c.>1...yt...Iek..9A....q.KF1..WX.2.f)+.;.T.. .>5.....M..K...y\|.<.f..].D.....j...O.1..0c...>.q....G....Us./.9..X......SB)o...3..sB........O........<..X.....gt....G..1...O.A..r..Hu.~.g.r.p..c.{i..:1....w...~..v.}!..=.fV8s?.e.O3.nv.u...^{..3....k.A......>i...@....{.4.;L9`..n...I...>..B...Z[..6.r..E..#<...W..0....q9..R....?.t.nX+.... ..:......t..O.[..W6Q..cM....0.!...C.5M...n.......O..S..L.......d...!... {....q..c...s./...-. FRc....+.{.....Q.{0.........x&.....Z....1..y.J....V........?.6..A./..9.....4..(.SO.w9..j)........!.X......I......n.....CL...:J..@.c......tI...RE=.......O......!.......E....!~...[...,e_.U.B...b"{\).#..";>>

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\content-type.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	27192
Entropy (8bit):	5.106979435692114
Encrypted:	false
SSDEEP:	768:vZRL8oADtjyY/QJpQOzsu876tQeJS3Fdouib8nCDHAWJDxDJzJQU:hBz
MD5:	D4EFFA82F8B19DC0709E4B29BB628052
SHA1:	03B56402E394EDD0EB8A9292D1CD6B34AA31ACA8
SHA-256:	142881E53BD4D178276E5E9B9B2577BF8C63E457E705DF147BF42C99DB710416
SHA-512:	BE2F87612CF4F05626A4CBA27567A4A7108F0C3BA0A8962D402599439B6A27C3EA6E54E939DF0335E9FAAC7D4C906EFCEC0BA3CC5451B3EB5D92A268D7396AA9
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/content-type/content-type.min.js
Preview:	"use strict";angular.module("onesite.contentType",["onesite.contentType.factories","onesite.contentType.directives","onesite.contentType.services"]);."use strict";angular.module("onesite.contentType.directives",[]).directive("contentTypeSearchResults",["routeService","scrollService",function(t,n){function i(){n.scrollToElement(angular.element("#footer"),null,10)}return{scope:{mainController:"=",pageSize:"="},restrict:"A",replace:!0,template:'<div ng-include="mainController.node.content.subClass.templateUrl"></div>',link:function(e,r){e.scrollService=n,e.focusBackToTop=i,t.regulateRedirect(r.parent())}}}]).directive("contentTypeGeneric",["$timeout","redirectService","routeService","scrollService",function(t,n,i,o){return{scope:!0,restrict:"A",replace:!0,template:'<div ng-include="mainController.node.content.subClass.templateUrl"></div>',link:function(e,r){e.redirectService=n,e.scrollService=o,i.regulateRedirect(r.parent()),t(function(){angular.isFunction(e.mainController.update.header)&

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\covid-back-to-top[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	407
Entropy (8bit):	4.775491231840767
Encrypted:	false
SSDEEP:	12:tr/BWGuCo2xxSD3c4oIIdu+afRWOcoTR6IwiHA2:tzBXu92xUD3c8vd4q6jH2
MD5:	0C513666D9F866D661ABF1A873A8FB91
SHA1:	A3288EDC928C63CE6AD565C5A829662238424768
SHA-256:	2C89848581CDC174D921828685E762E544C66D181C870877ECA240D93A31087E
SHA-512:	9057487BCCE5C08F73031F0D26DA416414EC2C9A61CA389C829148467D2D0DB7EEE3A92058C595CB2922FF49A55BE291CA77FF52F585162F50496B888D3244A2
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/images/covid-back-to-top.svg
Preview:	<svg width="32" height="32" viewBox="0 0 32 32" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M16 32C24.8366 32 32 24.8366 32 16C32 7.16344 24.8366 0 16 0C7.16344 0 0 7.16344 0 16C0 24.8366 7.16344 32 16 32Z" fill="#666666"/>.<path d="M5.33301 15.9997L7.21301 17.8797L14.6664 10.4397V26.6664H17.3331V10.4397L24.7731 17.8931L26.6664 15.9997L15.9997 5.33301L5.33301 15.9997Z" fill="white"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\default[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, frames 3
Category:	downloaded
Size (bytes):	2773
Entropy (8bit):	7.815056491753636
Encrypted:	false
SSDEEP:	48:ZO4mWWBz6v6RRalbzCY7iFnBIuATJzvv6yZgdaB4kxhdn2Cto9tO3i:ZOtUCqpLG5+ukzvvpBdXN2Ctof
MD5:	E637AA4FA4BE37BE05DC8F6BDEA64F4D
SHA1:	DC37807553C9EBF1A30A6A83005DD0568E3676A5
SHA-256:	73461BB59224E4A2CB23D093AA10EB925092273C7BA47F92F0107C01520D975C
SHA-512:	51E7F2AB02932983AF222903CC4083C463A5420E18B56BAF3E3B765652695DE79BF2A1A52F1FD79BF1A146F069B6DC172D3115AB4EEC1273CB7C87522902AE11
Malicious:	false
IE Cache URL:	https://i.ytimg.com/vi/YrjmP_ueahQ/default.jpg
Preview:	......JFIF......................................................................................................................................................Z.x.."........................................G........................!..1A.."Qq2a......R.......#d....$BTcrs....DSb...............................-......................!..1a..AQq......#$2..............?..*.^..i...........<......L2.....`.{....R......".PQW:u.....j.^.l/...j.B.K.W..?....Z..Q. \|.........S4U.?G..~..'..U..!1..o7...9m.'..{..p..!...4..{4p...R.B..Y..._.;6..^...)..".(G... \|.w...J-U....h....0.......f[.r...F`t6..].j.L#.Y.%....1P@...#...U..p.J...vWR....V.".]..CZ..{^...Wk-Ha......../.Qrh%.-.......1.....Jp.G.....A.q.k8.J1.I..o..}...}......6..r)..A(.7^.....NXc....I..O]dr..4.`......s.KB:e......&..R}....r.U...rZ.^...$.,.7#K.@...:C.}....2f!J....x..[k....W?...8..(..n.q......n.........J..6....6.CXu}6L...}`.{j..y."_..f.]......\.U"....m..zLW.^..G;W.T..\|Y.`.....,."_..l.J....s.OE..X..c<.1.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\embed[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	25011
Entropy (8bit):	5.503692508203638
Encrypted:	false
SSDEEP:	384:/YRgyq+e8VeRAyB7awN0omIC9Er+aNLoVjVYeboerv9ct2SrfSCPBwd0gQbog7c:j+1VeJ8AD1CYyVpzk2JQ+
MD5:	2FB173E42F7DA8F4328480CC641E19EB
SHA1:	9EB4D8993777666C6D4D281673F94ED6E62B3953
SHA-256:	62462D078B1E218B56F3714D205BA24A790D66E331BA8D918B459DB4E4F8F5E0
SHA-512:	FC5CEA83545DF598487ECBB3FB0486001384F11FDDD597DC0B5B7786AAB770323E10A6D980A950E5E63A66870AD522DDD23C7D112C62E68C37A060B14D66732F
Malicious:	false
Preview:	(function(g){var window=this;'use strict';var mIa=function(a,b){var c=(b-a.i)/(a.l-a.i);if(0>=c)return 0;if(1<=c)return 1;for(var d=0,e=1,f=0,h=0;8>h;h++){f=g.wn(a,c);var l=(g.wn(a,c+1E-6)-f)/1E-6;if(1E-6>Math.abs(f-b))return c;if(1E-6>Math.abs(l))break;else f<b?d=c:e=c,c-=(f-b)/l}for(h=0;1E-6<Math.abs(f-b)&&8>h;h++)f<b?(d=c,c=(c+e)/2):(e=c,c=(c+d)/2),f=g.wn(a,c);return c},T2=function(){return{D:"svg",.U:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},S:[{D:"path",Mb:!0,K:"ytp-svg-fill",U:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\embed[2].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	25011
Entropy (8bit):	5.503692508203638
Encrypted:	false
SSDEEP:	384:/YRgyq+e8VeRAyB7awN0omIC9Er+aNLoVjVYeboerv9ct2SrfSCPBwd0gQbog7c:j+1VeJ8AD1CYyVpzk2JQ+
MD5:	2FB173E42F7DA8F4328480CC641E19EB
SHA1:	9EB4D8993777666C6D4D281673F94ED6E62B3953
SHA-256:	62462D078B1E218B56F3714D205BA24A790D66E331BA8D918B459DB4E4F8F5E0
SHA-512:	FC5CEA83545DF598487ECBB3FB0486001384F11FDDD597DC0B5B7786AAB770323E10A6D980A950E5E63A66870AD522DDD23C7D112C62E68C37A060B14D66732F
Malicious:	false
Preview:	(function(g){var window=this;'use strict';var mIa=function(a,b){var c=(b-a.i)/(a.l-a.i);if(0>=c)return 0;if(1<=c)return 1;for(var d=0,e=1,f=0,h=0;8>h;h++){f=g.wn(a,c);var l=(g.wn(a,c+1E-6)-f)/1E-6;if(1E-6>Math.abs(f-b))return c;if(1E-6>Math.abs(l))break;else f<b?d=c:e=c,c-=(f-b)/l}for(h=0;1E-6<Math.abs(f-b)&&8>h;h++)f<b?(d=c,c=(c+e)/2):(e=c,c=(c+d)/2),f=g.wn(a,c);return c},T2=function(){return{D:"svg",.U:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},S:[{D:"path",Mb:!0,K:"ytp-svg-fill",U:{d:"M 16.68,.99 C 13.55,1.03 7.02,1.16 4.99,1.68 c -1.49,.4 -2.59,1.6 -2.99,3 -0.69,2.7 -0.68,8.31 -0.68,8.31 0,0 -0.01,5.61 .68,8.31 .39,1.5 1.59,2.6 2.99,3 2.69,.7 13.40,.68 13.40,.68 0,0 10.70,.01 13.40,-0.68 1.5,-0.4 2.59,-1.6 2.99,-3 .69,-2.7 .68,-8.31 .68,-8.31 0,0 .11,-5.61 -0.68,-8.31 -0.4,-1.5 -1.59,-2.6 -2.99,-3 C 29.11,.98 18.40,.99 18.40,.99 c 0,0 -0.67,-0.01 -1.71,0 z m 72.21,.90 0,21.28 2.78,0 .31,-1.37 .09,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\favicon[1].ico Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15406
Entropy (8bit):	2.2429689033058424
Encrypted:	false
SSDEEP:	96:Ml3XHQgQw4F2VF8InOanFxRvYaNsKQZA4/mnNe:63XHQfYsyneaNsC4enN
MD5:	09BD5B5426A668D935E28A5E7B667AC9
SHA1:	1555B05E7D4BE697F795F148D157872361779375
SHA-256:	AEB3B21855F07B7E9E2632483B0A24488A8F294A152E2D64B96C8A4145A55B51
SHA-512:	B57B5ECA260F7B5EEC154969FAACC5224D5ABBC922B1F033F0ADB667AE77544E0002659BA010216D52C634A1ED2B490C5D1E4A2BF3A92D60FF030F2FB276F5B8
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/favicon.ico
Preview:	......00.... .h&..6... .... .(....&........ .h....7..(...0...`..... ................................................................................................,...J...j...................................j...J...,...........................................................................................................................5...z...........................................................................z...5...................................................................................................l...................................................................................................l...................................................................................i...................................................................................................................i...................................................................$..........................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\fetch-polyfill[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Pascal source, ASCII text, with very long lines
Category:	dropped
Size (bytes):	17086
Entropy (8bit):	5.238064281324506
Encrypted:	false
SSDEEP:	384:ocHslLsP5muHqI0Jj6tZcUO/x5+icHslLsP5muHqI0Jj6tZcUO/x5+V:hMlLsBmnJj6tZQ/x56MlLsBmnJj6tZQA
MD5:	7CE74247032C97853E09842BC5A18A44
SHA1:	052654C4F4F5EB1416EF676A083100FBF1C121EB
SHA-256:	597859A11A3556E6FAE42CFC93A029A6C6FC258191ACB41A860E4525C2B823DB
SHA-512:	DDFF2FD622FA7BE5AA55FC44531BE9025E7E254B4B36B77E308C86DB31D5622A9ABCCC944794641C92829C1C3631BBFA2B45CF2925B46DA41BD818CC6DA1C066
Malicious:	false
Preview:	/*.. Copyright (c) 2014-2016 GitHub, Inc... Permission is hereby granted, free of charge, to any person obtaining. a copy of this software and associated documentation files (the. "Software"), to deal in the Software without restriction, including. without limitation the rights to use, copy, modify, merge, publish,. distribute, sublicense, and/or sell copies of the Software, and to. permit persons to whom the Software is furnished to do so, subject to. the following conditions:.. The above copyright notice and this permission notice shall be. included in all copies or substantial portions of the Software... THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,. EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF. MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND. NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE. LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION. OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\fieldgroup.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	95
Entropy (8bit):	4.41963781106399
Encrypted:	false
SSDEEP:	3:UV9nM3KQNVQWAtNMDBJBTQ4W62nwFHKNJrnd:UfM7/QWyNMjBcvQyB
MD5:	0B9CB6DC1250D392805B4E6797327401
SHA1:	311744F30B9293DF13CEA1AFC41456CEA5FC449F
SHA-256:	C799EC87FB8A6E52BD93A883ABDC71EEF0DEC77D2365CE4C2F46178A3E0909FD
SHA-512:	27A0AE332E2A138D821B2438BA1E8E3428A04F6583DC3BCCD8C3F1AF1936D4D5AF81DF191E49C5B6269186580542B48892FC0ACA176DF2EB26267AC8668D6062
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/fieldgroup.module.css?qrgttk
Preview:	/*. @file. * Fieldgroup border reset.. */...fieldgroup {. padding: 0;. border-width: 0;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\foundation.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	182077
Entropy (8bit):	5.16707718160483
Encrypted:	false
SSDEEP:	3072:iIhP/kNVJcrH8Ol6466PPpoIVQDLB979XlcR7PZiS:fkNVJJE166PPpoCeLB9hChZx
MD5:	666766D3B3722F17DCABA4AE76498167
SHA1:	A4B8D20D8925098A1CD4C69F72AE58C217C74096
SHA-256:	A51177CE27C9440F635C6BFEF9BD3AAB0B52A97D5BC8540E2E3A9AD8F4C46F6A
SHA-512:	F5C5E6BE62B58080F0DD3A25E9783FD52525B3F0AF04C81E76ED5A0E34F9D7DB10CF2EE393E2E87B3C90AA5CC2956D8B817C30E31132BAAB687E0ECFB56B5E2D
Malicious:	false
IE Cache URL:	https://cdn.jsdelivr.net/npm/foundation-sites@6.6.3/dist/js/foundation.min.js
Preview:	!function(t,e){if("object"==typeof exports&&"object"==typeof module)module.exports=e(require("jquery"));else if("function"==typeof define&&define.amd)define(["jquery"],e);else{var n="object"==typeof exports?e(require("jquery")):e(t.jQuery);for(var i in n)("object"==typeof exports?exports:t)[i]=n[i]}}(window,function(n){return s={},o.m=i={"./js/entries/foundation.js":function(t,e,n){"use strict";n.r(e);var i=n("jquery"),o=n.n(i),s=n("./js/foundation.core.js");n.d(e,"Foundation",function(){return s.Foundation});var a=n("./js/foundation.core.utils.js");n.d(e,"CoreUtils",function(){return a});var r=n("./js/foundation.util.box.js");n.d(e,"Box",function(){return r.Box});var l=n("./js/foundation.util.imageLoader.js");n.d(e,"onImagesLoaded",function(){return l.onImagesLoaded});var u=n("./js/foundation.util.keyboard.js");n.d(e,"Keyboard",function(){return u.Keyboard});var c=n("./js/foundation.util.mediaQuery.js");n.d(e,"MediaQuery",function(){return c.MediaQuery});var h=n("./js/foundation.util.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\framework-8dcecaaefd71e2213eb2[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	128728
Entropy (8bit):	5.260572874945082
Encrypted:	false
SSDEEP:	1536:/TvchObd0et4IM6y9K0WvC1fHfOtSLWHSiH3Pme2pU9v5j:bkhOb5v0o/SW13T2pU9v5j
MD5:	51B7E5BBCA1E70E60653BF822D2504C5
SHA1:	B26A4B2DF7A397A71B893108E611B74432557E99
SHA-256:	E7D15061741800800418CB01C1525FFE6ECFEF21F08F3A8A4CEDCC3F1D324A57
SHA-512:	7876C87C65CF86A3D5ED7AAD552E2EB25CCF097B7AD7A799684EC6F6C4AC574766646FBF211A62EC83A844E5ABCDAA4F52A165CDD5BF3492496E964DC3F34FA0
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/framework-8dcecaaefd71e2213eb2.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[8],{"16Al":function(e,t,n){"use strict";var r=n("WbBG");function l(){}function i(){}i.resetWarningCache=l,e.exports=function(){function e(e,t,n,l,i,a){if(a!==r){var o=new Error("Calling PropTypes validators directly is not supported by the `prop-types` package. Use PropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw o.name="Invariant Violation",o}}function t(){return e}e.isRequired=e;var n={array:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:t,element:e,elementType:e,instanceOf:t,node:e,objectOf:t,oneOf:t,oneOfType:t,shape:t,exact:t,checkPropTypes:i,resetWarningCache:l};return n.PropTypes=n,n}},"17x9":function(e,t,n){e.exports=n("16Al")()},JhMR:function(e,t,n){"use strict";e.exports=n("KqkS")},KqkS:function(e,t,n){"use strict";var r,l,i,a,o;if("undefined"==typeof window\|\|"function"!=typeof MessageChannel){var u=null,c=null,s=function(){if(null!==u)try{var e=t.unstable_no

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\government-ontario[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	8405
Entropy (8bit):	5.0746341151683
Encrypted:	false
SSDEEP:	96:EGsHG+NLuC/XnuEsejOfrBsrbCspsrbp4IpwVS70qXVTdyrNGz7TzvBAkbfNMhjs:EGsH3IC/XnL8M8uIzybI8jSVg2O+S43
MD5:	0953A2B6FB1D331EFA2AAD3FF8E2DC99
SHA1:	33D9EA08EEFB81ABE8934754EA434A33437B227C
SHA-256:	38BF2EB71CE159B99E4A9C680FED3427D8193EB5DC44CE8A75A684EB00A9F820
SHA-512:	4EDECE89518BDEF904871B360E510F6645E631F1FBF9BE5BC4883131827E4F3B7D1169754E73FC1E27526D78378CB3E37D495B7E3DE7F7280F4D6DE908EB5082
Malicious:	false
IE Cache URL:	https://www.ontario.ca/page/government-ontario
Preview:	<!doctype html> <html class="no-js" lang="en"> <head> <meta charset="utf-8"> <meta content="width=device-width,initial-scale=1" name="viewport"> <meta content="IE=edge" http-equiv="X-UA-Compatible"> <meta name="sha" content="d43396df38048fbb44731befe641f3dfc221eaf3"> <title></title> <base href="/"> <link href="/css/combined.css" media="screen" rel="stylesheet"> <link href="/css/print.css" media="print" rel="stylesheet"> <script src="/vendor/modernizr/modernizr.js"></script> <script>!function(a,e,o,n,c,i,t){a.GoogleAnalyticsObject=c,a.ga=a.ga\|\|function(){(a.ga.q=a.ga.q\|\|[]).push(arguments)},a.ga.l=1*new Date,i=e.createElement(o),t=e.getElementsByTagName(o)[0],i.async=1,i.src="//www.google-analytics.com/analytics.js",t.parentNode.insertBefore(i,t)}(window,document,"script",0,"ga"),ga("create","UA-21003310-6",{cookieDomain:"auto",allowLinker:!0}),ga("create","UA-48649528-1",{cookieDomain:"auto",allowLinker:!0,name:"ServiceOntario"}),ga("require","linker"),ga("linker:autoLink",["serviceont

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\gtm[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	84563
Entropy (8bit):	5.519483919454844
Encrypted:	false
SSDEEP:	1536:+UKJbOli0E+HlunK+sCEOzh2aeWgGHcUil1U9aKPt52QUlBCg+BJ1:+UKVui06nvsuSGVinIBJ1
MD5:	51976E1E5E2C0F492C9C4AB64DEEA61B
SHA1:	77E83AB2C3D27E43101D9CEBEC3E1C23AD5050C7
SHA-256:	9AF7E1D0F24A38BB01FAF59E12C5B79C3007D51F85ACCF761A6D770DEDFAD5A0
SHA-512:	7BCE203B13568C87698C1E11DDE96C4F0ACCBFE060FFAA102386CC391F3A9215670F453A023DEFE0F624172A7AD659DCE74FC4D3E366D0FF7A00AE04B33B91F3
Malicious:	false
IE Cache URL:	https://www.googletagmanager.com/gtm.js?id=GTM-T7V5LF
Preview:	.// Copyright 2012 Google Inc. All rights reserved..(function(){..var data = {."resource": {. "version":"16",. . "macros":[{. "function":"__u",. "vtp_component":"URL". },{. "function":"__e". },{. "function":"__v",. "vtp_name":"gtm.triggers",. "vtp_dataLayerVersion":2,. "vtp_setDefaultValue":true,. "vtp_defaultValue":"". },{. "function":"__u",. "vtp_component":"PATH". },{. "function":"__f",. "vtp_component":"URL". },{. "function":"__e". },{. "function":"__u",. "vtp_component":"HOST". }],. "tags":[{. "function":"__ua",. "vtp_trackingId":"UA-58068936-1",. "vtp_trackType":"TRACK_EVENT",. "vtp_nonInteraction":false,. "vtp_useDebugVersion":false,. "vtp_enableLinkId":false,. "vtp_doubleClick":false,. "vtp_advertisingFeaturesType":"NONE",. "vtp_eventCategory":"test category",. "vtp_eventAction":"test action",. "vtp_eventLabel":"test label",.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\hideHeaderSearch[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	39
Entropy (8bit):	4.355539077670187
Encrypted:	false
SSDEEP:	3:gipat:gis
MD5:	1361C995AB423206242459132C66F9E8
SHA1:	71B09D40D8F105C4DDDA009A5C0F7068A98F38F1
SHA-256:	9E3FF1684A130C8CF1B9835AC9CA55AF9EC38534439DB9BDCD82604F711D1BB8
SHA-512:	CA8DB59A7F0FE539C11EC33B2FA3B31632DDD254E62737B9129C6612D1B8310D7A42FCC658F41FBD7C36671A6115F6B6AB042BE7BFDD805CEE80C40E099CA936
Malicious:	false
IE Cache URL:	https://www.ontario.ca/css/hideHeaderSearch.css
Preview:	header .search-input-form{display:none}

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\jquery.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/assets/vendor/jquery/jquery.min.js?v=3.5.1
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\jquery.once.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	908
Entropy (8bit):	5.080594716216923
Encrypted:	false
SSDEEP:	12:UOzU1tEIxdc+l+Q1V2DKF4kbbju1KAD4cSdcWKp2RDFrOz0hGhe9a711x5OvGKVw:NY4oiZSdcL2DFaTeY10vGK5YZY1rlW
MD5:	48540C4B174900EEE9E0894EBBD23FD7
SHA1:	3D7ECB0A1FEF4AEEACF3F9B82099027DE44C652A
SHA-256:	1DA79754CCDA7C241F56D5A82ED377C3384B58DB3C718D9C1FD38843C47D8DF3
SHA-512:	74ECE696B1E978E6E86A783C356FFA0275DC736AA67AB8698AF8E0E53C40FBAE56748450951AF86A6773450B7FD885D269978C55DF384401AC5F5211A4488012
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/assets/vendor/jquery-once/jquery.once.min.js?v=2.2.3
Preview:	/!. jQuery Once v2.2.3 - http://github.com/robloach/jquery-once. * @license MIT, GPL-2.0. * http://opensource.org/licenses/MIT. * http://opensource.org/licenses/GPL-2.0. */.(function(e){"use strict";if(typeof exports==="object"&&typeof exports.nodeName!=="string"){e(require("jquery"))}else if(typeof define==="function"&&define.amd){define(["jquery"],e)}else{e(jQuery)}})(function(t){"use strict";var r=function(e){e=e\|\|"once";if(typeof e!=="string"){throw new TypeError("The jQuery Once id parameter must be a string")}return e};t.fn.once=function(e){var n="jquery-once-"+r(e);return this.filter(function(){return t(this).data(n)!==true}).data(n,true)};t.fn.removeOnce=function(e){return this.findOnce(e).removeData("jquery-once-"+r(e))};t.fn.findOnce=function(e){var n="jquery-once-"+r(e);return this.filter(function(){return t(this).data(n)===true})}});.//# sourceMappingURL=jquery.once.min.js.map

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\moment.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	35415
Entropy (8bit):	5.527657870558738
Encrypted:	false
SSDEEP:	384:bPMjSZibdDdUlPnax4qAsLHQ34AHZMAOQUOBNeTjNplDec4McOyo4VGJbYW9X2b8:QIHtaSZ5MrQ8/5TwtW9XRizm6gamn
MD5:	8C2DEF395D7E125976EA5FAF56596AA9
SHA1:	CE4FA351A2E62ACCF7FAD77110FA4DDB09A324BF
SHA-256:	800C7773F0574B5B5573BD89AF3CC8B0FC6BB368D6FBDE8F7CCF97C30BDBF699
SHA-512:	99F359C7F8E7F6C752B9967E9D26BC70015B37D5C0CA9091EFEB60CF375D6D1638BCE6ADD4AC4F87A566596A0B5DABF897F6D13A72060311BBB6AF5FAA6577C2
Malicious:	false
IE Cache URL:	https://www.ontario.ca/vendor/moment/min/moment.min.js
Preview:	//! moment.js.//! version : 2.10.6.//! authors : Tim Wood, Iskren Chernev, Moment.js contributors.//! license : MIT.//! momentjs.com.!function(a,b){"object"==typeof exports&&"undefined"!=typeof module?module.exports=b():"function"==typeof define&&define.amd?define(b):a.moment=b()}(this,function(){"use strict";function a(){return Hc.apply(null,arguments)}function b(a){Hc=a}function c(a){return"[object Array]"===Object.prototype.toString.call(a)}function d(a){return a instanceof Date\|\|"[object Date]"===Object.prototype.toString.call(a)}function e(a,b){var c,d=[];for(c=0;c<a.length;++c)d.push(b(a[c],c));return d}function f(a,b){return Object.prototype.hasOwnProperty.call(a,b)}function g(a,b){for(var c in b)f(b,c)&&(a[c]=b[c]);return f(b,"toString")&&(a.toString=b.toString),f(b,"valueOf")&&(a.valueOf=b.valueOf),a}function h(a,b,c,d){return Ca(a,b,c,d,!0).utc()}function i(){return{empty:!1,unusedTokens:[],unusedInput:[],overflow:-2,charsLeftOver:0,nullInput:!1,invalidMonth:null,invalidForma

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\on-this-page[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4097
Entropy (8bit):	4.677840687836467
Encrypted:	false
SSDEEP:	96:kpsyvhZu7HLWIA3I+0EG7Rm/yrOrufQaNbbibMlriqEM:SBvTu7HLWIA3I+0YUQmbiY1iqEM
MD5:	4B82AA16BCA51DDA7DB60F00A7C36AB2
SHA1:	A035C47F897B4D80DFAB22D74F4EB95E9474CB4A
SHA-256:	F31EE9EDD4D394B3788F4406846BB23379D29E826DA986B715EF236CC10D6444
SHA-512:	BED66AD2D0A113098842FA5D981C587004FA93C16AAF24DBA99972F7B0371ECEDE0F12A1AC125BA1C72DF760E64CB0F75D3DE67113A95A8240FFF6BC7DCA8081
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/js/on-this-page.js?v=8.9.13
Preview:	/*. @file. * Placeholder file for custom sub-theme behaviors.. . /..(function ($, Drupal) {. /*. Use this behavior as a template for custom Javascript.. */.. //Set a tracker to see if this function has already run.. //Putting this in here because function fires twice for unidentified reason. var onThisPageFired = false;.. function toggleClass(element, className) {. if (!element \|\| !className) {. return;. }. var classString = element.className, nameIndex = classString.indexOf(className);. if (nameIndex === -1) {. classString += ' ' + className;. } else {. classString = classString.substr(0, nameIndex) + classString.substr(nameIndex + className.length);. }. element.className = classString;. }.. Drupal.behaviors.onThisPage = {. attach: function (context, settings) {.. var ToC = [];. var onThisPage,. showAll,. showLess,. tocWrapper;. if (!onThisPageFired && $(".toc-body").length > 0 && $(".t

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesite-contact-us.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	4213
Entropy (8bit):	5.0419075599097765
Encrypted:	false
SSDEEP:	96:KTfORuzFDubr04doJaveTCzll8Tt90Sh1:KjQyJD0M37
MD5:	2E45C11110BE0B34805211925E828627
SHA1:	473DDAE6DFEA23DB1B1866EAF15F29432BE38F9B
SHA-256:	9EEE3D778CD03BAD9DEA05343FD1DB44AE38D1802EB1D72B5F6B5F57F8E45C3D
SHA-512:	B097225C21F436CADD4C709FFE151A2F92F57D46AB784E3436D3A8F28D783EED0ADD60A5A3589805D777407284199D0033DF687A29EA3362DF6F166EA6166CE0
Malicious:	false
Preview:	"use strict";angular.module("onesite.contact.us.services",[]).factory("contactUsService",["remoteStorageService","sessionService","dataBindingService","apiEndpointConfig","componentApiService","redirectService","$q","$parse",function(a,e,t,c,s,d,u,l){var r={};return r.getContactNode=function(r,n,e){var i="/"+c["onesite.app"].apiService,o=c["onesite.app"].apiServiceCrossDomain,a=u.defer();return function(e,t){var r="/"+c["onesite.app"].apiService,n=c["onesite.app"].apiServiceCrossDomain,i=u.defer();return s.getEntity({url:d.respectProtocol(t.useRelativeUrl?r:n+r)+"/url/"+e,method:"GET",withCredentials:t.withCredentials}).then(function(e){var t=angular.isArray(e)?l("und[0].id")({und:e}):e.id;t?i.resolve(t):i.reject()},function(){i.reject()}),i.promise}(e,n).then(function(t){if(angular.isString(t)&&""!==t.trim()){var e=encodeURIComponent(t);s.getEntity({url:d.respectProtocol(n.useRelativeUrl?i:o+i)+"/"+e+"?fields="+r,method:"GET",withCredentials:n.withCredentials}).then(function(e){a.reso

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesite-moment.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	18921
Entropy (8bit):	5.1828626911292055
Encrypted:	false
SSDEEP:	384:Ak1AdDaYLsp6fL8Ra1p5OZBmf54OMpUgv8SfcBY2Q/VsOgEpK:OuZRcpHR4O+v8Sfcc/2TEpK
MD5:	F4C2C7DCE7F310308F3202F7672E0FBC
SHA1:	3B9A391C9B34E13A9323895F27E30C6C58D803C4
SHA-256:	F9D8A28DA9F0AF8B8BADA0B6CF7A09141E58302062FDA2FD047B2280B10567F5
SHA-512:	44BB499A1905FC467DBDD678598631C71E8E1B00A8680150BEBBDC6CDC85EEB1D932B75D9C0E9764353DF2AFE9918FBB850AEA60BA7675CFBCBAB45ACE0A1147
Malicious:	false
Preview:	"use strict";angular.module("onesite.moment",["onesite.moment.services","onesite.moment.controllers","onesite.moment.factories","onesite.moment.directives"]);."use strict";angular.module("onesite.moment.controllers",[]).controller("OnesiteDateAddImpl",["stringService","timeService",function(i,u){var o=this;o.add=function(n,t,r,e){var a=i.strToDate(n);angular.isNumber(t)&&(a=u.addYear.call(a,t)),angular.isNumber(r)&&(a=u.addMonth.call(a,r)),angular.isNumber(e)&&(a=u.addDay.call(a,e)),o.date=a}}]).controller("OnesiteDateSelectorImpl",["stringService","timeService",function(i,n){function c(n){return angular.isNumber(n)&&!isNaN(n)}var h=this;h.stringToInteger=function(n){var t=(n=angular.isString(n)?n.trim():null)&&""!==n?parseInt(n):null;return c(t)?t:null},h.daysInMonth=n.daysInMonth,h.monthCollection=i.monthCollection,h.dateExists=function(n,t,r){return r<=h.daysInMonth(n,t)},h.updateModel=function(){var n=h.validateYear(h.year),t=h.validateMonth(h.month),r=h.validateDay(h.day),e=angula

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesite-search.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines
Category:	dropped
Size (bytes):	46362
Entropy (8bit):	5.079097575525367
Encrypted:	false
SSDEEP:	768:8aWN6+8H8Jaav94am51J829kaRbY85YEOHI5Y1Or4GbOnsQ+zcHmzn46SOtVO9Uo:rWNi39kah5n15y6bPQbp6TO9Us0qoFD6
MD5:	9565D9F801992F78AF690B0818F049CD
SHA1:	95DD71F0064D3D10F9D06B19FAF312DB5AD477BD
SHA-256:	5037C5517FB4B285AA35D13EF405625BDDC6D0DA4FC0DA8D1D027BB735973086
SHA-512:	BABEF137038286D66F6A546A3184594F3F2F347CC43938FD139DDE2435EC6F92904F0B7E986CF2025F880193839777E1337B81913E746E110265D5A03CB8C16D
Malicious:	false
Preview:	"use strict";angular.module("onesite.search",["onesite.search.services","onesite.search.factories","onesite.search.directives","onesite.search.controllers","mm.foundation"]);."use strict";angular.module("onesite.search.factories",[]).directive("onesiteSearch",[function(){return{restrict:"E",scope:{type:"@",lang:"@",title:"@",search:"=",internalTagList:"=",nodeId:"@",resultStatus:"="},replace:!1,template:['<onesite-search-impl ng-switch="type">','<div ng-switch-when="search-result">','<onesite-search-main ng-switch="subType">','<onesite-search-main-tag ng-switch-when="tag"></onesite-search-main-tag>','<onesite-search-main-external-tag ng-switch-when="externalTag"></onesite-search-main-external-tag>',"<onesite-search-main-default ng-switch-default></onesite-search-main-default>","</onesite-search-main>","</div>",'<onesite-search-gazette ng-switch-when="ontario-gazette"></onesite-search-gazette>','<onesite-search-land-registration ng-switch-when="land_registration_all">',"</onesite-search

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesiteArchive[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	exported SGML document, UTF-8 Unicode text, with very long lines
Category:	downloaded
Size (bytes):	4216
Entropy (8bit):	4.653704798148727
Encrypted:	false
SSDEEP:	48:p+66LYzjfmBKjdtV6Y7qgFY7qZhZ6KMLYzqkmBKjgV6Y7qSNeFY7qZhZ6sLYzT9/:5PVjiKkdV2ixBDViS
MD5:	8C0C037EC2B7644202782B6D85E55DBA
SHA1:	50A0F77DCFE2CBEFE19DDFBD356AE9711A1061A5
SHA-256:	16DBB6573CDC9144F8621C0E122EE2470B12C415920AE5A349D8F3B53CAB475A
SHA-512:	ABC673768947BE752FDAF9259834F02F56310AF3076E235A29EF94DC456CC8DAFE8A828D0AE70E9CD22D1FF64E2145184207E066F934C71D60645F4E324B390F
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteArchive.html
Preview:	<div ng-switch="mainController.node.content.lang">.. "Archived because content is not current" -->. <div class="alert-box--warning". ng-if="mainController.node.content.archive_status === 'outdated'">. <div class="row">. <div class="small-12 columns">. <div class="alert__header">. <div class="alert__header-icon">. <div class="alert-box--warning-icon"> </div>. </div>. <h2 class="alert__header-title h4" ng-switch-when="fr">Page archiv.e</h2>. <h2 class="alert__header-title h4" ng-switch-default>Page archived</h2>. </div>. <div class="alert__body">. <p ng-switch-when="fr">. Cette page n'est plus . jour et elle est disponible . des fins d.archivage et de recherche seulement. <a ng-if="mainController.node.content.archive_url" href="{{mainController.node.content.archive_url}}" title="{{mainController.node.content.archive_title}}">Veuillez consulter les plus r.cents renseigne

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesiteContact[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	675
Entropy (8bit):	4.53603734486637
Encrypted:	false
SSDEEP:	12:zuftNU6hGileQ1I6RA5/eEBnB14VrTfNndmNl+5G7N96CleQknB:zuft1hGd04tRj4VrTfN8W19v
MD5:	DBC9BBF6BF8E264CF2726A4FD6E2F206
SHA1:	E8AD714B633C86D1A654F19470F27993029E78BC
SHA-256:	E06FF5F0D2733C7BAFD3722A608A6A8B70CD443BD8CC4868EEDCBF737338734B
SHA-512:	BA8206A565B2E29DFB2EB45807F7FBAF6637A2345F568CC1CDACEC94B18DD915DE0EF9786E2F3A4552449CDAA89ED8886C0742C128350CCD3415619941B900A8
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteContact.html
Preview:	<div>. <ul class="no-bullet">.. <li ng-show="mainController.node.contact.contactUs">. <h2 class="h4">{{ 'Contact Us' \| translate }}</h2>. </li>. <li ng-show="mainController.node.contact.contactUs" target="_self">. <a href="{{ ::mainController.node.contact.contactUs }}". analytics-on. analytics-category="Footer". analytics-event="{{ '' \| analyticsEvent }}". analytics-label="contact us">. <span class="iconWrapperLong">. <span class="icon-contactLong" aria-hidden="true"></span>. <span class="show-for-sr">{{ 'Contact Us' \| translate }}</span>. </span>. </a>. </li>.. </ul>.</div>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesiteNotices[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text
Category:	downloaded
Size (bytes):	1802
Entropy (8bit):	4.66716881607702
Encrypted:	false
SSDEEP:	48:pEBOFnPrUr6fN64s5KBnPrUr6fNL0lHjUr6fN8lA:JFPrUr6fNtsQPrUr6fNL0pjUr6fNz
MD5:	76E352610F5A694BAA6BB68DE15FA70D
SHA1:	252E12B2BEB0B1DD9755FBE0CC0FC313ADE6A164
SHA-256:	49211795EB28AE73184062709F468C4795644BC2AC37FBEB730056DEC684D0CA
SHA-512:	77F195733A82CC072405DA0A49E107B340EDFCB3D8DB5E7AF10A494CB0FF401AAE21EA6A020A6DBD4CDA54EED163A7C867B8253A9DD0EE7C6760D6634744C86A
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteNotices.html
Preview:	<div class="small-12 columns">. <ul ng-hide="copyRightOnly". role="navigation". aria-label="{{ 'Secondary navigation' \| translate }}". class="show-for-medium-up inline-list small top-margin-double no-bottom-margin">. <li ng-repeat="(title, url) in ::noticeLinks[language]". ng-hide="title === 'copyright'">. <a href="{{ ::url }}". analytics-on analytics-category="Footer". analytics-event="{{ ::ministry \| analyticsEvent }}". analytics-label="{{ ::title }}">. {{ ::title }}. </a>. </li>. </ul>. <ul ng-hide="copyRightOnly". role="navigation". aria-label="{{ 'Secondary navigation' \| translate }}". class="show-for-small-only no-bullet small no-bottom-margin">. <li ng-repeat="(title, url) in ::noticeLinks[language]". ng-hide="title === 'copyright'". class="no-margin">. <a href="{{ ::url }}". analytics-on analytics-category="Footer". analytics-event="{{ ::ministry \| anal

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesiteOptimizationBanner[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, UTF-8 Unicode text
Category:	downloaded
Size (bytes):	1242
Entropy (8bit):	4.678377974832088
Encrypted:	false
SSDEEP:	24:OEYJITEPpnj4Iso4FKVb84PLTIIJgeIRqacu2krJmjvyMR:pYmY5/L8vMLZkcjKy
MD5:	ABB299DA5FE3601755DD2EDAC5B54906
SHA1:	63EB4839BE901A81D64A210451660622E9F541B6
SHA-256:	901AF253707FFEFBA1A64DE1FFB22F8F68A4032592AA30BDE48884A6482FA89E
SHA-512:	D9A741FBA8C3EE7F48D6139C9E33EFF3FAB88AD660174FF7A4817A0A180604AF79A83089D55BF786351DF58EC77A9613E4133C2971E00B55B7B71F277CF8123B
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteOptimizationBanner.html
Preview:	<div ng-switch="mainController.node.content.lang">. <div class="alert-box--notification". ng-if="mainController.node.content.optimization_banner === '1'">.. <div class="row">. <div class="small-12 columns">. <div class="alert__header">. <div class="alert__header-icon">. <div class="alert-box--notification-icon"> </div>. </div>. <h2 class="alert__header-title h4 no-top-margin" ng-switch-when="fr">La pr.sente page fait partie d.un projet de migration</h2>. <h2 class="alert__header-title h4 no-top-margin" ng-switch-default>This page is part of a migration project</h2>. </div>. <div class="alert__body">. <p ng-switch-when="fr">Nous transf.rons le contenu d.un site Web du gouvernement plus ancien. Dans le cadre des prochaines mises . jour, nous harmoniserons cette page avec le <a href="/fr/page/ontarioca-guide-redaction">Guide de r.daction pour ontario.ca</a>.</p>. <p ng-switch-

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\onesiteServiceOntarioLogo[1].htm Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines
Category:	downloaded
Size (bytes):	1413
Entropy (8bit):	4.627527993884887
Encrypted:	false
SSDEEP:	24:ERtEFWcBxEF6jqroEotrsyw6IF2RXebQdq0hUhS5J8zmIH+ozmha2tiMZ:ER+szF6jqrPGrsyplRubQdq0+s5J8zmT
MD5:	C0A61C83E136AA2BCF37B27260F59B8D
SHA1:	AB9A27C71A87615A8AA43859EF2BC4356734046D
SHA-256:	8AD42DEB65D5CF8528134BE2ADD7E5A98A8B83AA77AA647C9634BF46E5D96A73
SHA-512:	05F208E37ACCE9DAB99479B0221EED658C168017B2152263AAEE897232F0CF3F925C00210F62D3AC62C8CA98FA898F4EA55A4ADECB17AC77366BCD449F2AE6DB
Malicious:	false
IE Cache URL:	https://www.ontario.ca/core_modules/component/partials/onesiteServiceOntarioLogo.html
Preview:	Service Ontario Logo -->.<div class="site-logo-print--wrapper serviceontario-bg">. <div class="row bottom-margin serviceontario-row". ng-show="mainController.node.content.headerType === 'serviceontario'">. <div>. <a href="{{ aliasToPath(serviceontarioAliasCollection[mainController.node.content.lang ]) }}". class="hide-for-print". analytics-on. analytics-category="Header". analytics-event="{{ mainController.node.content.ministry \| analyticsEvent}}". analytics-label="service-ontario-logo">. <span class="ico-logo-serviceontario">. leave this commented out for now. did not display properly in the tablet. <span class="path1"></span><span class="path2"></span><span class="path3"></span><span class="path4"></span><span class="path5"></span><span class="path6"></span><span class="path7"></span><span class="path8"></span><span class="path9"></span><span class="path10"></span><span class="path11"

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\ontario-logo--desktop[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3363
Entropy (8bit):	4.699343789507078
Encrypted:	false
SSDEEP:	96:xvfsTA6uY8sAwKKdXAknjYCGd9A7Dx5Xq:hsEogeXAk9x56
MD5:	B7EBE96F1F149A2868B0ED6BD83C9438
SHA1:	6E435F081C337377206EC6B2D685C3385F095F96
SHA-256:	B5C52A066CC456C3A9DF9BF806716D30EC256E20118567B1E2AF731409F9604F
SHA-512:	1B25BED94BE1E185146826DBDD8062D45AF9EAC92EDAC4CDE72EE41B9A7A5EDC5111F57FF3201DE0A32D724ADFAC7CB51F669F5BBB2256C39B66B81BF3335CD1
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/ontario-logo--desktop.svg
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 24.2.3, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 180 45.1" style="enable-background:new 0 0 180 45.1;" xml:space="preserve">.<style type="text/css">...st0{fill-rule:evenodd;clip-rule:evenodd;fill:#FFFFFF;}...st1{fill:#FFFFFF;}...st2{fill-rule:evenodd;clip-rule:evenodd;}.</style>.<g>..<path class="st0" d="M0,25.5C0,18,4.6,13.3,12.5,13.3c7.9,0,12.5,4.7,12.5,12.2c0,7.5-4.6,12.2-12.5,12.2C4.5,37.7,0,32.9,0,25.5z... M12.5,33.5c2.3,0,4.3-0.8,5.6-2.2s2.1-3.5,2.1-5.9c0-2.4-0.7-4.5-2.1-5.9c-1.4-1.5-3.3-2.2-5.7-2.2c-2.3,0-4.3,0.8-5.6,2.2...c-1.3,1.4-2.1,3.5-2.1,5.9c0,2.5,0.7,4.5,2.1,5.9C8.2,32.8,10.1,33.5,12.5,33.5z"/>..<path class="st1" d="M41.2,37.2V26.8c0-2.7-1.4-4.3-3.8-4.3c-2.4,0-3.8,1.7-3.8,4.3v10.5h-4.5v-18h4.5v2.6c1.3-1.5,3-2.9,5.9-2.9...c3.8,0,6.1,2.6,6.1,6.7v11.7L

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\ontario-material-dropdown-arrow-48px[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	207
Entropy (8bit):	4.850775631794524
Encrypted:	false
SSDEEP:	6:tI9mc4slztdbyJAjmzJpF/W4dXppfJtD9+:t4pbaAjwJ64dv3s
MD5:	D438476AB51C80D2302784E51178F159
SHA1:	E4F2F45F256FC7584B76D660BC49B110B3800250
SHA-256:	5BE7428F1AC9BDC765C5D3B95B084B760BB400821A6676453A1AD308CAD15CAA
SHA-512:	4D465060FFE3EC01805F1AAB561EFE370F9796076E3E5388ECB7C7B76234DF21C6A433A770605B998BE033AAC4E5F1EB5A5D2D019EEA93F71EC2721BB1C57283
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario-material-dropdown-arrow-48px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" fill="none"><path d="M15.93 20a.8.8 0 0 0-.566 1.366l8.07 8.07a.8.8 0 0 0 1.131 0l8.07-8.07A.8.8 0 0 0 32.069 20H15.93z" fill="#1a1a1a"/></svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\ontario-together-filter-show[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	243
Entropy (8bit):	4.975899971540984
Encrypted:	false
SSDEEP:	6:tnr2lfE4YRumc4slvIbp/Ud3LTcQ7tHxP8IXWIzD9AHKb2:trAfbouCVURvPCGDiHA2
MD5:	C52ED9DF864EC0EDDDC37BA0252BD213
SHA1:	7C63B24F056670F0338A75306EC2CF0DF4AB85F3
SHA-256:	A8DD19C8C4747B5CD0B128395EA0C18CBE7DE46E140B8369930D6D64D82014E7
SHA-512:	631BBD594BC68BD8250FF80065F09687923DCF8EC2CD46F720F244F74F3FE4F01FE5084EDA55304E69F478C90CF72E9EB1D8F43DB1E8049B3DFFC3D87CB0EB33
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/themes/custom/ds_theme/c19-assets/images/ontario-together-filter-show.svg
Preview:	<svg width="22" height="23" viewBox="0 0 22 23" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M8.92242 13.4004H0.371641V9.57617H8.92242V0.810547H12.7896V9.57617H21.3619V13.4004H12.7896V22.123H8.92242V13.4004Z" fill="white"/>.</svg>.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\ontario@2x-print[1].png Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	PNG image data, 637 x 162, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4233
Entropy (8bit):	7.890440885738752
Encrypted:	false
SSDEEP:	96:dn8r57dOJ3d9P56ef0wc54KE1aE4W6lizEm2wbZLxAvqOFc:duI3dr6eY4AExzEBMpKvqOFc
MD5:	F4DC8A52B36FCE82D8E252233967B942
SHA1:	0739463222FBE6D07057AD44293778D7DACCE5D4
SHA-256:	5118D295C9B133CA1E0511029D25E93E94EF3C4AC165822DD3D070A3A7996AF5
SHA-512:	6FEBE50A98484B7F57FDB39EBDF23506547525540BDBDD2A973047A7210D71A86B48C38AF80BAAD3CFDD4EAAB47AC9C7E4FC090FF91B00FFE2E0CE83C91464BD
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/ontario@2x-print.png
Preview:	.PNG........IHDR...}..........Z.,...cPLTE......................................................@@@ppp.................. 000......PPP```....^......tRNS..@ ....P0..`...p.......IDATx......!..a..,-....W....0.0\|...7`Nn!..^K)...?...[....P...._[...X....j....Wo?..c..m...K.y....[.:.>.B...<....C.$z..............C..../..9vg.3.k.....Q35..]s.g.._4...\.C..a}\|W....-...w^.....nh.._....3.......tC.)...h.V?......e.b..E...:...'.2...J4....a. ...........t}.3Q....(`..c.....Oy'...Nd..v{..R.TM.X..i.lw...x...p8.........R...I(..=.N...n.....Y...kI.........c.1......;...H.a..94....a.R$~.c..N..wC...t...S........B..... X...d..v..}...a...V.D.Y.m.....>x.O.<...k...r..x.....&p.......V.H.........._.]u.R.}Rp....s<-.3.,...$]^...k..\|...p..v..3*.<..[..u.......b.$.j..>..{.>o..;hc.j..wO..a.H..F,.T..}..._w$F.p.......wj..A...R.v.\'.\|O...0....>...W...V...A.7.\.}.>.c.....Q.o.....^yf.^ &......zq.h.....o$.WX`R.k./.ga........v.`.....Q$.B.c.A..[~.A...a...}..).T..6...K.).g..2....@.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\optionA[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	384
Entropy (8bit):	5.1301926337667325
Encrypted:	false
SSDEEP:	6:tvKIiad4mc4sl3BAWgL0h4/SAqSGkfHEP5BrQWS1uLNFXATRn6SYRm3Pp+9BRYxY:tvG1B5gLYapGkfkP5BrQWS1EDXATR576
MD5:	486069EB10601E4CE534A6425B2C72F2
SHA1:	E04FED568485C6F6BDBFB72F4614D1A9C5BB984C
SHA-256:	FC242C5724B6740FD5CACD9AABFFDFCEDE27AD44836057090899AE7F22DBE270
SHA-512:	51D06E46E6689FF3BA55CCCC67460C3AB567C414EC13CF1E26848873488AB1B477077AB9BD04E5956898F1D92CD196F10A4BC89393B19F6A0C1F96139058CEA5
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/optionA.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 47.7 47.7"><circle cx="23.85" cy="23.85" r="23.85" style="fill:#49a7a2"/><path d="M681.83,32.55h3.53Q687,37,691.91,50.38h-3.56c-.28-.74-.83-2.22-1.67-4.44h-6.22q-.42,1.11-1.62,4.44h-3.58Q676.9,45.91,681.83,32.55Zm4.22,10.94-2.46-7.36Q683,38,681,43.49Z" transform="translate(-659.44 -17.74)"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\optionB[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	688
Entropy (8bit):	4.670381988102231
Encrypted:	false
SSDEEP:	12:tvG1B5gLYapGkfTqKLaTvjoLcjoAf0VBK3bvnZhuLuAzT8WjaDm8:tu1BWOUXxhf7KrZ8UWGDm8
MD5:	FE3FEFC8F0A091D0D76373BC323BDE00
SHA1:	16AF914F23026856EE067F6D7DE95F9C7A2C5AA2
SHA-256:	1C8EF09634376E6CAE367CA94C53047822E8C15560ACF1099F09C9CF6D34AA4D
SHA-512:	0C5CFB0B8F6B93AC8C4C70975C264DC3D1EA88DF685E4E7B71EE80669756C564CE9723472A441463EFD6F493C37E0D643778D7A7B8DCEF38F1AEF7DB5598511F
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/c19-book-vaccine-assets/optionB.svg
Preview:	<svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 47.7 47.7"><circle cx="23.85" cy="23.85" r="23.85" style="fill:#49a7a2"/><path d="M685.61,50.38H677V32.55h9.54a3.61,3.61,0,0,1,2.94,1.38,4.9,4.9,0,0,1,1.13,3.16,4.69,4.69,0,0,1-.69,2.48A4,4,0,0,1,688,41.23a4.52,4.52,0,0,1,2.45,1.65,4.69,4.69,0,0,1,.89,2.91,3.91,3.91,0,0,1-1.67,3.36A6.64,6.64,0,0,1,685.61,50.38Zm-5.15-14.86V40h4.63a2,2,0,0,0,1.5-.62,2.23,2.23,0,0,0,.61-1.64,2.29,2.29,0,0,0-.57-1.62,1.8,1.8,0,0,0-1.39-.61Zm5.32,7.23h-5.32v4.69h5.15a2.14,2.14,0,0,0,1.59-.67,2.26,2.26,0,0,0,.66-1.64,2.58,2.58,0,0,0-.59-1.69A1.91,1.91,0,0,0,685.78,42.75Z" transform="translate(-659.44 -17.74)"/></svg>

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\page_about-ontario[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	12205
Entropy (8bit):	5.096844686386595
Encrypted:	false
SSDEEP:	192:4JHVYEF8tViNpVfdWVqCwsSls6pfnZD1KuVIx9u7FriWGZEM6Ix9ux7vFiSFrEOW:48EqtViN/fdWVqCwvls6LskF9FxFpgMA
MD5:	9D40F2B0023B0C94033133ADD067ADF4
SHA1:	40FB0161FC4CDDFB77FAF2D366716238FCAE7014
SHA-256:	F2AB5C03F703707D20B56CA7EB9EFFF4A61F2B2C3E069D3E5C2AD57FAD7A8DC9
SHA-512:	2BDAF71F613909F6295D88DF89B201EFC66EB9E804B58702F7B6FFC357CA95E37F2421C8FF6B18C27EA5ED9F1568F837FD8050D64DF4477007B3671731F76357
Malicious:	false
Preview:	{"_id":"5f9ee688c41bf77d89e4d617","changed":1551992531,"language":"en","nid":"7583","private":0,"published_at":"1346789393","status":1,"title":"About Ontario","translations":{"fr":"page/lontario-en-bref"},"type":"page","metatags":{"title":{"#attached":{"metatag_set_preprocess_variable":[["html","head_title","About Ontario \| Ontario.ca"],["html","head_array",{"title":"About Ontario \| Ontario.ca"}]]}},"description":{"#attached":{"drupal_add_html_head":[[{"#weight":57.5,"#value":"Ontario's vibrant multiculturalism and varied landscapes make this a great place to live and to visit. Find out more about Ontario.s people, places, and history.","#name":"description","#id":"metatag_description_0","#tag":"meta","#theme":"metatag"},"metatag_description_0"]]}},"canonical":{"#attached":{"drupal_add_html_head":[[{"#attached":{"drupal_add_http_header":[["Link","<https://www.ontario.ca/page/about-ontario>; rel=\"canonical\"",true]]},"#weight":21.4,"#value":"https://www.ontario.ca/page/about-ontario"

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\page_about-ontario[2].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	HTML document, ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	42046
Entropy (8bit):	4.849044882484116
Encrypted:	false
SSDEEP:	768:4CjESE2VF8CvyNCENHbFXU/B/O9yKjEhE2VFuNvyNC4NHbFXUwB/O9yE:J42J6NC27qcQKt2O6NCS7qbQE
MD5:	9400BBD4BBE0ABC28480B6F20F157019
SHA1:	4CDA5DC1E5E61AE48F9B38C90BF2281E86C4A607
SHA-256:	2F0942F79780F0F596614A7561A72D733D50E06648FAC5BFDAC1AE4985EC8341
SHA-512:	C56807D0EEA28FAF4A6A9152185396E2EC5AC3861ECA1EE8F40790C9D3670EF72D7F19034E50CFE405239717AAF46E1B9053C66B283156D2F74D801597D49BC1
Malicious:	false
Preview:	{"_id":"5f9ee688c41bf77d89e4d617","language":"en","nid":"7583","private":0,"status":1,"body":{"und":[{"safe_value":"<h2 id=\"section-0\">Key facts</h2>\n\n<p>Ontario is a study in contrasts. The varied landscape includes the vast, rocky and mineral-rich Canadian Shield, which separates the fertile farmland in the south and the grassy lowlands of the north.</p>\n\n<p>Here are some key facts about Ontario:</p>\n\n<ul><li>Ontario’s more than 250,000 lakes contain about one-fifth of the world's fresh water</li>\n\t<li>in summer, temperatures can soar above 30°<abbr title=\"Celsius\">C</abbr> (86°<abbr title=\"Fahrenheit\">F</abbr>), while in winter they can drop below -40°<abbr title=\"Celsius\">C</abbr> (-40°<abbr title=\"Fahrenheit\">F</abbr>)</li>\n\t<li>Ontario's industries range from cultivating crops, to mining minerals, to manufacturing automobiles, to designing software and leading-edge technology</li>\n\t<li>cultures from around the world thriv

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\page_government-ontario[1].json Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	15129
Entropy (8bit):	5.185804144059711
Encrypted:	false
SSDEEP:	384:5FlMRMqCJVsxiqELBsq8FF9FxFpoM867v+T7v+c:5FlMRMqCJVsxZELBsq8FF9FxFpoM8Xuc
MD5:	C522CABEDA9E96F5C5CE757140CB3A78
SHA1:	DFCADC39E1F95C8DDBBA31F121D5F7A667ACF359
SHA-256:	0880994C5F3A2D94971B7A3A88895AD81AB8F2D36D7E59449E25174A483FB756
SHA-512:	A339E4E982C01AEFB5EF5F3CDEA19578E59766C41D7867A3772722ABF4BD8078C3E0DAD8BC3C2C1B52D8737D406A25DE517C4FF3D54F5DDD3A2EF3E333902283
Malicious:	false
Preview:	{"_id":"60707288fb20fe08ca834930","changed":1617982086,"language":"en","nid":"53967","private":0,"published_at":"1444061784","status":1,"title":" Government of Ontario","translations":{"fr":"page/gouvernement-de-lontario"},"type":"page","metatags":{"description":{"#attached":{"drupal_add_html_head":[[{"#weight":2,"#value":"Ontario.ca is the official website of the Ontario Government.","#name":"description","#id":"metatag_description_0","#tag":"meta","#theme":"metatag"},"metatag_description_0"]]}},"og:description":{"#attached":{"drupal_add_html_head":[[{"#weight":31.1,"#value":"Ontario.ca is the official website of the Ontario Government.","#name":"og:description","#id":"metatag_og:description_0","#tag":"meta","#theme":"metatag_property"},"metatag_og:description_0"]]}},"twitter:description":{"#attached":{"drupal_add_html_head":[[{"#weight":48.2,"#value":"Ontario.ca is the official website of the Ontario Government.","#name":"twitter:description","#id":"metatag_twitter:description_0","#t

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\populate-front-page-data[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2082
Entropy (8bit):	4.990449066877906
Encrypted:	false
SSDEEP:	48:UyrOvYRPkKdKFY9TZUJPdigXQDQIBbuMMDuLGSoedigQIE:brOvYRMksMTZUJ1ieC0qFiqE
MD5:	2D83C3EBADC547295393DD43C6CDBB8E
SHA1:	7CAD8CB449AA7E6B39AB6DBF124F5493F983830B
SHA-256:	C31F371654FFCA2E8C831CF7377510B77CDCFD4E7782DD68F2934890EC2EA3CB
SHA-512:	AB50C8E6CEA9BB3C065C8EC9AA4B1B73EEEE705B41B07E7F1CD1B0358816CC02B5585924A4C2E26F06FC869FF6C60FA806C0E95987A2CF39C9F0404CB4620305
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/modules/custom/c19_front_page/js/populate-front-page-data.js?v=8.9.13
Preview:	(function () {. //# sourceURL=simpleInject.js. var lang = "en-CA";.. // HACK: Our firewall seems to prevent Drupal.t from working.. // Using if statement to determine language here.. if (drupalSettings.path.currentLanguage === 'fr') {. lang = "fr-CA";. }.. var keys = [. "Total Cases",. "Resolved",. "Deaths",. "Number of patients hospitalized with COVID-19",. "Number of patients in ICU due to COVID-19",. "Number of patients in ICU on a ventilator due to COVID-19". ];.. function formatNumber(value) {. value = Number(value).toLocaleString();. return (lang === "fr-CA" ? value.replace(",", " ") : value);. };.. function injectData(data) {. if (. !data[keys[0]] \|\|. !data[keys[1]] \|\|. !data[keys[2]] \|\|. !data[keys[3]] \|\|. !data[keys[4]] \|\|. !data[keys[5]]. ) {. document.getElementById('covid-numbers-section').style.display = "none";. console.error("Missing data", data);. };.. var dateString = new Date(dat

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\print[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	UTF-8 Unicode text, with very long lines, with no line terminators
Category:	downloaded
Size (bytes):	1825
Entropy (8bit):	5.0119035673100525
Encrypted:	false
SSDEEP:	48:kEiOuCdPcA69pD5FUZPTX86G6K0IsdMIqn:RuCdPk9vyZPTXV3K0I4MIg
MD5:	CEC5C315C7064A0071DD65758F297374
SHA1:	7B05FA79709AA9B5C02D75D9673EF722DFC5A8D0
SHA-256:	48833449AE55263032E090509216730C8B13E8785D3FA107983BD95BF4ADA36C
SHA-512:	51C4FC6747C2C400CAA3D7AEF4A9367AFD5548D2BD8E4DEC417F4A7EDC5D84F9FE039B3121C1906B2532E18D6D2AE473741FF83372E875D552600EA4FB33AAC4
Malicious:	false
IE Cache URL:	https://www.ontario.ca/css/print.css
Preview:	@charset "UTF-8";#ie10,#toc,.action-bar,.clear-input,.flex-video,.hide-for-print,.left-off-canvas-menu,.marketing-banner img,.show-for-sr,.skip-link,.toc,a.iconBacktotop,footer,h2.toc--header,header .site-logo,header a,header button,header form,nav.pager,span:empty,ul.breadcrumbs{display:none!important}.site-logo-print{display:block!important;height:45px;margin:1rem 0}div,span{background-color:#fff!important;color:#000!important}a[href^=tel]{text-decoration:none;color:#000!important}.marketing-banner .intro .custom-size{padding:0!important;width:100%!important}.main-content{border-top:2pt solid #ccc!important}.button{display:inline-block;background:#ebebeb;border:2pt solid #ccc;border-radius:3px;padding:.5rem;margin:0 1rem 1rem}.alert-box,.callout,.panel,aside{border:2pt solid #ccc;padding:.5rem 1rem;margin-bottom:1rem}img{max-width:100%}table{border:2pt solid #ccc}td,th{border:1pt solid #ccc}th{text-align:left}.no-wrap,a[href^=tel]{white-space:nowrap}abbr[title]:after{content:none}foo

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\recaptcha__en[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	downloaded
Size (bytes):	341678
Entropy (8bit):	5.691689116624371
Encrypted:	false
SSDEEP:	6144:HZZ7B4tguIvvtotzv5vK4qRLdQkGVEdUyrxxuudvU:771vv4mRLdQTqdPddM
MD5:	B639548B50C2EE7294D4E04A2E563ACE
SHA1:	FF47D0F0F354D6F68098510A2EA67716A1AB369E
SHA-256:	030235AB6FC1739381DF015B815A93E2ED3921F09832954DBACDE9991708E27A
SHA-512:	918B6EEF1B9AF7F0C4750976E6274318BD77EAC525E23012B0FACA2AE4707D1F66BF427B04F8F01FC6224780EF6A68DDF12668596D671F8A85CB576C3F9F7AEF
Malicious:	false
IE Cache URL:	https://www.gstatic.com/recaptcha/releases/mrdLhN7MywkJAAbzddTIjTaM/recaptcha__en.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var W=function(){return[function(d,E,Z,R,n,M,O,g,c,I,k,x,h,X,z){if(X=[2,20,0],!((d^877)&13)){if(R=l[30](X[1],document,l[37](16,E,Z)),!R)throw Error("reCAPTCHA client element has been removed: "+Z);z=R}if(!(d>>1&11\|\|(x=["10","setTimeout","535.3"],Zg.call(this),this.I=Z\|\|null,this.Y=l[25].bind(null,X[0]),this.Z={},this.T=E,R)))if(this.J=null,m&&!V[46](46,x[X[2]]))P[26](11,x[X[0]],D(this.M,this));else{for(h=(O=[(M=((this.J=new RQ(D(this.M,this)),V)[3](14,"window",x[1],this.J),V[3](22,"window","setInterval",.this.J),X[2]),"requestAnimationFrame"),"mozRequestAnimationFrame","webkitAnimationFrame","msRequestAnimationFrame"],k=this.J,G.window);M<O.length;M++)I=O[M],O[M]in h&&V[3](6,"window",I,k);for(c=(g=D((dn=(n=this.J,!0),n.J),n),X[2]);c<Mq.length;c++)Mq[c](g);OG.push(n)}return(d-6)%11\|\|this.I(new gn(void 0!==R?R:!0,new Q(E,Z))),z},function(d,E,Z,R,n,M){return((M=["keyup",27,0],d+4&2\|\|E.keyCode!=

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\reset-appearance.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	274
Entropy (8bit):	4.5219236059353545
Encrypted:	false
SSDEEP:	6:UiE4nzwfgWczGPtd+LRuL7OAnRtX0H0D0K:UvdczGPtELRuL7jXOMH
MD5:	5318929554D3BCE84406B2A5418EACAE
SHA1:	0E6DB18A3D7FBBDB6FC3827D3DA529A778AED732
SHA-256:	0AC01AB832B811CDC2DFDDAF28BA2F1EE3EF3BB6486CBAEB424226FDE71EE625
SHA-512:	9CD234CAFB5B728B9F0C7D1E2A9E851A751C1617B04550E68ECB0DD0E7211FBC6453093E5AC93CBACA89F716AA573BEACFE730917F567619DC93675A52F08C93
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/reset-appearance.module.css?qrgttk
Preview:	/. @file. * Utility class to remove browser styles, especially for button.. */...reset-appearance {. margin: 0;. padding: 0;. border: 0 none;. background: transparent;. line-height: inherit;. -webkit-appearance: none;. -moz-appearance: none;. appearance: none;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\resize.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	270
Entropy (8bit):	4.586341818312339
Encrypted:	false
SSDEEP:	6:ULArZhH2wz6tLARtXAjrtUmUREjrIWIorRE1RtXAjri:Ui7H2J0bQ93UREjiorRE1bQS
MD5:	26AC1F67997C5AE18FF630469D2C7D41
SHA1:	041BEF3A4DF746F4130EE5D825FB067A5B791764
SHA-256:	299064CF3027C5EFAB4AB6DF345DE1302DFA562DB83ECA51965371938480F56C
SHA-512:	3C459189901692E534E5488FF621FF71F6D57CC16F8AB4832042079658806C987052805DE9097F1A1A2C1C1806DF0151DB2AD7E5B5F979F02D57CB49DC47EF3E
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/resize.module.css?qrgttk
Preview:	/*. @file. * Resizable textareas.. */...resize-none {. resize: none;.}..resize-vertical {. min-height: 2em;. resize: vertical;.}..resize-horizontal {. max-width: 100%;. resize: horizontal;.}..resize-both {. max-width: 100%;. min-height: 2em;. resize: both;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\screen-before-you-go[1].svg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1893
Entropy (8bit):	4.7296897972735925
Encrypted:	false
SSDEEP:	48:Jd189Ya9/gs/hI9O95sA9AE+vbVRUB6lZOUD82JRgAtI8RwXNI9M:5Ygs/hI9RA9AXGB6lZ82JRgAtI84
MD5:	E1843F0B5A4428F70E47B6B0EFDBC000
SHA1:	3CBA633F948525231EDBCD5E5F0D7BB70C4DB4E9
SHA-256:	CF64F613F139DC2BFF2B3C09B5F3118D1044577BA5E84D5E6070EE6C8B70F653
SHA-512:	406BEAE23A7A0FDAAC4C9C3A1C767EFFBD739B5E99780277CB2075DE20D658DF733F8A1DFFC515F93E57FB19E4875FF09F16B7AE53C88CD8B1646EF8EAF30B0A
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid19-cms-assets/2021-02/screen-before-you-go.svg
Preview:	<svg width="138" height="125" viewBox="0 0 138 125" fill="none" xmlns="http://www.w3.org/2000/svg">.<path d="M136 111.234L102.67 121.997V2.83765L136 10.3331V111.234Z" stroke="black" stroke-width="3" stroke-miterlimit="10"/>.<path d="M113.498 36.8556H108.527V80.291H113.498V36.8556Z" fill="#1A1A1A"/>.<path d="M95.8118 10.3332H56.0474V111.234H95.8118V10.3332Z" stroke="black" stroke-width="3" stroke-miterlimit="10"/>.<path d="M91.1493 39.9692H86.1787V75.9476H91.1493V39.9692Z" fill="#1A1A1A"/>.<path d="M29.8075 42.0398C33.5315 42.0398 36.5505 39.0282 36.5505 35.3131C36.5505 31.598 33.5315 28.5864 29.8075 28.5864C26.0834 28.5864 23.0645 31.598 23.0645 35.3131C23.0645 39.0282 26.0834 42.0398 29.8075 42.0398Z" stroke="black" stroke-width="3" stroke-miterlimit="10" stroke-linecap="round" stroke-linejoin="round"/>.<path d="M27.0717 45.4608C30.1156 46.0759 33.9303 51.2266 33.9303 51.2266L45.1429 62.9888C45.1429 62.9888 47.3777 66.9479 45.1429 68.2164C42.9081 69.4849 39.9026 68.8699 38.3999 66.909

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\splash.min[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	87
Entropy (8bit):	4.473045002246177
Encrypted:	false
SSDEEP:	3:jTqiCQJxaQJ9AL/+15RK9lYGffI:3TL6+10mGXI
MD5:	93AD982FF17A99465B29B10D2B7E8457
SHA1:	4ECB7344AFB8EAA065BA2E4939C0AD2F0E2D17F7
SHA-256:	78E5D646FB2767F956AD871D606B0A605F5EEB31E40B90A4ED18D48FED8C11E2
SHA-512:	F29A38D00005B17A01B887B952E534E6F61F871938FAF7B0E250BCF569BAFE99D44089DBD9BAFD1864AD3B3AAF9C022BB612D24AE64EF77DA4B9BF71B77A23F6
Malicious:	false
IE Cache URL:	https://www.ontario.ca/splash/splash.min.js
Preview:	"use strict";angular.module("onesite.app").controller("SplashController",function(){});

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\styles-c2fe8482057191dca484[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	4.445012903413859
Encrypted:	false
SSDEEP:	3:lD3ORZy/LBdORZzZqVRNilf:lD3r1daZurilf
MD5:	059CFC353C033AEE704318A0A67275A2
SHA1:	22D5EA1600DF265723B181B484F2E3F85A4BCBBC
SHA-256:	68D5BEF571C6A9E14D8A182BC2ED9CBE64D353A86DCBA0387440760CBEED8F53
SHA-512:	875433B858A8CCA9B0549543ECDDDEA7C6A0034DD88A9DBFCCEAA880056ACD3AA224E7099BD3EE7CDD330B0185809D74FDDA41B49B1614E6CE3CD5192BBC6BEF
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/covid-19-ac-assets/styles-c2fe8482057191dca484.js
Preview:	(window.webpackJsonp=window.webpackJsonp\|\|[]).push([[1],[]]);

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\tree-child.module[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	478
Entropy (8bit):	4.890689215237644
Encrypted:	false
SSDEEP:	12:U5id+JBmmfpx4uccJBommfI6p4uEwJBSHwJBomeFecJBTdmfpxMcOv:IiAXpuuc4sIBu9ccF4x+pPA
MD5:	50CA567C3A83F0F669E0AD776C17E177
SHA1:	AA9886EC28F76CE659B55528A41B7D00247DB5AA
SHA-256:	7B01B36D9B978726EEB935EB9CF4CA4B7AC06E7191264F079068F6B0F3A51E90
SHA-512:	7E64427E208477B2EC1F2045D1A2913199A35358712769CFF785A9A19D09E9F8B129C1564156C32E96FF3A4003CC5E502DC86BAEA50D903D8D80A97C94810C12
Malicious:	false
IE Cache URL:	https://covid-19.ontario.ca/core/themes/stable/css/system/components/tree-child.module.css?qrgttk
Preview:	/*. @file. * Visual styles for a nested tree child.. /..div.tree-child {. background: url(../../../images/core/tree.png) no-repeat 11px center; / LTR /.}.div.tree-child-last {. background: url(../../../images/core/tree-bottom.png) no-repeat 11px center; / LTR */.}.[dir="rtl"] div.tree-child,.[dir="rtl"] div.tree-child-last {. background-position: -65px center;.}.div.tree-child-horizontal {. background: url(../../../images/core/tree.png) no-repeat -11px center;.}.

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\unnamed[1].jpg Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	[TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, frames 3
Category:	downloaded
Size (bytes):	3084
Entropy (8bit):	7.826928404670665
Encrypted:	false
SSDEEP:	96:jdUfcQ0dqMC3p3rl5k8/+RsyzEG9aUJgiHwNcp3:hUfcKpQ8WNaUuVk
MD5:	E7AC718A8D4C0BBBAF5F3E383D798C1E
SHA1:	BA95184899792B6FF746D7322722EC196373ED5D
SHA-256:	315D25EFCAF6BC2E461FAD136E8CDC94E8BECCD3D64F42791D54616AF8C0C7BE
SHA-512:	1E699C4E7216A3DF722BBCBF1D0F781596C112C430668AA1AA3BEABDB9220196C33058E89D264231882D53D26BB818524ACDEBB9A0A4E40632B1D0D88835AB82
Malicious:	false
IE Cache URL:	https://yt3.ggpht.com/ytc/AAUvwnhEgNdkVX5kapxPL376C_73Lo89AbNUECRSSAimWA=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF.............Exif..II.......1...............Google..............................................................................................................................................D.D............................................=..........................!.1Q."Aaq.2Br#Rb.$3s.........Cc..................................7.......................!1..AQq."2a..B......#Rbr...$..............?..S.I/3....L....#..^......(....=.....1.'.{......\&r...)?Z.h...L2/..@z..O.q.....).G&w~~/..t.;.....MNo1.......\|.?......W.I.x..n...#!au$3en.CJL.[xkm>.IS.0.....+...z.oP..8hJ>..{.H...."x.........e.8.Qv.x.mH.o1.u.....O#.p.e;hU....g....."...;..E.dSUEU...]...j.0r.....S..n..c.q2..'".....A.8.._2H.lb.....G..... 5=sa..u2.6.R...N$.i......8.U.. ....E..e%....h^.....c!..RE<<...<q1s..2...>..C.....6V.u.........j9..8q..7_..i..H.D.n...`..1v...G._.i.s....=.......)m.S..7.{..u...*.oH}.w.2...#...x..F...`mek..+.Zn6....R.N$2.9."....c...9..F5..)...."=1..].....[.c`b)#.....O.JZy...

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\www-embed-player[1].js Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines
Category:	dropped
Size (bytes):	188279
Entropy (8bit):	5.603499513857841
Encrypted:	false
SSDEEP:	3072:lWkDbAK3HmUrgO7S3uKlQGW4f1exHWBDmzlr4h3bC:FiUrv7S3uItf1ex29mzlL
MD5:	092015B896FFE2E69A18D2CAE63E3A25
SHA1:	E4F74658E3CE9903F9A6869C25529481AE6424AB
SHA-256:	3E7878E1663715360661D68893E34F41B705C615C3A5594D37C2E685DBF13360
SHA-512:	086FF88EF8DC06B9E7FD25E93D8B5D2310F9A6C03DC475190E2FAB87DF97F1855A9B0308430C5410A9FC7C553AFD4ED814742C78020280DBDF933D0C20705E2D
Malicious:	false
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var m;function ba(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ca="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var ea=da(this);function t(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ca(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(e){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c("jscomp_symbol_"

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ZAE7RW1P\www-player[1].css Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text, with very long lines, with no line terminators
Category:	dropped
Size (bytes):	365477
Entropy (8bit):	5.242167915306127
Encrypted:	false
SSDEEP:	1536:BDQI0irpHrpj/fn8Mq5G04XGqUDrzltPljuvEMFfyUOP5FRrDJciM/ByDN4A6D65:TijDrzxCQgayRsLb
MD5:	2D4D90F855A60199EE25043D26066129
SHA1:	3E62A44ACF2768ABCCCE8ECCD1736C2D6F67AFFE
SHA-256:	E76089910B3A72BB157C377AF94E140AA5BA385BE2DAD47D13D5E80F3F3C5100
SHA-512:	37F74371CC28C1584DF9A3F308CBF97810CE5D77C7C1624CD9538D274B240ED36D927962E76FEBB30443D8040CF9084790C282D169A139B402F72AFE14305CAD
Malicious:	false
Preview:	.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation;-ms-high-contrast-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode,.html5-video-player.ytp-fullscreen{background-color:#000}.ytp-big-mode{font-size:17px}.ytp-autohide{cursor:none}.html5-video-player a{color:inherit;text-decoration:none;-moz-transition:color .1s cubic-bezier(0.0,0.0,0.2,1);-webkit-transition:color .1s cubic-bezier(0.0,0.0,0.2,1);transition:color .1s cubic-bezier(0.0,0.0,0.2,1);outline:0}.html5-video-player a:hover{color:#fff;-moz-transition:color .1s cubic-bezier(0.4,0.0,1,1);-webkit-transition:color .1s cubic-bezier(0.4,0.0,1,1);transition:co

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.MSO\C045F79E.png Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	PNG image data, 1356 x 480, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	25735
Entropy (8bit):	7.786197036789187
Encrypted:	false
SSDEEP:	384:/ZFnIkmEzarZkigwxQaCoboRqW17CcXNJ/pAXivP5cRX/2orhF6UBIkLalAcjIve:bI5FrZkiHQsoRb1ZXz/pPOrr2Upa9ie
MD5:	03C4647851435FE2872ED8ED182D9E0D
SHA1:	31BCB340514DD940F505C4F72CD39B12F5D8E882
SHA-256:	ADF2B57042FCBF156E3061DCA52CFAE0801212AAEBC481F4B5BCCB542FB5D088
SHA-512:	0AE5851E6B62693C5F478DD943F659022D5FC0EE3421C87EDBCE1CA69A9213AF159EFE7D09B9E0F51889DD035DFABC61E740EBFAD9A48B3BE941025106E768C6
Malicious:	false
Preview:	.PNG........IHDR...L.........~i'H.. .IDATx...Mr.G....:<...T4..K..vi..V...&W@r........W...#.+.:...w.~...!5?P@.Nf../......&..u......?.....@...}'.^Rc.eH.I...Y....Tu.^.\.{.,.z.t.^...`.~........K..=S,....2......:..R..[....[/g..!0..L......I].W.....h#.f...Y.AY....E........F...Uu.(.K=ua..b)].8........l...+...)v.R.A'U...W..$]..S.`.....0.F.....h..U.`..e...8.........\|K#..X.$.D..]Uu;..(_.....K1.:L.....f...V....f..][.@Y....C......0..n'...x.[).TC..:I#...&.Q.....+..p..)....`PU.)v.y:.i.xX..;......Q0......"...J..G..F.P.........6.V.]..8...`.....89.#.O.#.+. (......b)].0G......pRU.^(v.z.H1:K].W.......ld..).....$R..^.F.7.]..:......u..bW)..!+.L........Q,.2R...i...z9....<..).....WU....H..G..C.,..{...:...F.(......z.H1.?.].A.XJ.6.F......p..n..#..?w..;Q.A'U.^+....].(..S............... (KU...R.....`......P.4R.Y...A.....ua...b.B.G..(..............k..(K...45.2$..Q4............6.V....%.N.Ah..&.Q.....+....(.......R..b....N.....vB'ta..`.....x.....r........^......Y0...).....Ei.x._..

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{248F44A0-30CA-4646-ACFF-79FC9E14ADCB}.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	1024
Entropy (8bit):	0.05390218305374581
Encrypted:	false
SSDEEP:	3:ol3lYdn:4Wn
MD5:	5D4D94EE7E06BBB0AF9584119797B23A
SHA1:	DBB111419C704F116EFA8E72471DD83E86E49677
SHA-256:	4826C0D860AF884D3343CA6460B0006A7A2CE7DBCCC4D743208585D997CC5FD1
SHA-512:	95F83AE84CAFCCED5EAF504546725C34D5F9710E5CA2D11761486970F2FBECCB25F9CF50BBFC272BD75E1A66A18B7783F09E1C1454AFDA519624BC2BB2F28BA4
Malicious:	false
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{C2D3EB9C-AB70-4784-8852-5C03B64EE05D}.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	4.113043206100419
Encrypted:	false
SSDEEP:	768:1jS0ABmaW20HvdTf3R3tE0WVT30FP5Nb46+V2GL0AVc5LxAQCeWJ4y3:1jgmaSic5U22
MD5:	2C6DFED8166DA5A7193625ABA32F9CED
SHA1:	457999C36F0D1CD04F85260B0254B2F64222BA11
SHA-256:	2F7F1690B4AEB30C736EA66B817D6E22885D884F16D6E5C27ED08EC1F41B8838
SHA-512:	A258764629505298EC0FAFF8C2A2ED6E1CFD6076B396D5EE468DF27FA0B97658A51FD7CFC8F7E72D6DFD7935CC05EC7DF81442AF6973A9F88E982CF508E70DF0
Malicious:	false
Preview:	................................................................ .!.".#.$.%.&.'.(.).*.+.,.-.../.0.1.2.3.4.5.6.7.8.9.:.;.<.=.>...................L.a.s.t. .U.p.d.a.t.e.d.:. .A.p.r.i.l. .1.2.,. .2.0.2.1.......C.O.V.I.D.-.1.9. .V.a.c.c.i.n.a.t.i.o.n. .C.l.i.n.i.c. .L.o.c.a.t.i.o.n.s. .a.n.d. .B.o.o.k.i.n.g. .S.i.t.e.s.....Y.o.u. .m.a.y. .b.e. .a.b.l.e. .t.o. .e.n.t.e.r. .y.o.u.r. .i.n.f.o.r.m.a.t.i.o.n. .i.n.t.o. .t.h.e. .f.o.l.l.o.w.i.n.g. ...............................................................................................................................>...@...\...l..................................................................................................................................................................................................................................................gd....l........... .................]...^...gd....l........... ...............h.........-D..M............[$.\$.]...^.h.gd..F......$.a$.gd..F.....&d....7$.8$.H$.P..........gd.56.

C:\Users\user\AppData\Local\Temp\Cab39F3.tmp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	Microsoft Cabinet archive data, 58596 bytes, 1 file
Category:	dropped
Size (bytes):	58596
Entropy (8bit):	7.995478615012125
Encrypted:	true
SSDEEP:	1536:J7r25qSSheImS2zyCvg3nB/QPsBbgwYkGrLMQ:F2qSSwIm1m/QEBbgb1oQ
MD5:	61A03D15CF62612F50B74867090DBE79
SHA1:	15228F34067B4B107E917BEBAF17CC7C3C1280A8
SHA-256:	F9E23DC21553DAA34C6EB778CD262831E466CE794F4BEA48150E8D70D3E6AF6D
SHA-512:	5FECE89CCBBF994E4F1E3EF89A502F25A72F359D445C034682758D26F01D9F3AA20A43010B9A87F2687DA7BA201476922AA46D4906D442D56EB59B2B881259D3
Malicious:	false
Preview:	MSCF............,...................I........T........bR. .authroot.stl...s~.4..CK..8T....c_.d....A.K......&.-.J...."Y...$E.KB..D...D.....3.n..u.............\|..=H4..c&.......f.,..=..-....p2.:..`HX......b.......Di.a......M.....4.....i..}..:~N.<..>..V..CX......B......,.q.M.....HB..E~Q...)..Gax../..}7..f......O0...x..k..ha...y.K.0.h..(....{2Y.].g...yw..\|0.+?.`-../.xvy..e......w.+^...w\|.Q.k.9&.Q.EzS.f......>?w.G.......v.F......A......-P.$.Y...u....Z..g..>.0&.y.(..<.].`>... ..R.q...g.Y..s.y.B..B....Z.4.<?.R....1.8.<.=.8..[a.s.......add..).NtX....r....R.&W4.5]....k.._iK..xzW.w.M.>,5.}..}.tLX5Ls3_..).!..X.~...%.B.....YS9m.,.....BV`.Cee.....?......:.x-.q9j...Yps..W...1.A<.X.O....7.ei..a\.~=X....HN.#....h,....y...\.br.8.y"k).....~B..v....GR.g\|.z..+.D8.m..F .h............ItNs.\....s..,.f`D...]..k...:9..lk.<D....u...........[...*.wY.O....P?.U.l....Fc.ObLq......Fvk..G9.8..!..\T:K`.......'.3......;.u..h...uD..^.bS...r........j..j .=...s .FxV....g.c.s..9.

C:\Users\user\AppData\Local\Temp\Tar3A04.tmp Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	152788
Entropy (8bit):	6.309740459389463
Encrypted:	false
SSDEEP:	1536:TIz6c7xcjgCyrYBZ5pimp4Ydm6Caku2Dnsz0JD8reJgMnl3rlMGGv:TNqccCymfdmoku2DMykMnNGG0
MD5:	4E0487E929ADBBA279FD752E7FB9A5C4
SHA1:	2497E03F42D2CBB4F4989E87E541B5BB27643536
SHA-256:	AE781E4F9625949F7B8A9445B8901958ADECE7E3B95AF344E2FCB24FE989EEB7
SHA-512:	787CBC262570A4FA23FD9C2BA6DA7B0D17609C67C3FD568246F9BEF2A138FA4EBCE2D76D7FD06C3C342B11D6D9BCD875D88C3DC450AE41441B6085B2E5D48C5A
Malicious:	false
Preview:	0..T....H.........T.0..T....1.0...`.H.e......0..D...+.....7.....D.0..D.0...+.....7..........\|h....210303062855Z0...+......0..D.0.......`...@.,..0..0.r1...0...+.....7..~1......D...0...+.....7..i1...0...+.....7<..0 ..+.....7...1.......@N...%.=.,..0$..+.....7...1......`@V'..%..*..S.Y.00..+.....7..b1". .].L4.>..X...E.W..'..........-@w0Z..+.....7...1L.JM.i.c.r.o.s.o.f.t. .R.o.o.t. .C.e.r.t.i.f.i.c.a.t.e. .A.u.t.h.o.r.i.t.y...0..,...........[./..uIv..%1...0...+.....7..h1.....6.M...0...+.....7..~1...........0...+.....7...1...0...+.......0 ..+.....7...1...O..V.........b0$..+.....7...1...>.)....s,.=$.~R.'..00..+.....7..b1". [x.....[....3x:_....7.2...Gy.cS.0D..+.....7...16.4V.e.r.i.S.i.g.n. .T.i.m.e. .S.t.a.m.p.i.n.g. .C.A...0......4...R....2.7.. ...1..0...+.....7..h1......o&...0...+.....7..i1...0...+.....7<..0 ..+.....7...1...lo...^....[...J@0$..+.....7...1...J\u".F....9.N...`...00..+.....7..b1". ...@.....G..d..m..$.....X...}0B..+.....7...14.2M.i.c.r.o.s.o.f.t. .R.o.o.t. .A.u.t.h.o

C:\Users\user\AppData\Local\Temp\msoB145.tmp Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	GIF image data, version 89a, 15 x 15
Category:	dropped
Size (bytes):	663
Entropy (8bit):	5.949125862393289
Encrypted:	false
SSDEEP:	12:PlrojAxh4bxdtT/CS3wkxWHMGBJg8E8gKVYQezuYEecp:trPsTTaWKbBCgVqSF
MD5:	ED3C1C40B68BA4F40DB15529D5443DEC
SHA1:	831AF99BB64A04617E0A42EA898756F9E0E0BCCA
SHA-256:	039FE79B74E6D3D561E32D4AF570E6CA70DB6BB3718395BE2BF278B9E601279A
SHA-512:	C7B765B9AFBB9810B6674DBC5C5064ED96A2682E78D5DFFAB384D81EDBC77D01E0004F230D4207F2B7D89CEE9008D79D5FBADC5CB486DA4BC43293B7AA878041
Malicious:	false
Preview:	GIF89a....w..!..MSOFFICE9.0.....sRGB......!..MSOFFICE9.0.....msOPMSOFFICE9.0Dn&P3.!..MSOFFICE9.0.....cmPPJCmp0712.........!.......,....................'..;..b...RQ.xx..................,+................................yy..;..b.........................qp.bb..........uv.ZZ.LL.......xw.jj.NN.A@....zz.mm.^_.........yw........yx.xw.RR.,.++............................................................................................................................................................................................................8....>.......................4567...=..../0123.....<9:.()+,-.B.@...."#$%&'....... !............C.?....A;<...HT(..;

C:\Users\user\AppData\Local\Temp\~DF1CE05EB0C3EFFAB1.TMP Download File
Process:	C:\Program Files\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	319860
Entropy (8bit):	3.259598312276325
Encrypted:	false
SSDEEP:	3072:XMn3w6shuNdfh3Mv0rMREtit8XN6kyxQU3PKXzq9bNtuL8DRb0y0m0D0:s3Uydh3qiRwxQU3MzqzUL8oxVg
MD5:	77130638925FB361FC122ADAED3FDA12
SHA1:	BCFE212CA3A05D34FEA47EA3E1ED4B14786AF42F
SHA-256:	CF084869F1AA31777597CEF0AE40F17D56F38389A546E9467510E4CD28619B67
SHA-512:	7355FB00B561764C7CB3FDA4EAB2DBB9C1936E50A37C68E5AD94DA74CB120C64C66BD9BE0345BACF9575141139E67A2D346DC8B0CDA5C3B550CAB959737739DB
Malicious:	false
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... .......................................@..H.0................K.j.j.a.q.f.a.j.N.2.c.0.u.z.g.v.1.l.4.q.y.5.n.f.W.e...........8.......................................................X......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFB176579392BDA44E.TMP Download File
Process:	C:\Program Files\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	13077
Entropy (8bit):	1.4404794473700189
Encrypted:	false
SSDEEP:	48:LyzGAMvA7G6MzqIz6GmhSzIZMpVZMRyRURTvVvo:LybMveMeIAhSm+P
MD5:	3D7EBF97861E7B2212C9BADDB7D955E1
SHA1:	F57595A69E1F8E3DBE8D9D9906BE5AF05A4FC6D7
SHA-256:	7C34ADAB2CFE583CF2DAACD3D0A2F748E3FE87AD0C39D41E13C148075B2D158E
SHA-512:	376E2694111BB3684D8F65F5A22360F3219C227983243DA5BB1A1078A4334CDB6FFDABD5D5F39C68A7F1A9F726A7BB48A1B0E4EF3B1F37F4A1FE321839AA0B92
Malicious:	false
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... .......................................`..H.0................K.j.j.a.q.f.a.j.N.2.c.0.u.z.g.v.1.l.4.q.y.5.n.f.W.e...........8.......................................................X......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Local\Temp\~DFD4878D655EEE13E3.TMP Download File
Process:	C:\Program Files\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	25441
Entropy (8bit):	0.36182187826316325
Encrypted:	false
SSDEEP:	96:LyZV/Iv3V/R4xV/Tw9V/SSaSBV/TloV/l:LyZV/Iv3V/R4xV/Tw9V/XvBV/TloV/l
MD5:	E05B1572E2C80184ACE9872DD626647D
SHA1:	FD70E50BDD44F6C6C2E15CEE498BA0C116D3A5F3
SHA-256:	02FAC51AC1A2AF6BD1083BA1D75FF314C93C1D86A1E55F85E695E475BB570FF1
SHA-512:	608A048E8165DCACD62FAC000995D040B38B0C0D885397825F55F78FDC6F6F546D19D083E88455979B05A4C6F848AF42B9152BA67DA8723E37EFA8C133554C4C
Malicious:	false
Preview:	.............................%..H..M..{y..+.0...(................... ...............................................%..H..M..{y..+.0...(................... ..........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).LNK Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Archive, ctime=Wed Aug 26 14:08:12 2020, mtime=Wed Aug 26 14:08:12 2020, atime=Tue Apr 13 23:36:29 2021, length=56869, window=hide
Category:	dropped
Size (bytes):	2828
Entropy (8bit):	4.582347675972049
Encrypted:	false
SSDEEP:	48:8f/XT3InnOVj63zhTOtfQh2f/XT3InnOVj63zhTOtfQ/:8f/XLIn9dcfQh2f/XLIn9dcfQ/
MD5:	EB6EDBB7A5C9518DADE91B8E5815CE70
SHA1:	1D77BCF555F7E5F9AF5DCCB7DF099E5705F57F37
SHA-256:	886242C58A4C96DF3926ADCE3BCDEB4EF163DED04379FEA33B0CB8A66E357B59
SHA-512:	7D0F953EBF8E5C49C333FA6E5361E28F7537D1CFEAA38E115BD54BD9A240A15C49B7962CDB8B58E19EDC77273792B9ADE710AE0C90506411F16FB9A50F04C256
Malicious:	false
Preview:	L..................F.... ...&w...{..&w...{.....5.0..%.......................o....P.O. .:i.....+00.../C:\...................t.1.....QK.X..Users.`.......:..QK.X...................6.....U.s.e.r.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.8.1.3.....L.1......Q.y..user.8......QK.X.Q.y...&=....U...............A.l.b.u.s.....z.1......Q.y..Desktop.d......QK.X.Q.y..._=..............:.....D.e.s.k.t.o.p...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.6.9.......2.%....R.. .COVID-~1.DOC..........Q.y.Q.y...8.....................C.O.V.I.D.-.1.9. .V.a.c.c.i.n.e. .L.o.c.a.t.i.o.n.s. . .B.o.o.k.i.n.g. .S.i.t.e.s._.A.p.r.i.l. .1.2. .(.8.e.b.6.0.e.b.7.-.3.1.1.5.-.4.1.f.6.-.b.c.c.5.-.3.e.7.0.c.6.2.3.1.9.d.d.)...d.o.c.x.......................-...8...[............?J......C:\Users\..#...................\\305090\Users.user\Desktop\COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx.u.....\.....\.....\.....\.....\.D.e.s.k.t.o.p.\.C.O.V.I.D.-.1.9. .V.a.c.c.i.n.e. .L.o.c.a.t.i.o.n.s

C:\Users\user\AppData\Roaming\Microsoft\Office\Recent\index.dat Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	ASCII text, with CRLF line terminators
Category:	dropped
Size (bytes):	307
Entropy (8bit):	5.25391758126417
Encrypted:	false
SSDEEP:	6:Ht2o1Gw/RynP3Eg3hcUM9Wo1Gw/RynP3Eg3hcUM9w2o1Gw/RynP3Eg3hcUM9s:Htd1DwP3zhcVf1DwP3zhcVud1DwP3zhz
MD5:	5969715CF101A775D588874C887E204A
SHA1:	4C88D6962F7826D4CA080BB36FB1CF20F11EFAE8
SHA-256:	49B67900A613091C5ABF5B9AB0F724C080E562481AACC17E3F9DB1075D94439A
SHA-512:	F9B50A82EC33BC17B498B9A2AC6F300D3FC4497140286B4D2BE69BA7DA9E0F24F4D030A33CB956C1D44F6E45BC9CD2BF7938700AB37E70252348714F79BC6118
Malicious:	false
Preview:	[misc]..COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).LNK=0..COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).LNK=0..[misc]..COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).LNK=0..

C:\Users\user\AppData\Roaming\Microsoft\Templates\~$Normal.dotm Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	2.431160061181642
Encrypted:	false
SSDEEP:	3:vrJlaCkWtVyokKOg5Gll3GwSKG/f2+1/ln:vdsCkWtW2IlID9l
MD5:	39EB3053A717C25AF84D576F6B2EBDD2
SHA1:	F6157079187E865C1BAADCC2014EF58440D449CA
SHA-256:	CD95C0EA3CEAEC724B510D6F8F43449B26DF97822F25BDA3316F5EAC3541E54A
SHA-512:	5AA3D344F90844D83477E94E0D0E0F3C96324D8C255C643D1A67FA2BB9EEBDF4F6A7447918F371844FCEDFCD6BBAAA4868FC022FDB666E62EB2D1BAB9028919C
Malicious:	false
Preview:	.user..................................................A.l.b.u.s.............p.........w...............w.............P.w..............w.....z.........w.....x...

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\1I9U1RD3.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	183
Entropy (8bit):	4.199507330887128
Encrypted:	false
SSDEEP:	3:qPCNOIdT0vQicTEKSVu4V4XOLvUA3TldvuvgBK0jLOhwBTU0vQicTEKSVtVXhSVz:HvdT0vt+EKSVZV4XwTHvuB0jIwlFvt+l
MD5:	0EE3357D119805B98635D4D84BD10E0D
SHA1:	B20513FBBF90181839C654FA933AC1D946599D05
SHA-256:	3A22966734A3E63E5055D6A734DF27B77025212BE33291B66D03F81A96442448
SHA-512:	C0DD2EE420DFC5D02B7533173A429331B6B44D198CD440F75C25563442990E81FBE4FCCD9E2241A9FDD02DBE315B6304D1FABE20C3F9A0019779ED09E04E87D4
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1075238272.31026793.1320446738.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2029196672.30880143.1320446738.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\1WIX9D2H.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.281938221305988
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVFGacBEgv60jIwlFvt+EKSVtW5/S1Yh/m+EKSVtQ4rIH1+EKSVtcL:HigqFGa+84FgqtW5KeNm+qtQ4rO+qttA
MD5:	5D8EF46CB852D6B45819F99B8F36D212
SHA1:	7A5213D21D4FCF335473A156682EF8285FEA5913
SHA-256:	B42739EA22BAF4A7F34C9719AC7622DA1B1F2BAABB5ED908D3B5698D62309087
SHA-512:	D72ECC92113DD3D8D3BD60D100617334E22B12BE51940A4EDEF36B40A418AC0FBB2A61A903E09F3083E69D476841338AFDC98B0CB8FBEAC54F46AE7055FA5487
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1995238272.31026793.2245483457.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2819196672.30880143.2114677254.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\440HZ239.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	330
Entropy (8bit):	4.262996113672112
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVt14Xc1O49VQg0jIwlFvt+EKSVxpSSqq4/m+EKSVtQ4rIH1+EKSVY:Higqt14XVS4FgqxdqqUm+qtQ4rO+qttA
MD5:	68325BC20E652195F57509A0E68C9B72
SHA1:	1F9CEC0DA2C88BC98517C14F1DD70C49E4A44550
SHA-256:	61A42980AF35FB1A2C892084A8FEB6F60D105A33A826AE5AB78191FF66E458C0
SHA-512:	FDDF88A7E5F0445ED194018ED6F09C5062075E4E19B2411227ADE6188711826E0205201D1568C5A3C3FB83AA9AB89A52DB89A0604171F0C9B1421770A3FDEC2E
Malicious:	false
IE Cache URL:	ontario.ca/
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.2225238272.31026793.2468326105.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.3179196672.30880143.2468482106.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\6G1J8JQD.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.267550201823516
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVFcUuY60jIwlFvt+EKSVtSHSSd4/m+EKSVtQ4rIH1+EKSVtcgX16N:HigqFlt04Fgqt4dUm+qtQ4rO+qttA
MD5:	2DEFC8316A5691A7F10B0D0A83F21688
SHA1:	7ED87C886C4C1DB9191D8DE0BD5A3572676AEDA1
SHA-256:	FAEB3697BE5DAFCB151727726005189493535EF13B82BD60582D441B67D219BD
SHA-512:	27369BA9F9ACD9BC83A971DAB0396D76E89056F5A4D01D584ECDF46B0CE3D4418E89327E536BB8ABB75B1BCBF433CFA50A8272B2B14A940C93CAF712657402A8
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1865238272.31026793.2114677254.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2799196672.30880143.2096780164.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\9EAYE1UQ.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.263735676187645
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVlVVkc3Fr0jIwlFvt+EKSVtSOe/Sx2h/m+EKSVtQ4rIH1+EKSVtcL:HigqlnkUF14FgqtpYm+qtQ4rO+qttA
MD5:	03C7184F713FC27B3161F779D0AEA2BA
SHA1:	F970858D8B40B8EA022AF0B8E4FFFA88E9E9910C
SHA-256:	9149CCD75AE3F719F65338689650D50DB262C6A0CA3A43841FE13E4DCE2F9357
SHA-512:	F037772F75C6399B0169114AD176A3BAA2D893BD3AEE79A0EDC497EE89962FE8E4DF3C55DB425C2126F4E6306A0923278692990D187BE2CC23C7D3A83137DD4C
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1835238272.31026793.2083251134.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2789196672.30880143.2083276135.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\B61YPJUS.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	264
Entropy (8bit):	4.262468622854215
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSV9CXa6S0jIwlFvt+EKSVteG+Sy1h/m+EKSVtQ4rI1:HigqYXan4FgqteGjIm+qtQ4rc
MD5:	3354D39F7B40EFF684018C564F5F248F
SHA1:	247DB5424009CD99DD5970ED2BB0C6B5B9EF87B9
SHA-256:	E8F1599BDBF0297C4EB84E1447A7F9FDC49AE4581271481F01B83CC0BA54B9A2
SHA-512:	BB4A0678F875441E7E8563F122485E8FE0F731D6C0B84C9FB688C584DCB545C3EC7D94B106845F81328DD818021B709BE2F3A9361B4B41DED09C91C5BB94A86A
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1725238272.31026793.1974711887.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2679196672.30880143.1974867887.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.*.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\BU7S6ALF.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.288997564068729
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVFGacBEgv60jIwlFvt+EKSVtc6U/SlH/m+EKSVtQ4rIH1+EKSVtcL:HigqFGa+84Fgqtc/KVm+qtQ4rO+qttA
MD5:	C4868314EADB9DA5731F129B3B7626B0
SHA1:	26583C7C603217425CDB4502F3E509F2C5D09654
SHA-256:	B8C576A77B128F882EF34AB50ED918F3A8FA6C922CB890C22980766B07167564
SHA-512:	4AF171644E8471AEB5CC8CCF8C1051FD888E34F836B5A78CD6FC434F0B4FA65881F8981A339099E1FB746AA505EB5223A8D2E109FCCC0EEA5D74375C49758AB0
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1995238272.31026793.2245483457.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2949196672.30880143.2245758461.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\C81A6TXJ.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	264
Entropy (8bit):	4.248651408414814
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVZV4XwTHvuB0jIwlFvt+EKSVt7SyQVTHvuI/m+EKSV/xhFTHvu4:HigqZkeuP4FgqtmTuEm+q5Xu4
MD5:	C38884C6CD2D11AD2A4082BD5237DD69
SHA1:	30ECBD7573EF6125C8B83FE84433D28239548DD3
SHA-256:	2C4834F7538BB8ED64B4C4CA5E2DEFC6EECB6C556B4A30DC01AC77723DBB55DD
SHA-512:	E7D3795BCDE91337AA4242315D0CBCAE0B1524312F8BC83CD7B4BD5F9F431C7016DDD0163B4FFF08357D3244EB4CBFA4C712EA5E399E396CF295A0A37588555B
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1075238272.31026793.1320446738.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2029196672.30880143.1320446738.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.1917623168.30879942.1320446738.30879942.*.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\DGJVF474.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.272310992869017
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVFcUuY60jIwlFvt+EKSVtW5/S1Yh/m+EKSVtQ4rIH1+EKSVtcgX1A:HigqFlt04FgqtW5KeNm+qtQ4rO+qttA
MD5:	A779B025D880B4CA5947422D775CF3C3
SHA1:	A08162841FB3C51D46C1B413DA67041154165951
SHA-256:	CDC3880D1CAB9DB964DF9AE669F205341CC0758B63FB721C4EF84786931282A7
SHA-512:	5BF3383FD5894E584FC2FC3FB9F2A4B63A4E5E0DCD337B45F9D3462A20025E3B14E655512FFAFFA600D9072C9346AE1949D553511C693DB3447BE4127F2ACC9F
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1865238272.31026793.2114677254.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2819196672.30880143.2114677254.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\FI67OFMM.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	264
Entropy (8bit):	4.265306465849588
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVnCrcpg0jIwlFvt+EKSVteG+Sy1h/m+EKSVtQ4rI1:Higqk/4FgqteGjIm+qtQ4rc
MD5:	CE612938317EB6F6A32589CCABAB62DC
SHA1:	E64A0447CDCB4D1EB10E9816E8E32D2EA77B061D
SHA-256:	4F455E64740719156290395469CE477116C98A1067CFD99E0C0CBC0B6C9E6634
SHA-512:	6D725791986206868DFBE7634BFD2D944AD1DA2A7D9A3EB9CE5175966C067EA679387C597BFF032439B7993072A4FB0214CD8F25B941D4F9C38434AFE3937EAF
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1815238272.31026793.2058016033.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2679196672.30880143.1974867887.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.*.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\G6MNA809.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.2650356020722535
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVfc5x0jIwlFvt+EKSVtSOe/SPvuSH/m+EKSVtQ4rIH1+EKSVtcgX+:HigqfG4FgqtpPvuSfm+qtQ4rO+qttA
MD5:	96931258079C12203AB10FDB24007AEA
SHA1:	4AD46138EB940A8BB5B73BCC913DFB2F1E59259A
SHA-256:	659B94C10BD994A71DD4B6ED8DE2607871103BBEE667A8DB9BAD65E414902C53
SHA-512:	0AA93DE6BAEA5165C7F75CFAA937A503688FE642FFFE4C7D66F3E5ED248C75F7ABC3CFCC5B8C334151A9BA8721C8FC9DB3882CF152B1BDE92218827A47C71807
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1845238272.31026793.2096624163.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2789196672.30880143.2083576139.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\GS98OH3Z.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.258518847936908
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVfc5x0jIwlFvt+EKSVtSHSS74/m+EKSVtQ4rIH1+EKSVtcgX166d4:HigqfG4Fgqt4wm+qtQ4rO+qttA
MD5:	B7DAC1515A49A5B3D019D7812FA02731
SHA1:	493D024D82DD3D65AEB79999B6D04E8FA8B671C8
SHA-256:	6617F33D2EF31B06FB23E5206851DF464AA01AC1D61BB0AC3D0D73A8B0A0776C
SHA-512:	B1F347D71D61885644BF5503293E0B2E34A8170027AC2AF240A64FA7C24FBFFFA7FDB115F3A84538B2789EF02A3B73D6FA1DE709BDAFDB2BB3B08E3C8AA42BAC
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1845238272.31026793.2096624163.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2799196672.30880143.2096624163.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\GXDP9IRM.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	183
Entropy (8bit):	4.199507330887128
Encrypted:	false
SSDEEP:	3:qPCNOIdT0vQicTEKSVu4V4XOLvUA3TldvuvgBK0jLOhwBTU0vQicTEKSVtVXhSVz:HvdT0vt+EKSVZV4XwTHvuB0jIwlFvt+l
MD5:	0EE3357D119805B98635D4D84BD10E0D
SHA1:	B20513FBBF90181839C654FA933AC1D946599D05
SHA-256:	3A22966734A3E63E5055D6A734DF27B77025212BE33291B66D03F81A96442448
SHA-512:	C0DD2EE420DFC5D02B7533173A429331B6B44D198CD440F75C25563442990E81FBE4FCCD9E2241A9FDD02DBE315B6304D1FABE20C3F9A0019779ED09E04E87D4
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1075238272.31026793.1320446738.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2029196672.30880143.1320446738.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\HANRFQLE.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	183
Entropy (8bit):	4.87935664736738
Encrypted:	false
SSDEEP:	3:gxqKsajVXm2z2jEnGTKvXv6N+WhVRvMT4j+INjh2g/g1QuGTKvXv7YePl2QDNjP:2s8nGJUaMTwpH/duG4UQh
MD5:	D7CA3D68A577238C70AEAC566B6DFDA6
SHA1:	3920C5E6ED5C64B83002AD1D340829F0899F0024
SHA-256:	0CE6E9F78AAF1D91558BB27EFA4D80798C247A6689166E3DF9DD3E585D54482E
SHA-512:	0AF8F35F85DE1B8BCE3B1DB34E4D52E86AA7767DFA7B7AB63E34AD6756BB56B26F07D5EF027356B9F63DB651C683951D796D4F615E2E46753FACA3CA59E1CF37
Malicious:	false
IE Cache URL:	youtube.com/
Preview:	VISITOR_INFO1_LIVE.jCzGHtpxg7c.youtube.com/.2147492865.4039349504.30916076.2119588264.30879942..CONSENT.PENDING+152.youtube.com/.2147484672.3138338816.32108254.2119588264.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\HWGGUY07.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	97
Entropy (8bit):	4.935829307679282
Encrypted:	false
SSDEEP:	3:gxqKsajVXm2z2jEnGTKvXv6N+WhVRvMT4j+INjP:2s8nGJUaMTwn
MD5:	EC5F0CEE1992BEE4A5E106A95B9F0754
SHA1:	B2277076381C50A4B5F4CAF0F8A8543149A354A4
SHA-256:	196F444C260CE6422017A6CB5768BE4BC7E3AE05314F420BD62186FF1B309C9D
SHA-512:	564BDBF7F31559FA6DB7B83E4DFC1D5647CFE85AE74757DA13505AD94DC3711190A928044A7572B2F6211655B17BBCDCC262F2FFDE3382CC86F0C31E392AC178
Malicious:	false
Preview:	VISITOR_INFO1_LIVE.jCzGHtpxg7c.youtube.com/.2147492865.4039349504.30916076.2119588264.30879942.*.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\KF47PMGD.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.257128732256749
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVtUvXcxap0jIwlFvt+EKSVtiSS+lMH/m+EKSVtQ4rIH1+EKSVtcgu:HigqtUPJ4FgqtKkMfm+qtQ4rO+qttA
MD5:	D0777C97DBF2C30CE3514C5BC46CF436
SHA1:	4EBFAF483121CC7A8AF1F6BC70E88B25F23085ED
SHA-256:	B10A64E8483266E8780187683697D528A96F91E8B8D2F8BEA21A3ED6DAA1E3D2
SHA-512:	58041823D689312F272851D7FFC78FFEF8E93931C22040F62899FD029F40A07C8436D371B6C35E2AB2C81689FDC308AC97D9FB47034CC3252ADACBCD2A17CB68
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.2175238272.31026793.2420001849.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.3109196672.30880143.2402214739.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\L85A1YU8.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	91
Entropy (8bit):	4.13759859064867
Encrypted:	false
SSDEEP:	3:qPCNOIdT0vQicTEKSVu4V4XOLvUA3TldvuvgP:HvdT0vt+EKSVZV4XwTHvu4
MD5:	163019561ACD501B3DF704A758755322
SHA1:	9E15AAFBD846AB2FBA3F81CBA7443C0B2FD64C90
SHA-256:	27BB6E12B0111F996E59C3BFA93B3894C3F6947AEC6C82A376FE705FC69841BA
SHA-512:	DF7297B755470952F1BEB212CC69D2476226CA468999788CD4AB92F719A94449EE1E511287491233DCD7FD334FC818F4B6D45F226006F96C3F6FFF3A7BBB6B20
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1075238272.31026793.1320446738.30879942.*.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\M7NKN62F.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.269571449811565
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVtUUCXcz9PB0jIwlFvt+EKSVtiSSfvjh/m+EKSVtQ4rIH1+EKSVtW:HigqtU1QpP4FgqtKpm+qtQ4rO+qttA
MD5:	8C8456484AB11DE9F2B2F1D9374C7F28
SHA1:	C93CDA82F889F829EF3B50C2D92B58242A4ACF0F
SHA-256:	1253D9CAFA3043537A8CC8E7C9D5BBC54770FDAE6E8753C6F92B18D3FCDB0B9D
SHA-512:	747BB567D044B395F99AC98B5F73BD3B7C85441BDC85531CCE93FBBDA515E8D49DBA53DFD38CFC86A8037B13305EB7657DDE9A8ABDEEC5840B5317543972DACB
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.2155238272.31026793.2401939735.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.3109196672.30880143.2401964736.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\N6BBHH3T.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	183
Entropy (8bit):	4.193075782049221
Encrypted:	false
SSDEEP:	3:qPCNOIdT0vQicTEKSVuQCXOLvUy6vNBK0jLOhwBTU0vQicTEKSVtTSGfmSVQjCSN:HvdT0vt+EKSV9CXa6S0jIwlFvt+EKSVM
MD5:	E631EB6A66B4A1A356A9C815E58ED5BA
SHA1:	4A464D8FFB21F9529170C737325F6CC85DAFEDB6
SHA-256:	97CFAA474692551BCBB958CC0D7C705FBB4D28EC78C60909BEB517C36ECE41BF
SHA-512:	A15F0DD6EEC4B869998B6551DB634905729AB18C72511B0E80CE9D56AB27F7B21066D1E7D157F1AE2B36EA2B31BBEF6268DC3D6DBAD814AE34BD0F948241088C
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1725238272.31026793.1974711887.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2679196672.30880143.1974867887.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\O8UYECUT.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.270434603881026
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVtUUCXcz9PB0jIwlFvt+EKSVtSrM6/m+EKSVtQ4rIH1+EKSVtcgX+:HigqtU1QpP4Fgq8rDm+qtQ4rO+qttA
MD5:	B4E33807FB98C2A531FA586BA68752D3
SHA1:	075A5CBFDDFA4A79A2DC13044E43C5ADFF868F92
SHA-256:	96526EF661F7D552A816696228D987A77C8B4C03B7D34A30E238006262962A97
SHA-512:	441B569E795D7962E6D1CCE886FA3AAAE84DFC2BEE4AF69EC3765BDDFD990EC96FB237A2C85A83945D04E8A671A9D896DD42DF5613651B93D35777F59B664F8D
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.2155238272.31026793.2401939735.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.3079196672.30880143.2376714666.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\P10TD78T.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.26255131367169
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVlVVkc3Fr0jIwlFvt+EKSVtSBwmS6VH/m+EKSVtQ4rIH1+EKSVtcL:HigqlnkUF14FgqtfrSm+qtQ4rO+qttA
MD5:	A6E6F0288AD721310510338398D6492A
SHA1:	412EF7ED1F7C924B0C21BB0B223F1504B21B6D5C
SHA-256:	CD2FCD27C50C2300961998752E753DE904B35CDB4BAD65EE33938E5AFFE07E07
SHA-512:	25ED33C83579D767F5815375AA6FD458CD7451D4206B1C92C5B0BFAEB118F44E15071C7683918799780D3843808BA76C4D9FF31F495F9635BE9DE10627A77B68
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1835238272.31026793.2083251134.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2769196672.30880143.2058172033.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\QGL92SEJ.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	183
Entropy (8bit):	4.196364963808693
Encrypted:	false
SSDEEP:	3:qPCNOIdT0vQicTEKSVuQCXOLvUy6vNBK0jLOhwBTU0vQicTEKSVtVXhSVQQV3Tl3:HvdT0vt+EKSV9CXa6S0jIwlFvt+EKSVM
MD5:	D61047AFB98A6A2874C05DF1E58EB44B
SHA1:	8B2F53E5D5CC930F52D2515107FB603576DD00A2
SHA-256:	B5ADD939851859E30A19C6A4AFB8ADFA28C2ACA8DBF545C7B678D2F4B7161025
SHA-512:	A2AC16760669CA12693FE36401AF7C2E5B9523AFE262AA62024590FDB75608705B8784CC4B8FA75516C24B854CD7E301C6648907675E85E4DCC16DB4FB6DF0B1
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1725238272.31026793.1974711887.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2029196672.30880143.1320446738.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\QYK7T31P.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.259291175187547
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVnCrcoVg0jIwlFvt+EKSVtSBwmS6VH/m+EKSVtQ4rIH1+EKSVtcgu:Higqk04FgqtfrSm+qtQ4rO+qttA
MD5:	17B7DEC9675A60401A5180A7E12EC829
SHA1:	A5C1EDBC5F8285C3EEB0E1535D701853596A74F7
SHA-256:	BC7AC4CABF9D96B4BB5689AB7D88E11B063A4FD4A478BBF78D73DA4E560CF63C
SHA-512:	8AB77F503E8306DC01F3B551AF669375476E2C7AFDD7FB9DFA328BFF97DFF1813A8FC73EB917B9954293E02DC9D6E4BEE2F2F274FD63342202B2EE68CB91FB98
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1815238272.31026793.2058172033.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2769196672.30880143.2058172033.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\RWRDSMGU.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.259917336872367
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVt14Xc1O49VQg0jIwlFvt+EKSVo+SOV66/m+EKSVtQ4rIH1+EKSVY:Higqt14XVS4FgqGO7m+qtQ4rO+qttA
MD5:	9B6D31C20DCCD18CF613BCFA9E39EC40
SHA1:	072D5BDCA92C4D606F1587E5918D0746695B614F
SHA-256:	B5AAFA852999830F5D2AD91205646953CD30C6CC0B5DB640B603053C4A752C46
SHA-512:	D7B565B329A81DD8A40F3CE8433133FAD0B2B1A11A51D6BB3CF69D3AC0E0A382E334F87967070C48F290543170CAAFAF75B220E6E08EDDF9C72A9DA75EAE79EB
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.2225238272.31026793.2468326105.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.3129196672.30880143.2420026850.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\U2PP9MVW.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	264
Entropy (8bit):	4.256502823030632
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVnCrcpg0jIwlFvt+EKSVtSBwmSDH/m+EKSVtQ4rI1:Higqk/4Fgqtfrjm+qtQ4rc
MD5:	CF2A457DA1F77052B1CDF74E0611A723
SHA1:	5281871C914C9BF08886AC4E040A33BF76512EC0
SHA-256:	5BE4D092F0DE78183BECF29295A120F57D19D9BC984177FBDDE4EF5658142900
SHA-512:	9CD612E75DB2619BC79AC61BE6F820423CF8B5940B984F170D07D606A5E0EA5A85D25E0C5B75C36F8B361DF92C48E254F707C63B24933D055D03ABDA2392551F
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.1815238272.31026793.2058016033.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2769196672.30880143.2058016033.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.*.

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\UZ55A8I8.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.257514290227723
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVtUCXcWEMj0jIwlFvt+EKSVtSrM6/m+EKSVtQ4rIH1+EKSVtcgX1A:HigqtUCXEi4Fgq8rDm+qtQ4rO+qttA
MD5:	23247822F225B4E91B08C433FA4EFE8C
SHA1:	8822FC7DC7D4850906058149AA42AD32C9D1810F
SHA-256:	71CAA681E62B1E1826C3264E37EE01D51AD3CF373536A1766D912F939CBCCF07
SHA-512:	3430A81498CFFEA58232CBA96C026F7CE46F6653607BEA5058F79D640937D966A51DD0D8154BFECB7F5D3C4351F6C9D24F3699A693D195DB92E958794F08DA46
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.2125238272.31026793.2376714666.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.3079196672.30880143.2376714666.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\WWM5HRIM.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.258173408170806
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVtUvXcxap0jIwlFvt+EKSVo+SOV66/m+EKSVtQ4rIH1+EKSVtcgX+:HigqtUPJ4FgqGO7m+qtQ4rO+qttA
MD5:	DA1904EE99AABB2DF16826CB63B5E419
SHA1:	DF49CDB95CDDAB4D341DCAA62F67CCA64B0D3B26
SHA-256:	15EED974907050509A5F1F567DC81019FDCADD80CD292858BA3436462A622D4A
SHA-512:	293F5B56E8A0902089D2C518673B7CCD57E1A4034B0D7213511045EA90EAC0651BA0AB55177B501DF582BEFD7F31BA1B735CDB8739125A2107FB6E9C107FD200
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.2175238272.31026793.2420001849.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.3129196672.30880143.2420026850.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Cookies\XIKWRY8N.txt Download File
Process:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	330
Entropy (8bit):	4.274339943735014
Encrypted:	false
SSDEEP:	6:HvdT0vt+EKSVtUCXcWEMj0jIwlFvt+EKSVtc6U/SlH/m+EKSVtQ4rIH1+EKSVtcL:HigqtUCXEi4Fgqtc/KVm+qtQ4rO+qttA
MD5:	A4FB242F0DE1F558B619640A559A67ED
SHA1:	1C36501E249696A902483231B4E4BA4BBC7A86E3
SHA-256:	BB9D53DBC7A27926823236C3962D27CDFA355E1A5DCFEF34188DE0E37004BEC2
SHA-512:	CA9201605CA489F310D839EB25D6DE0BF3A55A496D20631CB8C56E168610850E1FAA3CAA180099BD617B3DA51D49AE3E8C7725AF30DBE6253B980306269ACEBC
Malicious:	false
Preview:	_ga.GA1.2.1112795109.1618360631.ontario.ca/.1600.2125238272.31026793.2376714666.30879942.._gid.GA1.2.1295438597.1618360631.ontario.ca/.1600.2949196672.30880143.2245758461.30879942.._gat_UA-21003310-20.1.ontario.ca/.1600.2567623168.30879942.1974867887.30879942.._gat.1.ontario.ca/.1600.2657623168.30879942.2060824038.30879942..

C:\Users\user\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\53CZ0ZKKP2W6010M4BCE.temp Download File
Process:	C:\Program Files\Internet Explorer\iexplore.exe
File Type:	data
Category:	dropped
Size (bytes):	5026
Entropy (8bit):	3.103390629387365
Encrypted:	false
SSDEEP:	48:0dmnvZYdIr9GroIGASyxndmnvZYdIE683GroIakxEdmnvZYdI89GroI3ixL:VvZ6o9S7PxIvZ6R3SVxlvZ6P9SSxL
MD5:	86DF9A3229847A7C657518ED1C55660C
SHA1:	CCE31F3A629257BD928BFB37663C90C6D8A8415D
SHA-256:	59F6D851E601E44BC46D7D02271C9DCB3B897F312634BCB6379D72D957A58988
SHA-512:	F9009A409F40E793329E38AEE0DB0DE497400D955207002D53785BDF36CA04C7012724DEFB9BA4B8E4171E547957D94BD2FB87D7344D58EFFDDB960BD4AF8449
Malicious:	false
Preview:	...................................FL..................F.@ . ....b.$....b.$....b.$....l...........................P.O. .:i.....+00.../C:\.....................1.....~Jav..PROGRA~1..p.......:..~Jav...<...............F.....P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....h.1.....wJ.~..INTERN~1..P.......:..wJ.~.........................I.n.t.e.r.n.e.t. .E.x.p.l.o.r.e.r.....b.2..l..wJD~ .iexplore.exe..F......wJD~wJD~*....H....................i.e.x.p.l.o.r.e...e.x.e.......^...............-.......]............!4......C:\Program Files\Internet Explorer\iexplore.exe....-.p.r.i.v.a.t.e...C.:.\.W.i.n.d.o.w.s.\.s.y.s.t.e.m.3.2.\.I.E.F.R.A.M.E...d.l.l.........%SystemRoot%\system32\IEFRAME.dll...................................................................................................................................................................................................................................%.S.y.s.t.e.m.R.o.o.t.%.\.s.y.s.t.e.m.3.2.\.I.E.F.R.A.M.E

C:\Users\user\Desktop\~$VID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx Download File
Process:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
File Type:	data
Category:	dropped
Size (bytes):	162
Entropy (8bit):	2.431160061181642
Encrypted:	false
SSDEEP:	3:vrJlaCkWtVyokKOg5Gll3GwSKG/f2+1/ln:vdsCkWtW2IlID9l
MD5:	39EB3053A717C25AF84D576F6B2EBDD2
SHA1:	F6157079187E865C1BAADCC2014EF58440D449CA
SHA-256:	CD95C0EA3CEAEC724B510D6F8F43449B26DF97822F25BDA3316F5EAC3541E54A
SHA-512:	5AA3D344F90844D83477E94E0D0E0F3C96324D8C255C643D1A67FA2BB9EEBDF4F6A7447918F371844FCEDFCD6BBAAA4868FC022FDB666E62EB2D1BAB9028919C
Malicious:	false
Preview:	.user..................................................A.l.b.u.s.............p.........w...............w.............P.w..............w.....z.........w.....x...

Static File Info

General
File type:	Microsoft Word 2007+
Entropy (8bit):	7.746354233936926
TrID:	Word Microsoft Office Open XML Format document (49504/1) 49.01% Word Microsoft Office Open XML Format document (43504/1) 43.07% ZIP compressed archive (8000/1) 7.92%
File name:	COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx
File size:	56869
MD5:	14d9efc0e6bd70f11db15709caffe72f
SHA1:	a9d37cf22facbe7ceda7dec88b983b5092597b5f
SHA256:	cbf87430a5ac83f27e1152f1cbe3b867400ccc68895c9a596697e8e64196c0ef
SHA512:	88f2f4db40640edcafe6f0bd172045a07cdfd03d575cf46e2a19e07c0506c2d26a9bdf112f8441b1b2f3b2332c350aa51bea2adc648e477340d2c2cd11d2200f
SSDEEP:	1536:7QVomU8A9ppjEmIohQbXbmr22FKBLiJkA:7Q7UFpJhCXaKBOyA
File Content Preview:	PK..........!..9r=....\.......[Content_Types].xml ...(.........................................................................................................................................................................................................

File Icon


Icon Hash:	e4e6a2a2a4b4b4a4

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 13, 2021 17:37:28.675700903 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:28.675729036 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:28.721920013 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:28.722011089 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:28.722209930 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:28.722273111 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:28.732255936 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:28.734021902 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:28.779342890 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:28.780551910 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:28.785106897 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:28.785135984 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:28.785151005 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:28.785181999 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:28.785187960 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:28.785211086 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:28.785224915 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:28.785233974 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:28.785253048 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:28.785275936 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:28.785310984 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:28.787437916 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:28.787508965 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:28.788871050 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:28.788942099 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:29.013139963 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:29.057571888 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:29.058262110 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:29.058320999 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:29.225094080 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:29.270390987 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:29.270466089 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:29.270632029 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.240710020 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.285125017 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.287348032 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.287430048 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.287692070 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.287734985 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.287754059 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.287770033 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.287776947 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.287816048 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.287827015 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.287869930 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.288978100 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.289028883 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.289028883 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.289067984 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.290196896 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.290240049 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.290268898 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.290302038 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.291449070 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.291486979 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.291501045 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.291523933 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.292660952 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.292751074 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.292794943 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.292808056 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.292849064 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.293915987 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.293950081 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.293962002 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.293989897 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.371340990 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.372037888 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.372901917 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.373473883 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.374049902 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.374774933 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.417599916 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.418087959 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.419528961 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.419672966 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.420114040 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.420198917 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.420238972 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.420258045 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.420995951 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.421057940 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.421084881 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.421118021 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.421169043 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.421226025 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.421241999 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.421281099 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.423657894 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.423753977 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.425187111 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.426290035 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.442434072 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.442466974 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.442559958 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.442950964 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.442975998 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.443017960 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.443461895 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.444190025 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.444216967 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.444267988 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.444382906 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.444386959 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.444593906 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.449796915 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.450033903 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.470386028 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.471132994 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.473654032 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.473743916 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.473807096 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.473829031 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.473850965 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.473870993 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.473893881 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.474061966 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.474109888 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.476444960 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.476855040 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.476908922 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.483850956 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.489046097 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.489190102 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.491700888 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.491729021 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.491740942 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.491802931 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.492919922 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.492945910 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.492957115 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.492983103 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.493005037 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.494316101 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.495132923 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.495210886 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.496015072 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.496412992 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.496481895 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.499644041 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.499675035 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.499686956 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.499746084 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.502405882 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.502469063 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.502479076 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.502901077 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.502952099 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.507028103 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.515602112 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.522685051 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.523735046 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.523823023 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.525485992 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.528430939 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.528434038 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.529305935 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.529408932 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.551856995 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.552346945 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.552468061 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.560487986 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.561439037 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.561547041 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.568891048 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.570503950 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.570595026 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.571825981 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.571909904 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.572298050 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.572352886 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.574604034 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.574645042 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.574690104 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.576416969 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.719913006 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.721966028 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.723826885 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.771106958 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.809309006 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.818197012 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.820264101 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.821751118 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.823580980 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.863123894 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.865019083 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.866024971 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.866236925 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.866286039 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.866334915 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.866380930 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.866480112 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.867425919 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.867471933 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.867500067 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.867645979 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.867723942 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.867775917 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.867997885 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.868002892 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.868736982 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.868808031 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.868932009 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.869678020 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.869971037 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.870049000 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.870345116 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.871273041 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.871349096 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.871597052 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.872499943 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.872575998 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.872931004 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.873929024 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.873960018 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.874032974 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.874349117 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.874988079 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.875020981 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.875386000 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.876281023 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.876332998 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.876908064 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.877532005 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.877582073 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.878026009 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.878786087 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.878815889 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.879055023 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.880012989 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.880033016 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.880067110 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.881030083 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.881314993 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.881351948 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.882036924 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.882525921 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.883019924 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.889401913 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.902836084 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.903085947 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.903103113 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.903146982 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.904020071 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.904160976 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.904210091 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.905014038 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.905437946 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.905478954 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.906021118 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.906624079 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.906666994 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.907016039 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.907871962 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.907948017 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.908018112 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.909091949 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.909246922 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.909306049 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.909368992 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.909451962 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.909492016 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.909528971 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.909945965 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.909986019 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.910516977 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.910558939 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.911051035 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.911782026 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.911824942 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.912013054 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.912537098 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.912578106 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.912805080 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.912986994 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.913022995 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.913150072 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.913151979 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.913199902 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.913755894 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.914458036 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.914844990 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.915059090 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.915101051 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.915263891 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.916193962 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.916364908 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.916438103 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.917030096 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.917558908 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.917617083 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.918041945 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.918797016 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.918853045 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.919023037 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.920095921 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.920169115 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.921045065 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.921314001 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.921375036 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.922043085 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.922594070 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.922648907 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.923022032 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.923851013 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.923914909 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.924021006 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.925107956 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.925169945 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.926024914 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.926170111 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.926362991 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.926425934 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.927036047 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.927639008 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.927691936 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.928203106 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.928884983 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.928940058 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.929040909 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.930145979 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.930210114 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.930373907 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.931413889 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.931478024 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.932044983 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.932636976 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.932694912 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.933047056 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.933928013 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.933989048 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.934041977 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.935029030 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.935161114 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.935221910 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.935873985 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.936342955 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.936407089 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.936467886 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.937030077 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.937694073 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.937752008 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.938067913 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.938512087 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.938565969 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.938905954 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.938957930 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.939109087 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.939131021 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.940198898 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.940253973 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.941029072 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.959793091 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.959858894 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.960059881 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.960299015 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.960355043 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.961035013 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.961487055 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.961549997 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.962054014 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.962604046 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.962656975 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.963052988 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.963701010 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.963756084 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.964026928 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.964828968 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.964884043 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.965001106 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.965933084 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.965991020 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.966037035 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.967039108 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.967896938 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.967945099 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.968028069 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.973082066 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.975135088 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.976042986 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.996413946 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.996483088 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.996942043 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.996999979 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.997085094 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.997611046 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.998193979 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.998250008 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.999069929 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:33.999437094 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.999494076 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:33.999795914 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.000684023 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.000742912 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.001063108 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.001965046 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.002027035 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.002389908 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.003032923 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.009110928 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.009285927 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.009329081 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.009365082 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.009433031 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.010072947 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.010602951 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.010647058 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.011071920 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.011887074 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.011935949 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.011966944 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.012038946 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.013210058 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.013248920 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.013359070 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.014556885 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.014604092 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.015069008 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.015747070 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.015793085 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.016042948 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.047208071 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.047239065 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.047451019 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.047472000 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.048082113 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.048166037 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.048190117 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.048814058 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.048836946 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.049056053 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.049535990 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.049566031 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.050045967 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.050184011 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.050205946 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.050885916 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.050910950 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.051038980 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.051577091 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.051599026 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.051732063 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.052283049 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.052321911 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.052393913 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.052927971 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.052961111 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.053114891 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.053612947 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.053641081 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.053946972 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.054311037 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.054332018 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.054394960 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.054991007 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.055013895 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.055674076 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.055696011 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.056066036 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.056358099 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.056381941 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.057039976 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.057045937 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.057079077 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.057740927 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.057773113 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.058049917 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.058440924 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.058470011 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.059077024 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.059122086 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.059165955 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.059823990 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.059861898 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.059864044 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.059885979 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.059928894 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.060513973 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.060549021 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.061023951 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.061193943 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.061228037 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.061496973 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.061862946 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.061892986 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.062030077 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.062576056 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.062608004 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.063009977 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.063226938 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.063256979 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.063934088 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.063977003 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.064054012 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.064626932 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.064661026 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.065053940 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.065293074 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.065325975 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.065560102 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.065989971 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.066020966 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.066087961 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.066112041 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.066695929 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.066730022 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.066767931 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.066793919 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.067373991 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.067416906 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.068051100 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.068053007 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.068094015 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.068808079 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.068852901 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.069076061 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.069492102 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.069571018 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.069593906 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.070065022 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.070142031 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.070194960 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.070837975 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.070877075 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.071069002 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.071491003 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.071533918 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.071722984 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.072249889 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.072295904 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.072592020 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.072839975 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.072885036 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.073066950 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.073549986 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.073594093 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.074048042 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.074210882 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.074259996 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.074891090 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.074932098 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.075052977 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.075587988 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.075630903 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.076047897 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.076260090 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.076298952 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.076984882 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.077028990 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.077056885 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.077784061 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.077862978 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.078052044 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.078358889 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.078406096 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.079036951 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.079081059 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.079081059 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.079230070 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.079715014 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.079756975 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.080080986 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.080384970 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.080425024 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.081059933 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.081079006 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.081124067 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.081783056 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.081834078 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.082053900 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.082474947 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.082540989 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.083054066 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.083158016 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.083198071 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.083837986 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.083899021 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.084050894 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.084501028 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.084551096 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.085055113 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.085189104 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.085226059 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.086052895 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.093002081 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.093060017 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.093226910 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.093285084 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.093980074 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.094019890 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.094055891 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.094790936 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.094857931 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.095072031 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.095309973 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.095350027 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.095645905 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.095997095 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.096026897 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.096669912 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.096704960 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.097055912 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.097362041 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.097430944 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.098009109 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.098033905 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.098071098 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.098196983 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.098704100 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.098747969 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.098839045 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.098954916 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.099440098 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.099512100 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.100117922 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.100128889 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.100172043 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.100723028 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.100791931 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.100828886 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.101073980 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.101500988 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.101546049 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.101891041 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.102230072 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.102271080 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.102458000 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.102911949 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.102957010 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.103038073 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.103538036 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.103574038 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.103790045 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.104209900 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.104248047 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.104899883 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.104937077 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.104967117 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.105115891 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.105614901 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.105654001 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.106079102 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.106277943 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.106318951 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.106969118 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.107003927 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.107075930 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.107676983 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.107717991 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.108057976 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.108344078 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.108381987 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.109011889 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.109050989 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.109090090 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.109750032 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.109791040 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.110078096 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.110399008 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.110443115 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.110908031 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.111083984 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.111126900 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.111162901 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.111186981 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.111762047 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.111809969 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.112070084 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.112464905 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.112504959 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.113085985 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.113127947 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.113178015 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.114083052 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.114980936 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.115021944 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.115385056 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.185280085 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.200563908 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.229768038 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.231388092 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.231576920 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.231611967 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.232104063 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.246541023 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.246598959 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.246646881 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.246689081 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.246717930 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.246756077 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.246793032 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.246829987 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.246869087 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.246906996 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.246953011 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.246994972 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.247214079 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.247472048 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.247708082 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.247760057 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.247800112 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.247843981 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.247894049 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.247944117 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.247973919 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.248096943 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.248716116 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.248759985 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.248794079 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.248828888 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.248862982 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.248908997 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.248946905 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.249094963 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.249645948 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.249691963 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.249731064 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.250042915 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.250078917 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.250091076 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.250113964 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.250148058 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.250190020 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.250228882 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.250262976 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.250947952 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.251036882 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.251072884 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.251081944 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.251120090 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.251153946 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.251189947 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.251224041 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.251256943 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.252043962 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.252082109 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.252094030 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.252126932 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.252167940 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.252202988 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.252244949 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.252295971 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.252429962 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.252454996 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.252985001 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.253021955 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.253057003 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.253078938 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.253438950 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.253479958 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.253515005 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.253551006 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.253585100 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.253628016 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.253667116 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.254067898 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.254405022 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.254451990 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.254488945 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.254523039 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.254556894 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.254592896 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.254626989 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.255069971 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.255359888 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.255398989 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.255431890 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.255465984 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.255500078 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.255542040 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.255580902 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.256078959 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.256337881 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.256383896 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.256422043 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.256763935 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.256803989 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.256839037 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.256875038 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.256908894 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.256942987 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.256977081 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.257077932 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.257750988 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.257787943 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.257823944 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.257858038 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.257901907 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.257941008 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.257975101 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.258091927 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.258742094 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.258780956 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.258815050 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.258862972 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.258894920 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.258924961 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.258958101 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.259077072 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.259694099 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.259728909 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.259762049 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.260067940 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.260086060 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.260118961 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.260153055 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.260186911 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.260217905 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.260248899 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.260279894 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.260591030 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.261074066 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.261076927 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.261110067 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.261151075 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.261185884 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.261218071 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.261250973 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.261282921 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.262068987 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.262073040 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.262110949 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.262146950 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.262176991 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.262209892 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.262242079 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.262274027 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.263027906 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.263061047 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.263079882 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.263092995 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.263464928 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.263505936 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.263544083 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.263576984 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.263607979 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.263639927 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.263669968 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.263984919 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.264467001 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.264506102 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.264537096 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.264554024 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.264568090 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.264579058 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.264616013 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.264647961 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.264682055 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.265089035 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.265511990 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.265572071 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.265609980 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.265655041 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.265700102 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.265741110 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.265780926 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.266168118 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.266377926 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.266412973 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.266458035 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.266787052 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.266820908 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.266853094 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.266892910 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.266928911 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.266962051 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.266972065 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.266993999 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.267030954 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.267070055 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.292072058 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.292099953 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.292112112 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.292125940 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.292138100 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.292150021 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.292160034 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.293123960 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.295670033 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.295691013 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.295701027 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.296111107 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.297112942 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297130108 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297149897 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297168016 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297188044 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297204971 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297221899 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297564030 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297578096 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297797918 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297816992 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297833920 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297849894 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297866106 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297882080 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297900915 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.297936916 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.298095942 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.298789024 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.298804998 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.298820972 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.298840046 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.298855066 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.298871040 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.298887014 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.299092054 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.299833059 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.299854994 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.299875975 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.299901962 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.299925089 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.299945116 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.299966097 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.300091982 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.300731897 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.300751925 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.300775051 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.301086903 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.305310011 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.305337906 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.305355072 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.305371046 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.305398941 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.305444956 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.305480003 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.305747986 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.305768967 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.305790901 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.305811882 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.305834055 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.305854082 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.305876970 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.306137085 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.306725979 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.306754112 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.306771040 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.306787968 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.306823969 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.306854010 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.306879997 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.307111025 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.307753086 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.307775021 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.307790041 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.308101892 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.308108091 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.308132887 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.308154106 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.308173895 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.308193922 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.308219910 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.308243036 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.309094906 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.309101105 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.309123993 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.309149027 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.309180975 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.309210062 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.309236050 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.309262991 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.310100079 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.310102940 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.310138941 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.310168982 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.310194016 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.310220003 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.310245037 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.310271025 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.311033964 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.311063051 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.311088085 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.311106920 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.311470985 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.311499119 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.311523914 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.311557055 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.311585903 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.311620951 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.311652899 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.312103033 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.312477112 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.312506914 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.312532902 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.312560081 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.312586069 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.312612057 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.312637091 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.313102007 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.313424110 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.313452959 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.313478947 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.313504934 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.313536882 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.313565016 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.313590050 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.314133883 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.314384937 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.314414978 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.314440012 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.314826012 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.314853907 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.314879894 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.314910889 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.314939976 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.314965963 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.314991951 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.315098047 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.315962076 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.315989017 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.316015959 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.316040993 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.316066027 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.316090107 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:37:34.316097021 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:34.317097902 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:37:37.464236975 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.614973068 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.615268946 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.615581989 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.615756989 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.616003036 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.616251945 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.616920948 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.617444038 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.659912109 CEST	443	49165	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.659995079 CEST	443	49173	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.660089016 CEST	49165	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.660135984 CEST	49173	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.660948038 CEST	443	49171	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.661377907 CEST	49171	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.662440062 CEST	443	49174	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.662461996 CEST	443	49172	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.662925959 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.662938118 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.662950993 CEST	443	49166	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.663072109 CEST	49174	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.663098097 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.663119078 CEST	49172	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.663121939 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.663214922 CEST	49166	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.663990021 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.664257050 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.709635019 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.710091114 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.712127924 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.712157011 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.712182999 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.712330103 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.712357998 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.713320971 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.713351965 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.713377953 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.713486910 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.713510990 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.716222048 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.716415882 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.716419935 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.716542006 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.725212097 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.727857113 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.773333073 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.773937941 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.776156902 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.776269913 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.776724100 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.776784897 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.780122995 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:48.827626944 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.841614962 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:48.842863083 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:51.098959923 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.099391937 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.145694971 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.145740032 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.145878077 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.145884991 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.146836042 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.146866083 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.193092108 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.193219900 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.196115971 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.196141958 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.196154118 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.196228027 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.196674109 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.196693897 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.196707010 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.196820974 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.199331999 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.199425936 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.201241016 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.201395988 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.212829113 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.215492010 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.259574890 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.260190010 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.260272026 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.262061119 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.262620926 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.262681007 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.264442921 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.309269905 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.310614109 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.310687065 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.310751915 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.310779095 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.310802937 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.310826063 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.310847998 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.319428921 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.319628000 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.320446968 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.364197016 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.364214897 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.365133047 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.365237951 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.367438078 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.367463112 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.367564917 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.380503893 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.380608082 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.398197889 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.398468018 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.401174068 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.425586939 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.425654888 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.425729036 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.425772905 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.425789118 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.425828934 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.425851107 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.426069975 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.426130056 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.428680897 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.428761959 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.443198919 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.443236113 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.443382025 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.444696903 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.444742918 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.444761038 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.444777012 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.444782972 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.444818974 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.445799112 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.445842028 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.445843935 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.445875883 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.445997953 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.446062088 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.447134018 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.447174072 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.447177887 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.447208881 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.448460102 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.448502064 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.448502064 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.448548079 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.449781895 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.449824095 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.449836016 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.449860096 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.451057911 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.451101065 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.451113939 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.451134920 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.452363968 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.452406883 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.452419996 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.452441931 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.468828917 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.468955040 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.473419905 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.480932951 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.482144117 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.482517004 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.482732058 CEST	49195	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.482795000 CEST	49196	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.483092070 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.483098030 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.515782118 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.516736031 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.516777992 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.516814947 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.516845942 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.516912937 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.519964933 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.519992113 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.521601915 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.521836996 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.521857977 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.521930933 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.523453951 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.524007082 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.524075985 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.526453018 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.526469946 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.527255058 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.527273893 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.527359009 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.527365923 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.527399063 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.527837038 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.527854919 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.527868032 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.527879953 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.527941942 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.527983904 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.530579090 CEST	443	49195	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.530602932 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.530673981 CEST	49195	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.530726910 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.531416893 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.531438112 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.531450987 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.531486988 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.531507969 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.532720089 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.532751083 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.532788038 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.532802105 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.533061028 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.534058094 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.534087896 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.534125090 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.535032034 CEST	443	49196	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.535058975 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.535106897 CEST	49196	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.535134077 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.535348892 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.535375118 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.535389900 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.535418034 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.535729885 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.536736012 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.536765099 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.536773920 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.536801100 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.537614107 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.539510012 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.539608955 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.543407917 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.544208050 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.544411898 CEST	49195	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.544918060 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.544990063 CEST	49196	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.546276093 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.560854912 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.577658892 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.580503941 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.580523968 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.580540895 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.580557108 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.580588102 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.580627918 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.581444025 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.581520081 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.584839106 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.584927082 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.588756084 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.589123964 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.590286016 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.590301991 CEST	443	49195	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.590358019 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.591042995 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.592022896 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.592045069 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.592062950 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.592082024 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.592116117 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.593347073 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.593362093 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.593414068 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.593540907 CEST	443	49195	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.593559027 CEST	443	49195	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.593576908 CEST	443	49195	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.593597889 CEST	49195	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.593626976 CEST	49195	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.596016884 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.596858978 CEST	443	49196	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.597486973 CEST	443	49195	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.597559929 CEST	49195	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.598547935 CEST	443	49196	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.598572016 CEST	443	49196	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.598619938 CEST	49196	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.599019051 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.599097013 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.599118948 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.599154949 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.599184036 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.600441933 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.601412058 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.605506897 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.608021975 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.608091116 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.609576941 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.615813017 CEST	49195	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.624368906 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.631165981 CEST	49196	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.632633924 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.632663012 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.632678032 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.632698059 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.632720947 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.632752895 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.632874966 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.632905960 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.632919073 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.633910894 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.633933067 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.633955002 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.633977890 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.635157108 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.635176897 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.635206938 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.635226011 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.636439085 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.636459112 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.636493921 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.637670040 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.637693882 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.637707949 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.637710094 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.637726068 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.637732983 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.638902903 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.638931036 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.638951063 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.638961077 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.638974905 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.638989925 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.639183044 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.639231920 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.640008926 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.640075922 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.640176058 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.640201092 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.640224934 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.640243053 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.641455889 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.641479969 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.641535997 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.641558886 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.642702103 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.642721891 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.642755032 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.642781019 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.643964052 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.643990040 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.644023895 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.644041061 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.644630909 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.645195961 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.645215988 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.645256996 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.645283937 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.646106958 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.646127939 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.646178961 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.646240950 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.646308899 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.646430016 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.646450043 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.646480083 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.646497011 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.646508932 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.646528006 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.646545887 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.646560907 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.647584915 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.647603989 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.647630930 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.647644043 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.647682905 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.647700071 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.647727013 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.647758007 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.648508072 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.648891926 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.648910046 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.648926973 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.648936987 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.648962975 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.650212049 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.650233984 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.650249004 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.650263071 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.650278091 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.652007103 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.652079105 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.652301073 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.652334929 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.652363062 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.652390957 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.657443047 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.658348083 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.659382105 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.661732912 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.662468910 CEST	443	49195	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.662488937 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.662540913 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.664026976 CEST	443	49195	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.664122105 CEST	49195	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.669059038 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.670521975 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.670587063 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.670610905 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.670625925 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.670627117 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.670660019 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.677607059 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.677640915 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.677673101 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.677704096 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.678158998 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.678191900 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.678226948 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.679414034 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.679445028 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.679461956 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.679488897 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.679498911 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.679697990 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.680650949 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.680712938 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.681721926 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.681787014 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.681910038 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.681936979 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.681957006 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.681972027 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.682842970 CEST	443	49196	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.683156013 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.683176994 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.683202982 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.683217049 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.684406996 CEST	443	49196	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.684436083 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.684467077 CEST	49196	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.684525013 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.684529066 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.684565067 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.685697079 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.685723066 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.685837984 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.686964035 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.686990976 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.687041998 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.687062025 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.687064886 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.688150883 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.688460112 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.688528061 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.688813925 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.688838005 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.688872099 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.689028025 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.690073013 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.690089941 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.690104961 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.690130949 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.690145016 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.691379070 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.691405058 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.691442013 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.691472054 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.691488028 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.691509008 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.691525936 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.691551924 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.692643881 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.692670107 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.692694902 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.692708969 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.693845034 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.693870068 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.693902969 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.693912029 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.694013119 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.695112944 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.695138931 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.695205927 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.696377993 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.696407080 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.696454048 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.696479082 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.697606087 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.697633028 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.697659969 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.697683096 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.698874950 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.698899984 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.698926926 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.698945999 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.700170040 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.700196028 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.700221062 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.700237989 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.701371908 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.701417923 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.701426983 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.701453924 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.702267885 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.702647924 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.702670097 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.702709913 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.702725887 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.703879118 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.703898907 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.703953981 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.704030037 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.704045057 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.704076052 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.704123974 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.704178095 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.704191923 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.704206944 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.704221964 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.704241991 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.704257965 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.704369068 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.704386950 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.704412937 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.704427958 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.704874039 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.704921007 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.705156088 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.705172062 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.705199003 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.705198050 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.705213070 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:38:51.705214977 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.705240011 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.705259085 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:38:51.705667973 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.705688953 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.705712080 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.705728054 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.707103968 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.707196951 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.718658924 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.722577095 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.722604990 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.722682953 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.723011017 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.723028898 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.723073006 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.724165916 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.724184036 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.724246979 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.725176096 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.725425959 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.725442886 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.725490093 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.725517035 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.726639986 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.726660967 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.726718903 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.727020025 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.727096081 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.727859020 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.727881908 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.727896929 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.727957010 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.727963924 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.727976084 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.729183912 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.729202986 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.729257107 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.729271889 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.730895042 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.730995893 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.731077909 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.731096983 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.732878923 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.732956886 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.733036995 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.733066082 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.733334064 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.733432055 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.733455896 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.733666897 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.735320091 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.736242056 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.736274004 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.736295938 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.736316919 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.736336946 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.736358881 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.736434937 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.736462116 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.737286091 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.737318039 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.737407923 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.738260984 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.738291025 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.738329887 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.738354921 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.739316940 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.739357948 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.739432096 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.740255117 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.740293980 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.740597010 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.741143942 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.741226912 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.741266966 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.741312027 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.741332054 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.742208004 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.742250919 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.742316961 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.749315977 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.749351978 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.749378920 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.749428034 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.749435902 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.749452114 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.749475002 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.749500990 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.749502897 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.749536991 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.749542952 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.749583006 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.750571966 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.750598907 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.750662088 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.751753092 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.751789093 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.751854897 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.752262115 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.753356934 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.753395081 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.753454924 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.753572941 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.754086971 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.754111052 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.754143000 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.754163027 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.755291939 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.755367041 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.756475925 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.756500006 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.756513119 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.756555080 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.756572962 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.757646084 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.757669926 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.757709026 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.758866072 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.758888960 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.758939028 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.760191917 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.760276079 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.760315895 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.760364056 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.760994911 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.761395931 CEST	443	49197	104.16.19.94	192.168.2.22
Apr 13, 2021 17:38:51.761465073 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.763341904 CEST	49197	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:38:51.765801907 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.765826941 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.765846968 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.765899897 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.767045975 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.767066002 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.767086983 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.767107964 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.768326998 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.768348932 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.768404007 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.772629976 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.775895119 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.807965994 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.808003902 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.808037043 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.808165073 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.808516026 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.808545113 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.808579922 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.808594942 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.809792042 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.809825897 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.809859037 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.809874058 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.811048031 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.811080933 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.811096907 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.811116934 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.812289000 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.812320948 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.812355995 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.812372923 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.813545942 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.813580036 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.813626051 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.813703060 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.814801931 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.814824104 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.814858913 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.814994097 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.820851088 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.820890903 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.820911884 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.820976973 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.821007967 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.822050095 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.822082996 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.822135925 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.822475910 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.823276997 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.823308945 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.823329926 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.823374987 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.823375940 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.823398113 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.823422909 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.824593067 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.824631929 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.824675083 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.824697018 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.825830936 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.825864077 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.825906992 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.825928926 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.827091932 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.827126026 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.827147961 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.827179909 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.828360081 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.828393936 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.828460932 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.829626083 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.829659939 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.829715967 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.831365108 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.831403971 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.831501961 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.831953049 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.831980944 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.832012892 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.832046032 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.833337069 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.833370924 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.833410978 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.833439112 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.834630013 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.834661961 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.834691048 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.834738016 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.836019993 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.836081982 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.836113930 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.836137056 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.837328911 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.837412119 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.837418079 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.837472916 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.838584900 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.838638067 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.838661909 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.838709116 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.839967012 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.840032101 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.840045929 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.840084076 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.841247082 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.841296911 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.841393948 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.842536926 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.842575073 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.842602015 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.842617035 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.843813896 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.843847990 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.843878984 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.843899965 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.845105886 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.845124006 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.845181942 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.845205069 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.846431971 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.846473932 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.846497059 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.846512079 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.847757101 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.847790956 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.847816944 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.847830057 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.849065065 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.849112034 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.849132061 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.849148035 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.850361109 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.850415945 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.850450039 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.850462914 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.920958042 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.921140909 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.921221018 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.921255112 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.921502113 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.921549082 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.921629906 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.922840118 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.922962904 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.923002958 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.923058987 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.924195051 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:51.924307108 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.975073099 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.976819992 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:51.980457067 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.021637917 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.067079067 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.081542015 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.176979065 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.277311087 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.396625042 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.396656990 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.396719933 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.397113085 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.397138119 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.397161007 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.397192001 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.398402929 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.398431063 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.398471117 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.399400949 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.399425983 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.399480104 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.399648905 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.399667978 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.399702072 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.400027990 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.400049925 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.400083065 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.400096893 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.400918007 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.400988102 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.401016951 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.401187897 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.401346922 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.401422024 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.401477098 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.402184010 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.402205944 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.402244091 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.402684927 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.402714968 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.402766943 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.403501034 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.403527021 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.403580904 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.403974056 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.404001951 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.404021978 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.404057980 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.404141903 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.404166937 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.404202938 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.404211044 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.404870987 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.405335903 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.405363083 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.405421019 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.405426979 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.405450106 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.405455112 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.405476093 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.405488014 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.406812906 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.406836987 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.406896114 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.408042908 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.408068895 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.408092976 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.408107996 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.409531116 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.409554005 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.409585953 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.409604073 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.415126085 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.460191011 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.463124037 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.463145971 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.463190079 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.468456984 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.507678986 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.507735014 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.512964964 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.515932083 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.515988111 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.516288042 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.516347885 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.539272070 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.584064960 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.616872072 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.620016098 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.621577024 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.622051954 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.666002035 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.667467117 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.669879913 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.670002937 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.670876026 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.670949936 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.675241947 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.675621986 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.675659895 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.675687075 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.678770065 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.679266930 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.679285049 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.679307938 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.679363966 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.679900885 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.679979086 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.680110931 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.680130959 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.680146933 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.680167913 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.680185080 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.680191994 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.680228949 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.680864096 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.680941105 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.681443930 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.681458950 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.681540012 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.700928926 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.759246111 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.759274006 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.759325981 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.759350061 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.759825945 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.759850979 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.759902954 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.761179924 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.761199951 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.761272907 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.761286974 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.776421070 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.863054037 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.929270029 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.929294109 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.929409027 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.929876089 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.929894924 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.929991007 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.931195021 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.931217909 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.931310892 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.932487011 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.932509899 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.932568073 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.933814049 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.933839083 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.933887959 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.935137987 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.935162067 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.935214996 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.936405897 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.936503887 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.957987070 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.958019018 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.958034992 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.958169937 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.959342003 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.959366083 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.959584951 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.960560083 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.960581064 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.960692883 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.961838007 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.961850882 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.961935997 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.963095903 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.963121891 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.963190079 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.964333057 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.964354038 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.964420080 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.965595007 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.965616941 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.965687990 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.966891050 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.966917038 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.966991901 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.968127966 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.968153000 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.968233109 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.969369888 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.969438076 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.969537973 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.969571114 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.970618963 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.970643997 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.970702887 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.971122980 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.971889019 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.971911907 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.971973896 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.973134041 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.973155975 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.973366022 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:52.974378109 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:52.974473953 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.018439054 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.018474102 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.018959045 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.018984079 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.018995047 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.019042969 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.020276070 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.020315886 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.020402908 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.021593094 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.021614075 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.021697998 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.022938013 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.022969007 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.023041964 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.024234056 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.024256945 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.024365902 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.025543928 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.025571108 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.025722027 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.026874065 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.026896954 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.027127981 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.028172970 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.028192043 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.028280020 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.029484987 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.029504061 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.029623985 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.030793905 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.030812979 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.030889988 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.032123089 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.032141924 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.032232046 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.033462048 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.033482075 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.033534050 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.034742117 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.034759998 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.034813881 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.036071062 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.036089897 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.036142111 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.037406921 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.037426949 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.037517071 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.038750887 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.038772106 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.038826942 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.040036917 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.040055037 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.040136099 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.041336060 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.043673992 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.046978951 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.046998024 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.047053099 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.047580004 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.047597885 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.047667980 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.048851967 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.048875093 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.048911095 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.048929930 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.050105095 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.050127983 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.050173044 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.051378965 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.051417112 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.051470041 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.085405111 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.130242109 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.144022942 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.144057035 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.144175053 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.144526005 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:53.144591093 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:53.770821095 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:53.816447020 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:53.963352919 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:53.964270115 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:53.970292091 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:54.015964031 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.234818935 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.234946966 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.234976053 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.235044956 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:54.236099958 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.236119032 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.237349987 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.237375021 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.237447023 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:54.238621950 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.238636971 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.239801884 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:54.239919901 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.239940882 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.240257978 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:54.241209030 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.241225958 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.241498947 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:54.242459059 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.242503881 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.242547989 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:54.242590904 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:54.243721008 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:54.246345043 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:55.372162104 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.416970968 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.569538116 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.569566965 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.569727898 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.570029974 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.570086002 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.583416939 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.585676908 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.586344957 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.588047028 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.629885912 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.632754087 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.632777929 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.634767056 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.647139072 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.649064064 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.693696976 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.738250017 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.739422083 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.740269899 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.741208076 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.741744995 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.741832972 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.742609978 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.747369051 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.747437954 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.748296022 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.785160065 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.787219048 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.793052912 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.802000999 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.802403927 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.803343058 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.830270052 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.830420017 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.831718922 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.848037004 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.876470089 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.893117905 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.895160913 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.896019936 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.897253990 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.897274017 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.897290945 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.897371054 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.897675991 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.897695065 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.897711039 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.897748947 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.897763014 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.898613930 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.898632050 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.898650885 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.898688078 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.898700953 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.899524927 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.899586916 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.903577089 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.903595924 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.903680086 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.929696083 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.930411100 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.940869093 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.976186037 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.976684093 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.983969927 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.984136105 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.985586882 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.986011982 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:55.986112118 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:55.986949921 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.032207966 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.032799959 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.081474066 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.083445072 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.084266901 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.128918886 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.134037971 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.136400938 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.137902975 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.138031960 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.139668941 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.141397953 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.182593107 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.185875893 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.235853910 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.236449003 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.237356901 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.282035112 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.294353962 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.294492006 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.295408010 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.295676947 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.296374083 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.297436953 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.318825006 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.318850040 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.318909883 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.318943024 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.319370985 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.319391966 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.319428921 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.319574118 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.320661068 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.320724010 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.321542025 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.321590900 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.340028048 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.341907978 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.353694916 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.353832006 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.393820047 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.393846989 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.393871069 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.394042015 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.394221067 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.394243956 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.394263029 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.394308090 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.394339085 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.395148993 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.395170927 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.395193100 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.395234108 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.395258904 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.396068096 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.396090031 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.396111012 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.396132946 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.396161079 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.396982908 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.397006989 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.397069931 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.450014114 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.450165033 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.483294964 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.483392000 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.586004972 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.632908106 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.695169926 CEST	49203	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.695194006 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.741034031 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.741421938 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.787107944 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.822196007 CEST	443	49203	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.822288036 CEST	49203	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.822854996 CEST	49203	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.823168039 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.823232889 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.823674917 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.830821991 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.831861019 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.832858086 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.842175961 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.843656063 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.875663996 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.877638102 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.887178898 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.888422966 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.937736034 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.937894106 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.949748039 CEST	443	49203	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.949786901 CEST	443	49203	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.949809074 CEST	443	49203	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.949834108 CEST	443	49203	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.949856043 CEST	443	49203	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.949944019 CEST	49203	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.949970007 CEST	49203	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.950412035 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.951251030 CEST	443	49203	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.951314926 CEST	49203	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.951368093 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.951395988 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.951421022 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.951431990 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.951440096 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.951456070 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.951466084 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.951489925 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.952672005 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:56.952742100 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.960076094 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.961605072 CEST	49203	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:56.983935118 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.984039068 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.986913919 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.987056017 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:56.997412920 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:56.997560978 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:57.002129078 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:57.002247095 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:57.087385893 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:57.087640047 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:57.089096069 CEST	443	49203	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:57.089167118 CEST	49203	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:57.093353033 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:57.223970890 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:57.224001884 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:57.224024057 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:57.224090099 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:57.224103928 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:38:57.224129915 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:57.224147081 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:38:57.306710005 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:57.352772951 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:57.397418976 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.443058014 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.457045078 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.457223892 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.457254887 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.457287073 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.457343102 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.458579063 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.458610058 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.458679914 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.459861994 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.459887028 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.459996939 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.461143017 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.461164951 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.461220026 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.461249113 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.462388992 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.462471962 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.472213030 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.472974062 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.474827051 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.475207090 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.476070881 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.477262974 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.488440990 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:57.488461971 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:57.488584042 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:57.523587942 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.523623943 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.523633957 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.523646116 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.523657084 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.523762941 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.523807049 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.523808002 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.523812056 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.531519890 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.531553030 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.531609058 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.531723976 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.531783104 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.533034086 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.533109903 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.533139944 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.533178091 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.535823107 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.537596941 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.538791895 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.539036036 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.539228916 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.539475918 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.563381910 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:57.584676981 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.584991932 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.585007906 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.585081100 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.585139990 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.585841894 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.585867882 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.585884094 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.585925102 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.586328030 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.588211060 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.588234901 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.588252068 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.588270903 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.588289976 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.588306904 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.588305950 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.588320971 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.588337898 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.588346958 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.588641882 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.588660955 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.588680983 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.588715076 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.588735104 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.588958979 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.589026928 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.591905117 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.592026949 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.592259884 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.592312098 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.593218088 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.593266964 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.597430944 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.597873926 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.597961903 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.598119974 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.598167896 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.599757910 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.599843025 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.599872112 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.599920034 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.601208925 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.602369070 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.609574080 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.609725952 CEST	443	49191	13.226.169.24	192.168.2.22
Apr 13, 2021 17:38:57.609803915 CEST	49191	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:38:57.615583897 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.616238117 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.643585920 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.644337893 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.644414902 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.649739981 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.655571938 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.656085968 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.656148911 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.660999060 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.661672115 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.661700010 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.661767006 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.662132978 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.662254095 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.662316084 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.662607908 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.662658930 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.662718058 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.663208961 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.665204048 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.665314913 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.665416002 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.665496111 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.669759989 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.671451092 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.671544075 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.672369957 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.694490910 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.706314087 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.712239981 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.712304115 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.714380026 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.715588093 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.716206074 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.721213102 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.721288919 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.721411943 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.721456051 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.729855061 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.729935884 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.730108976 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.730154037 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.730288029 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.730324030 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.730838060 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.730937004 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.730966091 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.732008934 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.732110977 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.732234001 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.732306957 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.735680103 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.736949921 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.741857052 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.755497932 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.755651951 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.759013891 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.776813984 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.776839018 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.776890039 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.776920080 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.779849052 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.781595945 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.792639017 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.793633938 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.793710947 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.793757915 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.794868946 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.795463085 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.795542955 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.795578957 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.795629025 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.796713114 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.798772097 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.800347090 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.802405119 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.802480936 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.802573919 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.802622080 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.804229975 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.813848972 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.813922882 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.813957930 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.813980103 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.815776110 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.815891027 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.815895081 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.815937042 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.816685915 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.819071054 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.857928991 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.857949972 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.858061075 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.858232975 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.858283043 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.858331919 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.858381987 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.858567953 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.858613968 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.861552000 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.863281965 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.866100073 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.866167068 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.870628119 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.876729012 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.876835108 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.876961946 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.877042055 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.880511999 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.909102917 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.912113905 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.912306070 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.917774916 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.917893887 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.917923927 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.917946100 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.917975903 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.917987108 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.918100119 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.918245077 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.919224977 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.919312000 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.919703007 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.919765949 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.919914961 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.919934988 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.919960976 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.919975996 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.920126915 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.921350956 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.921375036 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.921403885 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.921416044 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.921421051 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.921478987 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.921839952 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.921897888 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.921977043 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.922020912 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.922744989 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.922768116 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.922797918 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.922817945 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.922909021 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.924114943 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.924140930 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.924196005 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.924995899 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.925467014 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.925489902 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.925540924 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.926824093 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.926846981 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.926908016 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.928220987 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.928245068 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.928358078 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.929569960 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.929593086 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.929668903 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.932857037 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.932955027 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.933031082 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.933048964 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.933079004 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.933090925 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.934334993 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.934357882 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.934407949 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.935625076 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.935648918 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.935713053 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.936352968 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.936887980 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.936911106 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.936970949 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.938172102 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.938199997 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.938420057 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.939452887 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.939476967 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.939538002 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.940829039 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.940850973 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.940903902 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.941112041 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.941292048 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.941432953 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.941479921 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.942030907 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.942069054 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.942097902 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.942114115 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.943284988 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.943320990 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.943366051 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.943381071 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.944591999 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.944632053 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.944677114 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.944699049 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.944916964 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.945837975 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.945874929 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.945919991 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.945940971 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.947125912 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.947150946 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.947196007 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.947222948 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.949306965 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.950982094 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.970472097 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.979784966 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.979835033 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.981271029 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.982773066 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.986402035 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.986426115 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.986521959 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.986644983 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.986706972 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.986881018 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.986907005 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.986923933 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.986938000 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.987837076 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.987919092 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.990346909 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.991976023 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.994889975 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.995002985 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.995033026 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.995050907 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.995069981 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.995081902 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.996479034 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.996515036 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.996598959 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:57.997833014 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:57.997931004 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.001034975 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.008709908 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.008831024 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.008853912 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.008894920 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.011799097 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.036232948 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.041906118 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.042002916 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.042095900 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.042113066 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.042140007 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.042154074 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.042814970 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.042882919 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.045514107 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.067625046 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.071125984 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.071299076 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.071679115 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.071731091 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.071887016 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.072066069 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.088468075 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.088701010 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.088721991 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.088788033 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.089044094 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.089102030 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.091387987 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.092829943 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.106540918 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.106642008 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.106652975 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.106659889 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.106684923 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.106692076 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.107372999 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.107450008 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.110052109 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.177182913 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.179337978 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.179574013 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.179599047 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.179630995 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.180022001 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.180560112 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.182391882 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.182419062 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.182513952 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.182981968 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.183046103 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.184721947 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.186933994 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.203602076 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.229581118 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.285285950 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.321058989 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.321084976 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.321126938 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.321167946 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.321690083 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.321716070 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.321770906 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.321865082 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.322957039 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.322985888 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.323015928 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.323061943 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.323267937 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.323282003 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.323308945 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.323349953 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.324306965 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.324428082 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.324450970 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.324475050 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.324498892 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.324506998 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.325565100 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.325598001 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.325634956 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.325645924 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.325658083 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.325664043 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.325685024 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.325695992 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.326874018 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.326935053 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.326940060 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.326958895 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.326977968 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.326992989 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.327007055 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.327140093 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.330785990 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.330825090 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.330847979 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.330867052 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.330986023 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.331015110 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.331021070 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.332267046 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.332309961 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.332377911 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.332576990 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.332654953 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.332679033 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.332721949 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.333863020 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.333889961 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.333941936 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.335000038 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.335024118 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.335078001 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.335191965 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.336571932 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.336605072 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.336630106 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.336687088 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.337630033 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.337647915 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.337702036 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.338921070 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.338970900 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.339030027 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.342605114 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.342628002 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.342679024 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.342720985 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.342750072 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.342771053 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.342778921 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.343050957 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.343065977 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.343110085 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.344568968 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.377201080 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.383886099 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.389117956 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.392560005 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.392581940 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.392647028 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.392658949 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.396233082 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.397485971 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.397505045 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.397561073 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.400913000 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.403736115 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.404335976 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.406337976 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.440820932 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.447042942 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.450973988 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.459106922 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.459151030 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.459845066 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.459861040 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.459903955 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.460078001 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.460091114 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.460110903 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.460127115 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.460549116 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.460711956 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.460756063 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.465414047 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.465473890 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.465785980 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.465826988 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.471365929 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.473598003 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.473683119 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.473705053 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.473752022 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.473984957 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.474225998 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.474248886 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.474267960 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.474286079 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.475498915 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.475521088 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.475553036 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.475569010 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.477164984 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.477181911 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.477209091 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.477221966 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.478121042 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.478146076 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.478173018 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.478184938 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.479589939 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.479605913 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.479639053 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.479651928 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.481106997 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.481122971 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.481153965 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.481167078 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.482227087 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.484597921 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.486963987 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.516319036 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.516350985 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.516434908 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.516834974 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.516860008 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.516906977 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.516916037 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.517824888 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.518270016 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.518291950 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.518352032 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.518364906 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.518378973 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.518439054 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.518461943 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.518502951 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.519448042 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.519476891 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.519541979 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.519637108 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.519684076 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.519809961 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.519946098 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.522129059 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522173882 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522195101 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522217035 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522264957 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522291899 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522303104 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.522315979 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.522330999 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.522597075 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522620916 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522643089 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522665977 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522686958 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522713900 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.522732019 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.522746086 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.522797108 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522819042 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522864103 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.522883892 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.522928953 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.522981882 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.523032904 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.523535013 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.523556948 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.523597002 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.523612022 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.523612022 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.523822069 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.523845911 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.523873091 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.523895979 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.523901939 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.523901939 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.523922920 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.523973942 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.525363922 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.525405884 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.525480032 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.525734901 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.525907993 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.525933981 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.525954008 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.525985956 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.526202917 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.527188063 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.527214050 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.527239084 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.527265072 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.527292013 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.527318001 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.527328968 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.527878046 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.527898073 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.527942896 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.528390884 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.528407097 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.528470993 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.529069901 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.529097080 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.529146910 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.530416965 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.530438900 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.530522108 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.531694889 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.531713963 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.531771898 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.532995939 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.533013105 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.533063889 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.533842087 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.534382105 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.534401894 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.534450054 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.534488916 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.535550117 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.535569906 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.535618067 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.535634995 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.536847115 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.536865950 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.536880970 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.536897898 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.536933899 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.536963940 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.536978960 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.537259102 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.537457943 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.537533998 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.538474083 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.540169001 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.540191889 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.540246010 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.540271997 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.540604115 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.540621042 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.540666103 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.540708065 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.540725946 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.540779114 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.542018890 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.542037010 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.542577982 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.543319941 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.543339968 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.543411970 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.545099020 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.545116901 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.545181036 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.545787096 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.545872927 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.545965910 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.549803972 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.555020094 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.560292959 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.565752983 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.568090916 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.570511103 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.570575953 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.571006060 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.571026087 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.571060896 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.571077108 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.572122097 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.572144985 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.572186947 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.572202921 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.574661970 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.574743032 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.574778080 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.574822903 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.576086998 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.576103926 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.576163054 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.576721907 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.576739073 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.576776981 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.576785088 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.577306032 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.577353001 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.577368975 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.577395916 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.578628063 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.578644037 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.578691006 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.578701973 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.579808950 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.580238104 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.580254078 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.580311060 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.580322981 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.583082914 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.583098888 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.583167076 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.587450981 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.587464094 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.587476015 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.587560892 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.587821007 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.587873936 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.587891102 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.587918043 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.587935925 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.589006901 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.589032888 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.589071989 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.589088917 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.592358112 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.592379093 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.592463017 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.592639923 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.592662096 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.592699051 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.592713118 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.593106985 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.593130112 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.593281984 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.594305038 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.594327927 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.594400883 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.595531940 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.595554113 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.595655918 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.596232891 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.596756935 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.596779108 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.596817017 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.596852064 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.598050117 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.598081112 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.598109961 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.598130941 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.598692894 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.598711967 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.598788023 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.601670027 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.601897955 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.601965904 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.601979017 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.601985931 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.602003098 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.602013111 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.602021933 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.602025986 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.602042913 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.602067947 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.602083921 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.603348017 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.603493929 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.603557110 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.608918905 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.608948946 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.609059095 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.609587908 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.609622955 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.609654903 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.609679937 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.611394882 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.613126040 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.613167048 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.613202095 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.613234997 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.613245010 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.613262892 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.613282919 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.613285065 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.613317013 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.613317966 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.613342047 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.613352060 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.613368988 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.613415003 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.613446951 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.616238117 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.616282940 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.616317987 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.616378069 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.616656065 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.616692066 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.616735935 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.617871046 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.617904902 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.617938995 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.617964029 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.618350029 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.618383884 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.618407965 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.618705988 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.618743896 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.618761063 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.618786097 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.618797064 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.619107008 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.619152069 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.619191885 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.619211912 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.619375944 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.619404078 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.619483948 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.619529009 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.619949102 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.619996071 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.620008945 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.620033026 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.624481916 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.624536037 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.624591112 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.624615908 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.624629974 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.624640942 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.624645948 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.624701977 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.628240108 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.628295898 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.628298998 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.628339052 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.628360033 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.628397942 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.628415108 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.628453970 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.629118919 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.629183054 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.629230976 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.630198956 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.630249023 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.630254984 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.630300045 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.631035089 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.631093025 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.631155014 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.631649017 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.631695032 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.631736040 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.635003090 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.635065079 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.635329962 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.635377884 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.635642052 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.635689020 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.635709047 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.635724068 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.636183977 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.636245012 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.636270046 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.636312962 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.636428118 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.636462927 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.636465073 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.636502028 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.636544943 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.636580944 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.636590958 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.636723995 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.638479948 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.638525009 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.638580084 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.638730049 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.639256954 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.639298916 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.639302015 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.639333963 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.639892101 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.639933109 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.639986038 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.640316010 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.640360117 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.640362978 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.640394926 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.641208887 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.641249895 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.641251087 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.641299963 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.641946077 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.641985893 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.641988039 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.642020941 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.642730951 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.642760992 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.642780066 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.642796993 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.643455982 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.643477917 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.643490076 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.643510103 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.644323111 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.644351959 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.644373894 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.644396067 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.646936893 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.646971941 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.647010088 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.647032976 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.647735119 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.647767067 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.647778988 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.647804976 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.647931099 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.647952080 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.647965908 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.647988081 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.648019075 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.648041964 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.648053885 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.648082018 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.648665905 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.648699045 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.648739100 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.650666952 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.650688887 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.650729895 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.651518106 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.651541948 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.651565075 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.651585102 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.651751995 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.651772976 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.651788950 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.651804924 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.652611017 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.652632952 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.652647972 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.652667046 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.654591084 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.657962084 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.658009052 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.658050060 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.658092022 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.659991026 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.660085917 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.660098076 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.660145044 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.660235882 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.660259008 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.660279036 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.660299063 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.660355091 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.660377026 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.660407066 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.660415888 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.660464048 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.660490990 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.660501957 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.660527945 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.660569906 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.661365032 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.661412954 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.661473036 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.662266016 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.662292004 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.662317038 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.662338018 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.663033009 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.663080931 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.663356066 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.663398981 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.664376020 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.664408922 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.664464951 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.664767027 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.664793968 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.664844036 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.665530920 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.665560007 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.665580988 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.665601015 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.666378975 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.666408062 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.666425943 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.666445017 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.666748047 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.666776896 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.666826963 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.666841984 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.670638084 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.670667887 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.670721054 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.670772076 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.670829058 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.670876026 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.675060034 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.675096989 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.675132036 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.675165892 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.675173044 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.675193071 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.675764084 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.675816059 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.675853014 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.676196098 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.676521063 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.676558018 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.676594019 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.676608086 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.676907063 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.676944971 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.676983118 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.677808046 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.677851915 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.677872896 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.677917004 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.678566933 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.678605080 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.678622007 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.678675890 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.678889036 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.678926945 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.678953886 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.678966045 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.681035995 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.681072950 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.681118011 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.682053089 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.682115078 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.682164907 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.684169054 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.684215069 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.684252024 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.684257030 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.684288979 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.684324026 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.684454918 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.684489012 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.684492111 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.684528112 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.684653997 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.684695959 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.684696913 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.684731960 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.684768915 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.684880972 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.684917927 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.684945107 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.684953928 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.684964895 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.685239077 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.685251951 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.685726881 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.685765982 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.685775042 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.685810089 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.685817003 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.685851097 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.686623096 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.686664104 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.686667919 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.686701059 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.686707020 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.686718941 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.686733961 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.687607050 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.687655926 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.687697887 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.687697887 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.688060999 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.689572096 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.689611912 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.689613104 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.689649105 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.689652920 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.689687014 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.700603008 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.700650930 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.700668097 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.700727940 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.703865051 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.703895092 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.703918934 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.703933001 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.708060980 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.708093882 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.708129883 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.708175898 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.708189011 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.708376884 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.708409071 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.708436966 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.708440065 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.708452940 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.708477020 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.708738089 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.708765984 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.708776951 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.708796024 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.708834887 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.721786976 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.721836090 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.721873045 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.721878052 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.721888065 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.722570896 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.722609043 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.722644091 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.722655058 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.722656965 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.722738981 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.723086119 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.723126888 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.723129034 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.723165989 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.723201036 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.723475933 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.723514080 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.723551035 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.723552942 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.723597050 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.723629951 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.723635912 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.723665953 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.723702908 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.723704100 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.723740101 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.723774910 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.723776102 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.723812103 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.723850012 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.723973036 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.724011898 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.724035978 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.724049091 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.724051952 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.724085093 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.724119902 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.724123001 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.724159956 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.724195957 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.724205017 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.724246025 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.724282026 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.724282980 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.724319935 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.724354982 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.725251913 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.725291014 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.725336075 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.725336075 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.725373983 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.725378036 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.725435019 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.725478888 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.726037025 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.726078987 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.726114988 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.726133108 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.726151943 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.726191044 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.726531029 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.726582050 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.726627111 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.726633072 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.726665974 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.726705074 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.726702929 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.726763010 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.727080107 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.727133989 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.727150917 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.727166891 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.727169991 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.727204084 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.727207899 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.727245092 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.727283001 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.727875948 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.727988005 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.728027105 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.728048086 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.728064060 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.728101969 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.728130102 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.728144884 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.728730917 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.728770971 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.728796959 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:38:58.728822947 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.728842974 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:38:58.731554985 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:01.057102919 CEST	49214	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.057275057 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.100337029 CEST	443	49214	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.100474119 CEST	49214	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.100543976 CEST	443	49215	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.100604057 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.101311922 CEST	49214	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.101494074 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.144495010 CEST	443	49214	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.144589901 CEST	443	49215	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.158235073 CEST	443	49214	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.158267021 CEST	443	49214	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.158274889 CEST	443	49214	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.158287048 CEST	443	49215	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.158298969 CEST	443	49215	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.158406019 CEST	443	49215	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.158499956 CEST	49214	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.158546925 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.158584118 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.170969009 CEST	49214	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.171572924 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.214788914 CEST	443	49214	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.214806080 CEST	443	49215	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.214916945 CEST	49214	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.214921951 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.222522974 CEST	49214	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.271960020 CEST	443	49214	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.299987078 CEST	443	49214	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.300105095 CEST	49214	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.304606915 CEST	49214	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:01.353257895 CEST	443	49214	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.380686045 CEST	443	49214	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.380721092 CEST	443	49214	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:01.380848885 CEST	49214	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:06.586678028 CEST	443	49196	104.16.19.94	192.168.2.22
Apr 13, 2021 17:39:06.586745024 CEST	49196	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:39:06.586750031 CEST	443	49196	104.16.19.94	192.168.2.22
Apr 13, 2021 17:39:06.586797953 CEST	49196	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:39:06.616300106 CEST	49214	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:06.617153883 CEST	49214	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:06.661596060 CEST	443	49214	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:06.664499044 CEST	49214	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:06.860820055 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:06.861191988 CEST	49221	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:06.861706018 CEST	49222	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.861793995 CEST	49223	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.904277086 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:06.904812098 CEST	443	49221	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:06.904841900 CEST	443	49222	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:06.904969931 CEST	49222	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.904970884 CEST	49221	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:06.904997110 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:06.905211926 CEST	443	49223	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:06.906388044 CEST	49223	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.906399965 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:06.906801939 CEST	49222	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.906928062 CEST	49223	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.907187939 CEST	49221	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:06.950134993 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:06.950189114 CEST	443	49222	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:06.950344086 CEST	443	49221	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:06.950372934 CEST	443	49223	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:06.963903904 CEST	443	49222	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:06.963958025 CEST	443	49222	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:06.963996887 CEST	443	49222	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:06.964034081 CEST	443	49222	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:06.964046001 CEST	49222	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.964076042 CEST	443	49223	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:06.964107037 CEST	443	49223	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:06.964118004 CEST	49222	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.964132071 CEST	49222	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.964148998 CEST	443	49223	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:06.964150906 CEST	49223	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.964179993 CEST	49223	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.964189053 CEST	443	49223	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:06.964205980 CEST	49223	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.964240074 CEST	49223	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.964524984 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:06.964566946 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:06.964595079 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:06.964663982 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:06.964710951 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:06.964718103 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:06.964978933 CEST	443	49221	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:06.965018034 CEST	443	49221	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:06.965059042 CEST	443	49221	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:06.965076923 CEST	49221	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:06.965130091 CEST	49221	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:06.965137005 CEST	49221	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:06.974991083 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:06.983041048 CEST	49222	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.989748001 CEST	49223	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:06.998133898 CEST	49221	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.021440029 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.021526098 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.027664900 CEST	443	49222	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:07.028670073 CEST	49222	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:07.029453993 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.033646107 CEST	49222	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:07.035837889 CEST	443	49223	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:07.035922050 CEST	49223	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:07.042092085 CEST	443	49221	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.042203903 CEST	49221	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.077725887 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.077897072 CEST	443	49222	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:07.077948093 CEST	443	49222	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:07.077989101 CEST	443	49222	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:07.078035116 CEST	49222	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:07.078075886 CEST	49222	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:07.089272022 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.089317083 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.089358091 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.089358091 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.089391947 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.089397907 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.089452982 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.089494944 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.089505911 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.089540958 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.089540958 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.089587927 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.090893984 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.090935946 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.090975046 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.090996981 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.094026089 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.094067097 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.094125032 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.097358942 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.097444057 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.097445965 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.097500086 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.100233078 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.100275993 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.100349903 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.133110046 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.133169889 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.133219004 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.133270025 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.134454012 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.134504080 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.134550095 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.134587049 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.137469053 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:07.137552977 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:07.479537964 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.569230080 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.571573019 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.571697950 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.571775913 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.571815968 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.571829081 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.571865082 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.571866035 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.571907043 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.571912050 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.571947098 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.571950912 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.571988106 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.574975014 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.575025082 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.575045109 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.575064898 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.575068951 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.575107098 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.575119972 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.575145960 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.575150967 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.575185061 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.575189114 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.575218916 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:07.575233936 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.575265884 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:07.576586008 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.429219961 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.475423098 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.796700001 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.796766996 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.796832085 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.796865940 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.796895027 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.796936035 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.796974897 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.797014952 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.797051907 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.797076941 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.797080994 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.797132969 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.797141075 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.797147036 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.797151089 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.797154903 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.797369003 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.797756910 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.800656080 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.913193941 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.918699026 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.918801069 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.921010971 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.922075987 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.923202038 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.959312916 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.962904930 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.963022947 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.965154886 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965199947 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965224981 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965246916 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965269089 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965291977 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965311050 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965336084 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965342999 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.965356112 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965361118 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.965413094 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.965420961 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.965559959 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965586901 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965610027 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965626955 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.965634108 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965656996 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.965713024 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.965749025 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.965754032 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.965759039 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.966402054 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.966437101 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.966459990 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.966484070 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.966509104 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.966531992 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.966535091 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.966556072 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.966569901 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.966573000 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.966609001 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.966639042 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.967243910 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.967276096 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.967299938 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.967324972 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.967350006 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.967374086 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.967375040 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.967392921 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.967413902 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.967453957 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.967458963 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.967572927 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.967628956 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.967657089 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.967741013 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.968070984 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.968101025 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.968125105 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.968148947 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.968173027 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.968188047 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.968199968 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.968223095 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.968508005 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.968522072 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.968554020 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.968652964 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.968915939 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.968945980 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.968972921 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.968978882 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.968997955 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.969011068 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.969021082 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.969043016 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.969047070 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.969062090 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.969094992 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.969126940 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.969850063 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.969883919 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.969902992 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.969923019 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.969923019 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.969949007 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.969981909 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.970026016 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.970205069 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.970726967 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.970757961 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.970782042 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.970805883 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.970818996 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.970829964 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.970851898 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.970864058 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.970877886 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.970896006 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.970927000 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.970927000 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.970966101 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.971579075 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.971609116 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.971632957 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.971657038 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.971661091 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.971682072 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.971707106 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.971712112 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.971746922 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.971787930 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.972363949 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.972398043 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.972423077 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.972446918 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.972459078 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.972474098 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.972507000 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.972537994 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.973187923 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.973220110 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.973242998 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.973268032 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.973270893 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.973290920 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.973331928 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.973364115 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.974005938 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.974035025 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.974061966 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.974086046 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.974109888 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.974140882 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.974176884 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.974183083 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.974862099 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.974896908 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.974921942 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.974946976 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.974972010 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.974989891 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.975028992 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.975054979 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.975703001 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.975732088 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.975754976 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.975779057 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.975804090 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.975841045 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.975876093 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.976564884 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.976598978 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.976624012 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.976706982 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.977054119 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.977082014 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.977106094 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.977129936 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.977153063 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.977159023 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.977174997 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.977189064 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.977197886 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.977888107 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.977915049 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.977916956 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.977950096 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.977960110 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.977977037 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.977999926 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.978004932 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.978033066 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.978045940 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.978051901 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.978754044 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.978782892 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.978806973 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.978821039 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.978832006 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.978847980 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.978858948 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.978873968 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.978888988 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.978910923 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.979578972 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.979612112 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.979635954 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.979659081 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.979672909 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.979684114 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.979691029 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.979707956 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.979729891 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.980406046 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.980431080 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.980452061 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.980469942 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.980475903 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.980479956 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.980503082 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.980503082 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.980520964 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.981237888 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.981267929 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.981271982 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.981290102 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.981292963 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.981318951 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.981319904 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.981337070 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.981347084 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.981365919 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.981401920 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.982104063 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.982131958 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.982151985 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.982172966 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.982199907 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.982201099 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.982222080 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.982228994 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.982249022 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.982971907 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.983001947 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.983023882 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.983041048 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.983048916 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.983063936 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.983074903 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.983076096 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.983097076 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.983115911 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.983786106 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.983824968 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.983850002 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.983874083 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.983894110 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.983901978 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.983911991 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.984041929 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.984116077 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.984652996 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.984680891 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.984704971 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:08.984765053 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.987494946 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.987510920 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.992264032 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:08.997436047 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.015989065 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.016046047 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.016084909 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.016171932 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.016866922 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.017221928 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.017308950 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.028062105 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.028132915 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.028173923 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.028203011 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.028306007 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.029550076 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.029649019 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.035768032 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.035816908 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.035881042 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.035918951 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.036323071 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.036362886 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.036431074 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.045325994 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.045380116 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.045581102 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.061799049 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.064907074 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.073245049 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.073302031 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.073478937 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.074465990 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.074517965 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.074563026 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.074594975 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.118386984 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.118484020 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.118647099 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.119384050 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.119417906 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.119477034 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.119492054 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.165326118 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.165461063 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.165586948 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.165760994 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.165807009 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.165832996 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.165852070 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.210509062 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.210536003 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.210712910 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.211091995 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.211110115 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.211174011 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.255599976 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.255662918 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.255887985 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.256202936 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.256243944 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.256304026 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.256334066 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.257626057 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.257674932 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.257869959 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.257890940 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.259023905 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.259073973 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.259172916 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:09.260365009 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.260390043 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:09.260456085 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:10.374147892 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:10.441504002 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:10.467153072 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:10.500052929 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:10.502717018 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:10.567147970 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:10.567238092 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:10.567408085 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:10.567831039 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:10.571815968 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:12.772103071 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:12.822262049 CEST	443	49215	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:12.849737883 CEST	443	49215	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:12.849819899 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:12.884663105 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:12.933263063 CEST	443	49215	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:12.960397005 CEST	443	49215	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:12.960422039 CEST	443	49215	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:12.960472107 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:12.961455107 CEST	443	49215	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:12.961519003 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:18.631544113 CEST	49196	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:39:18.634340048 CEST	49196	443	192.168.2.22	104.16.19.94
Apr 13, 2021 17:39:18.664741039 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:18.668335915 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:18.683537960 CEST	443	49196	104.16.19.94	192.168.2.22
Apr 13, 2021 17:39:18.708036900 CEST	443	49215	172.217.23.34	192.168.2.22
Apr 13, 2021 17:39:18.708081961 CEST	49215	443	192.168.2.22	172.217.23.34
Apr 13, 2021 17:39:18.879300117 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:18.883095980 CEST	49222	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:18.927131891 CEST	443	49222	172.217.23.33	192.168.2.22
Apr 13, 2021 17:39:18.927295923 CEST	49222	443	192.168.2.22	172.217.23.33
Apr 13, 2021 17:39:18.927360058 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:18.938752890 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:18.938884020 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:18.939064026 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:18.939110041 CEST	443	49220	172.217.22.246	192.168.2.22
Apr 13, 2021 17:39:18.939116001 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:18.939160109 CEST	49220	443	192.168.2.22	172.217.22.246
Apr 13, 2021 17:39:20.661901951 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:20.661932945 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:20.806536913 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:20.806684971 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:20.807815075 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:20.808649063 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:20.810791016 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:20.810815096 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:20.951858997 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:20.955554008 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:20.955579042 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:20.955595016 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:20.955713034 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:20.957520008 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:20.960968971 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:20.960992098 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:20.961008072 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:20.961076021 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.099987030 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.100017071 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.100100994 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.109030962 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.109054089 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.109134912 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.111784935 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.123712063 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.256669998 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.261013031 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.261111975 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.272921085 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.272953033 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.273057938 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.381412029 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.526730061 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.556885958 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.556902885 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.556914091 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.556961060 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.556983948 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.556987047 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.558444977 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.558464050 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.558476925 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.558494091 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.558515072 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.558547020 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.558557987 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.558561087 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.558564901 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.558605909 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.576977015 CEST	443	49195	143.204.11.64	192.168.2.22
Apr 13, 2021 17:39:21.577008009 CEST	443	49195	143.204.11.64	192.168.2.22
Apr 13, 2021 17:39:21.577042103 CEST	49195	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:39:21.577056885 CEST	49195	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:39:21.701900005 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.701927900 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.702202082 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.705810070 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.705838919 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.705847979 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.705859900 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.705876112 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.705888033 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.705903053 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.705916882 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.705935955 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.705943108 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.705952883 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.705969095 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.705985069 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.706000090 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.706123114 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.706129074 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.706130981 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.706132889 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.706135035 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.706136942 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.717149973 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.719017982 CEST	49227	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.719610929 CEST	49228	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.719907999 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.847507000 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.847538948 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.847667933 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.853902102 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.853930950 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.853941917 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.853955030 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.853971958 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.853986979 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.854001999 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.854017019 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.854034901 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.854036093 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.854053974 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.854054928 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.854057074 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.854058981 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.854068995 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.854084969 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.854094982 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.854101896 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.854113102 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.854119062 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.854139090 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.854253054 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.854257107 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.861143112 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.861483097 CEST	443	49227	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.861725092 CEST	49227	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.862255096 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.862333059 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.865315914 CEST	443	49228	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.865638018 CEST	49228	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.870151043 CEST	49227	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.870486021 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.870507002 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.870521069 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.870538950 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.870560884 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.870562077 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.870582104 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.870583057 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.870585918 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.870600939 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.870601892 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.870620966 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.870637894 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.871279955 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.871709108 CEST	49228	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.993230104 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.993253946 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.993267059 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.993278980 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.993290901 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.993347883 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.993398905 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998563051 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998591900 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998608112 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998626947 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998631954 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998652935 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998653889 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998657942 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998675108 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998675108 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998689890 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998696089 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998709917 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998717070 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998725891 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998737097 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998745918 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998755932 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998774052 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998776913 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998795986 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998797894 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998809099 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998819113 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998830080 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998842001 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998852968 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998862028 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998872042 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998878002 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:21.998897076 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:21.998914957 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.013485909 CEST	443	49227	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.013533115 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.014173031 CEST	443	49227	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.014250040 CEST	49227	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.014739990 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.014810085 CEST	49227	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.014813900 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.015222073 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.016226053 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.016256094 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.016272068 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.016289949 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.016308069 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.016314983 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.016328096 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.016334057 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.016345024 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.016346931 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.016367912 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.016375065 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.016386986 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.016395092 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.016407967 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.016410112 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.016421080 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.016436100 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.016453981 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.016654968 CEST	443	49228	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.017482996 CEST	443	49228	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.018641949 CEST	49228	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.022049904 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.022612095 CEST	49228	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.022845984 CEST	49227	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.024413109 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.030778885 CEST	49228	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.139214993 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.139244080 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.139262915 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.139281034 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.139297009 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.139312983 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.139355898 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.139378071 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.139400959 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.139403105 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.145478010 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.145514011 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.145536900 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.145554066 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.145610094 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.147233009 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.159188032 CEST	443	49227	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.159393072 CEST	443	49227	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.159501076 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.159720898 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.162029028 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.162055969 CEST	443	49226	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.162120104 CEST	49226	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.166054010 CEST	443	49227	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.168275118 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.168901920 CEST	443	49228	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.169282913 CEST	443	49228	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.171602011 CEST	443	49227	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.171680927 CEST	49227	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.175925016 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.175961971 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.175986052 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.176002026 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.176014900 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.176053047 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.177138090 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.177913904 CEST	443	49228	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.184226036 CEST	443	49228	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.184251070 CEST	443	49228	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.184302092 CEST	49228	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.319776058 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.319817066 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.319845915 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.319870949 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.319888115 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.319914103 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.319933891 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.319946051 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.319972038 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.319983959 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.320018053 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.464045048 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.464092016 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.464131117 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.464168072 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.464189053 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.464204073 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.464247942 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.464289904 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.464308023 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.464314938 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.464334965 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.464344978 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.464395046 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.464473963 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.464502096 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.464539051 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.464560986 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.464612961 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.611232042 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.611253977 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.611269951 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.611284971 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.611299992 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.611315012 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.611332893 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.611341953 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.611358881 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.611367941 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.611385107 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.611396074 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.611408949 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.611416101 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.611430883 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.611448050 CEST	443	49229	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.611453056 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.611468077 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.611485004 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.611620903 CEST	49229	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.770950079 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.820918083 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.965991974 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.970621109 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:22.970824003 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:22.974484921 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:23.119184971 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:23.124202013 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:23.124243021 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:23.124291897 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:23.124372005 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:23.124414921 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:23.124443054 CEST	443	49225	204.41.3.217	192.168.2.22
Apr 13, 2021 17:39:23.124548912 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:23.124596119 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:23.124603033 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:23.124607086 CEST	49225	443	192.168.2.22	204.41.3.217
Apr 13, 2021 17:39:23.484833956 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.529985905 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.576598883 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.576653004 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.576910973 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.577199936 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.577239037 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.577311039 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.577353001 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.578526020 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.578548908 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.578629017 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.579962969 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.579984903 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.580049038 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.581325054 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.581347942 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.581434965 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.581458092 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.582756042 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.582788944 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.582843065 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.582887888 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.584146023 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.584180117 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.584229946 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.584265947 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.585488081 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.588973045 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.696974039 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.742043972 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.743798971 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.743889093 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.744122982 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.744174957 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.744230032 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.745498896 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.745563984 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.745661974 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.746788979 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.746938944 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.747004032 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.748155117 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.748261929 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.748298883 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.748343945 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.749593973 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.749702930 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.749742031 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.751023054 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.751085043 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.751538992 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.751581907 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.752389908 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.752496958 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.752532959 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.753746033 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.753853083 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.753865004 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.753887892 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.755115986 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.755142927 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.755187035 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.755201101 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.756515980 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.756540060 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.756572008 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.756764889 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.757913113 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.758304119 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.758332014 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.758379936 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.759299994 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.759356022 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.759394884 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.759437084 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.760694981 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.760751009 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.760751963 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.762096882 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.762118101 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.762156963 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.763504028 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.763524055 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.763549089 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.763566017 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.763569117 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.764899969 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.764918089 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.764969110 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.766326904 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.766355991 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.766388893 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.767765045 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.767786980 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.767807007 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.767839909 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.767852068 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.769118071 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.769134998 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.769181013 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.770510912 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.770538092 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.770590067 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.770603895 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.771850109 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.771872044 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.771908998 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.788721085 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.788975954 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.788995028 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.789096117 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.790570021 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.790589094 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.790637970 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.791794062 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.791816950 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.791838884 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.791856050 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.793200970 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.793220043 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.793262005 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.795790911 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.795810938 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.795861959 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.796484947 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.796549082 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.902894974 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:23.950299978 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.997097969 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.997222900 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:23.997699022 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.239738941 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.286462069 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.299591064 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.299678087 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.306647062 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.351507902 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.401670933 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.401726007 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.401748896 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.401779890 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.401901007 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.401938915 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.401952982 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.401978016 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.402622938 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.402663946 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.402693987 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.402719021 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.403381109 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.403429031 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.403464079 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.403506994 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.404215097 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.404257059 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.404308081 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.404762983 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.404870987 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.404910088 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.404946089 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.404972076 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.405612946 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.405654907 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.405689001 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.405714035 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.406403065 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.406441927 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.406472921 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.406502962 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.407123089 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.407166004 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.407233000 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.407279968 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.407845020 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.407885075 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.408024073 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.408040047 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.408591986 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.408631086 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.408648968 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.408675909 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.409317970 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.409362078 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.409406900 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.409419060 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.410157919 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.410200119 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.410228014 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.410249949 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.410873890 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.410912991 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.410936117 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.410953999 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.411586046 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.411628962 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.411655903 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.411689997 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.412332058 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.412381887 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.412394047 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.412432909 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.413070917 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.413116932 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.413151979 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.413172007 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.413840055 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.413881063 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.413892984 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.413923979 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.414558887 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.414599895 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.414616108 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.414639950 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.415354967 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.415386915 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.415393114 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.415414095 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.415437937 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.416058064 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.416100025 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.416121960 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.416143894 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.416796923 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.416846037 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.416846991 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.416891098 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.417540073 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.417582035 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.417620897 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.417640924 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.418291092 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.418330908 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.418354034 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.418375015 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.419157982 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.438699007 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.446593046 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.446644068 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.446657896 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.446688890 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.446876049 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.446924925 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.446933031 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.446965933 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.447645903 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.447685957 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.447688103 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.447726011 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.448385954 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.448426962 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.448445082 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.448465109 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.449099064 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.449140072 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.449763060 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.449826002 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.449834108 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.449867010 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.450125933 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.450165987 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.450166941 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.450203896 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.450864077 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.450901031 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.450901985 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.450938940 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.451606035 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.451644897 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.451648951 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.451700926 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.452356100 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.452399015 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.452404976 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.452445030 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.454778910 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.454821110 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.454837084 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.454860926 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.460128069 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.460167885 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.460181952 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.460215092 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.460469961 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.460511923 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.460516930 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.460549116 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.461231947 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.461281061 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.461291075 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.461323977 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.461971998 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.462013006 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.462027073 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.462053061 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.462722063 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.462763071 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.462778091 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.462801933 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.463496923 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.463535070 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.463543892 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.463573933 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.464189053 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.464227915 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.464240074 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.464265108 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.464266062 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.464303970 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.464958906 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.464998007 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.465013027 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.465037107 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.465707064 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.465745926 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.465770960 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.465783119 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.466506004 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.466547966 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.466557980 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.466595888 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.467226982 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.467264891 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.467274904 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.467320919 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.468045950 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.468087912 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.468097925 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.468127012 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.468719006 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.468760967 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.468791008 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.468806028 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.469455004 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.469505072 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.469511032 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.469544888 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.470192909 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.470233917 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.470237970 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.470278025 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.470932961 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.470973015 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.471019030 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.471028090 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.471677065 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.471729994 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.707838058 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.709290981 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.710642099 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.719928980 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.720484018 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.765978098 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.765999079 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.797841072 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.803204060 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.803736925 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.885971069 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.885994911 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.886044025 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.887054920 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.887073040 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.887084961 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.887124062 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.887140989 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.888051987 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.888410091 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.888425112 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.888468027 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.888483047 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.889811993 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.889831066 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.889859915 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.889873981 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.891196012 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.891222954 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.891280890 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.891295910 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.892546892 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.892602921 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.897434950 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.897454977 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.897566080 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.897871017 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.898099899 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.898117065 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.898140907 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.898158073 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.899419069 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.899436951 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.899465084 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.899477959 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.900796890 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.900815964 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.900846958 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.900861979 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.902134895 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.902208090 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.903460979 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.903477907 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.903492928 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.903507948 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.903522968 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.903538942 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.907490969 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.907568932 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.907783031 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.907799959 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.907814980 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.907829046 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.907830000 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.907849073 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.907866955 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.908349037 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.908369064 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.908385992 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.908392906 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.908401012 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.908411026 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.908416986 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.908428907 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.908432007 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.908451080 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.908468008 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.909212112 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.909229994 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.909245014 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.909262896 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.909287930 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.909293890 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.909296036 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.913203955 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.916909933 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.921271086 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.924099922 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.924392939 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.925262928 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.925283909 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.925329924 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.925332069 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.925342083 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.925367117 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.925817013 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.926316023 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.926331997 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.926371098 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.926383018 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.927609921 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.927625895 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.927679062 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.927690983 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.928879976 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.928898096 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.928930998 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.928951025 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.930176973 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.930197001 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.930239916 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.931449890 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.931468010 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.931485891 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.931497097 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.931518078 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.933243036 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.944983959 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.971630096 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.972234964 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.972264051 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.984687090 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.984858036 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.985070944 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.985111952 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.985152006 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.985186100 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.985198021 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.985238075 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:27.985265017 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.985289097 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.986974001 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:27.993228912 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.000461102 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.000629902 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.002809048 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.002851963 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.002959967 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.002981901 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.003484964 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.003526926 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.003541946 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.003573895 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.004952908 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.004995108 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.005012989 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.005040884 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.006282091 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.006324053 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.006341934 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.006366014 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.007652044 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.007694006 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.007715940 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.007736921 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.007963896 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.008004904 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.008021116 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.008044958 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.008632898 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.008673906 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.008690119 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.008713961 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.009021997 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.009063005 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.009078026 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.009110928 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.010435104 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.010469913 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.010503054 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.010528088 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.018443108 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.020755053 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.033166885 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.033216953 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.033231020 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.033256054 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.033268929 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.033293962 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.033298969 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.033338070 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.033449888 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.047502041 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.047543049 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.047580004 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.047655106 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.047699928 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.048490047 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.048563957 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.048568010 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.048620939 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.049851894 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.049891949 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.049927950 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.049952984 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.051217079 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.051256895 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.051289082 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.051317930 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.052521944 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.052566051 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.052607059 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.052633047 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.053884983 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.053934097 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.053967953 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.053994894 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.054763079 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.055227995 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.055279970 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.055305004 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.055325985 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.055354118 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.055414915 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.055843115 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.055886984 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.055902958 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.055932999 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.056574106 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.056622982 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.056633949 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.056673050 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.057142019 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.057193041 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.057939053 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.057986975 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.058007956 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.058059931 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.059300900 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.059350014 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.059376001 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.059393883 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.060702085 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.060764074 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.060777903 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.060827971 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.061400890 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.061999083 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.062045097 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.062064886 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.062077999 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.063316107 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.063344955 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.063400984 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.063433886 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.064685106 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.064714909 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.064766884 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.065582991 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.066045046 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.066076040 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.066129923 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.067042112 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.067107916 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.067507029 CEST	443	49207	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.067600012 CEST	49207	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.080028057 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.080060005 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.080077887 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.080091953 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.080112934 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.080142975 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.081027985 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.081044912 CEST	443	49205	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.081095934 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.081130981 CEST	49205	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.081412077 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.081430912 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.081473112 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.081489086 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.083218098 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.083302021 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.084444046 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.084465981 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.084502935 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.084527016 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.084733009 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.084753990 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.084779024 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.084841967 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.085417032 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.085439920 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.085463047 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.085479975 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.086077929 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.086098909 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.086250067 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.086750031 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.086770058 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.086810112 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.087431908 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.087456942 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.087486982 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.087502956 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.088069916 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.088090897 CEST	443	49204	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.088123083 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.088136911 CEST	49204	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.103152990 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.103250980 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.103609085 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.103640079 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.103692055 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.105709076 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.105760098 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.105781078 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.108928919 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.109088898 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.109146118 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.109179974 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.109221935 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.110924959 CEST	443	49206	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.110980988 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.111013889 CEST	49206	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.128868103 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.129002094 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.129205942 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.129236937 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.129276991 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.129306078 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.131234884 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.131305933 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.149065018 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.149190903 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.151300907 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.151349068 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.151380062 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.151407957 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.151899099 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.151983023 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.176487923 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176531076 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176551104 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176578045 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176597118 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176615953 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176635981 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176644087 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.176655054 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176676035 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176697016 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176714897 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176733971 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176752090 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176769972 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.176789999 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.177007914 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.177027941 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.177046061 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.177066088 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.177084923 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.177279949 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.177798986 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.177833080 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.177862883 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.177876949 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.177889109 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.177896023 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.177902937 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.177916050 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.177930117 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.177958965 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.178620100 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.178651094 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.178677082 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.178678036 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.178695917 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.178704023 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.178714991 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.178730011 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.178745031 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.178774118 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.179478884 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.179512024 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.179542065 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.179543018 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.179560900 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.179568052 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.179584026 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.179595947 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.179606915 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.179636955 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.180305958 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.180356979 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.180474997 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.180500984 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.180521965 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.180527925 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.180540085 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.180556059 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.180572033 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.180588961 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.180596113 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.180630922 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.181360960 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.181413889 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.181426048 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.181459904 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.181474924 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.181485891 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.181499004 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.181512117 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.181538105 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.181555033 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.182164907 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.182195902 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.182221889 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.182225943 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.182245970 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.182250977 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.182266951 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.182300091 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184180021 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184215069 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184238911 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184242010 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184250116 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184267998 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184278011 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184300900 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184303045 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184329033 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184334040 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184355974 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184365034 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184382915 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184391975 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184408903 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184417963 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184439898 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184442997 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184473038 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184752941 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184770107 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184788942 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184792042 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184804916 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184808016 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184818983 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184827089 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184842110 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184844017 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.184856892 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.184873104 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.185600042 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.185622931 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.185637951 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.185650110 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.185651064 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.185661077 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.185673952 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.185678005 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.185688019 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.185710907 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.186393023 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.186408997 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.186427116 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.186434984 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.186444044 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.186450958 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.186461926 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.186476946 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.186539888 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.186574936 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.187222958 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.187239885 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.187254906 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.187269926 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.187272072 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.187284946 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.187304020 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.187366962 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.187403917 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.188059092 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.188076019 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.188122034 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.188123941 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.188127995 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.188157082 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.188565969 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.188582897 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.188597918 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.188606024 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.188612938 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.188622952 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.188641071 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.188647985 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.188724995 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.188762903 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.189404011 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.189419985 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.189431906 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.189444065 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.189445019 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.189464092 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.189465046 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.189481020 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.189488888 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.190296888 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.190314054 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.190329075 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.190337896 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.190344095 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.190351009 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.190360069 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.190370083 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.190380096 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.190392017 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.191112041 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.191128016 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.191144943 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.191157103 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.191160917 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.191164017 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.191184044 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.191204071 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.191272974 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.191308022 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.191936016 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.191951036 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.191967010 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.191977024 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.191981077 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.191989899 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.192004919 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.192018032 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.192096949 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.192130089 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.192785025 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.192800045 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.192815065 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.192821980 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.192830086 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.192837954 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.192851067 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.192861080 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.192949057 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.192981958 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.193643093 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.193659067 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.193672895 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.193684101 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.193687916 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.193696976 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.193706989 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.193712950 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.193721056 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.193737030 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.194482088 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.194499969 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.194533110 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.194542885 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.194704056 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.194719076 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.194747925 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.194758892 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.195341110 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.195358992 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.195384979 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.195394039 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.196069002 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.196624994 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.196640015 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.196674109 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.196685076 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.197926998 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.197942972 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.197973013 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.197983980 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.199189901 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.199203968 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.199258089 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.199270010 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.200489998 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.200505972 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.200537920 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.200551987 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.201749086 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.201766014 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.201800108 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.201811075 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.203021049 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.203042030 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.203072071 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.203085899 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.204317093 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.204338074 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.204369068 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.204381943 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.204530001 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.205600023 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.205621004 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.205657005 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.205671072 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.206937075 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.207007885 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.327023029 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.327150106 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.372769117 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.374768019 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.386434078 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.390001059 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.400798082 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.489289045 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.588787079 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.588828087 CEST	443	49183	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.589000940 CEST	49183	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:28.602201939 CEST	443	49184	143.204.11.100	192.168.2.22
Apr 13, 2021 17:39:28.607263088 CEST	49184	443	192.168.2.22	143.204.11.100
Apr 13, 2021 17:39:32.339211941 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.384052992 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.529680967 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.529721975 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.529874086 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.530606031 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.530705929 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.546895981 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.549716949 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.552963972 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.553175926 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.558917999 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.560281038 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.599153996 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.599195957 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.601210117 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.601242065 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.605576992 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.607009888 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.607287884 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.607772112 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.653772116 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.659753084 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.659807920 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.659847975 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.659884930 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.659929037 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.663588047 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.665627956 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.729537964 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.777606010 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.777635098 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.777849913 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.784756899 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.797209024 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.797631979 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.798402071 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.834609985 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.845863104 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.878825903 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.881202936 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.886121988 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.935638905 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.973954916 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.979674101 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.980338097 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.981712103 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.986612082 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.987189054 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.993524075 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:32.995620966 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:32.996288061 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.028631926 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.032025099 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.043095112 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.043123007 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.043838024 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.044523001 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.090857029 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.148988008 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.149190903 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.151283026 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.155623913 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.155772924 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.157084942 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.158817053 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.159089088 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.161750078 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.196484089 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.201908112 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.206794024 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.309480906 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.309659004 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.310564041 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.313678980 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.317703962 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.337639093 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.339642048 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.355647087 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.357779980 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.357847929 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.357942104 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.357990980 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.379861116 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.380033016 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.462223053 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.462395906 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.475253105 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.475480080 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.475718021 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.475946903 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.481256962 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.521951914 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.522372961 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.522484064 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.522545099 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.527805090 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.627942085 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.628148079 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.628940105 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.632008076 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.632074118 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.632244110 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.632575035 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.632630110 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.632683039 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.632714987 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.633860111 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.633953094 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.665580988 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.665772915 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.673654079 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.722721100 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.723000050 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.781497955 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.781773090 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:33.906153917 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:33.906358004 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:34.241137028 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:34.251125097 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:39:34.286675930 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:34.380966902 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:34.380995035 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:34.381005049 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:34.381130934 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:39:34.392116070 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:34.392316103 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:34.475116014 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:34.521677971 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:34.634094000 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:34.634341955 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:34.697752953 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:34.697906971 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:34.871705055 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:34.877537012 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:34.907947063 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:34.912841082 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:34.916631937 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:34.922235012 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:34.940366983 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:34.952862978 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:34.957343102 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:34.986242056 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.025202036 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.025363922 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.027107954 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.027250051 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.058509111 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.058664083 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.091125011 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.091161966 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.091279030 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.242316008 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.242460966 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.323065042 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.324784994 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.325787067 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.326767921 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.328210115 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.328942060 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:39:35.329523087 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.367989063 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.370820045 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.371694088 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.372668028 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.374939919 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.376180887 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.459657907 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:35.459686041 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:35.459719896 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:39:35.459749937 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:39:35.459753036 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:35.459778070 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:35.459817886 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:39:35.459835052 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:35.459872961 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:39:35.460011005 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:35.460056067 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:39:35.460088015 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:35.460125923 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:39:35.460369110 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:35.460421085 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:39:35.460604906 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:35.460625887 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:35.460654974 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:39:35.460665941 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:39:35.476201057 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.476259947 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.476731062 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.476793051 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.478730917 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.479506016 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.479625940 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.479818106 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.479871035 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.482286930 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.482497931 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.482527971 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.482600927 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.483180046 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.483186960 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.483274937 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.483925104 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.484781027 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.486891031 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.489079952 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.524612904 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.526901960 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.528774977 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.529376984 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.531593084 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.533781052 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.586708069 CEST	443	49202	34.198.74.185	192.168.2.22
Apr 13, 2021 17:39:35.586795092 CEST	49202	443	192.168.2.22	34.198.74.185
Apr 13, 2021 17:39:35.592050076 CEST	49195	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:39:35.592071056 CEST	49195	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:39:35.592870951 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:39:35.632186890 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.632272959 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.633482933 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.633579016 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.634263992 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.637284994 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:39:35.638037920 CEST	443	49195	143.204.11.64	192.168.2.22
Apr 13, 2021 17:39:35.638106108 CEST	49195	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:39:35.639405966 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:39:35.639435053 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:39:35.639452934 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:39:35.639467955 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:39:35.639473915 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:39:35.639497042 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:39:35.639501095 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:39:35.639503002 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:39:35.640093088 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.640150070 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.640599966 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:39:35.640619040 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:39:35.640649080 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:39:35.640666962 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:39:35.641401052 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.641890049 CEST	443	49194	143.204.11.64	192.168.2.22
Apr 13, 2021 17:39:35.641949892 CEST	49194	443	192.168.2.22	143.204.11.64
Apr 13, 2021 17:39:35.661412001 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.678678989 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.686171055 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.706342936 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.811922073 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.811970949 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.812144041 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.816315889 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.817833900 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.817971945 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.818623066 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.818707943 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.819180012 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.819864988 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.820034981 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.821293116 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.822684050 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.861325026 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.864129066 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.865856886 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.867502928 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.876013994 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.876051903 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.876142979 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.876641989 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.876684904 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.876708984 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.876719952 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.877968073 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.878015041 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.878051996 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.879272938 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.879308939 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.879312038 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.879336119 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.879353046 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.880587101 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.880624056 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.880659103 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.881901979 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.881942034 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.881953001 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.881963968 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.881984949 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.883234024 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.883280039 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.883304119 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.883410931 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.884582996 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.884634018 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.884654045 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.884666920 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.885891914 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.885940075 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.885960102 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.885971069 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.887381077 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.931797028 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.968224049 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.968471050 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.972985029 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.973460913 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.973479986 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.973570108 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.975708961 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:35.975852966 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.977317095 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:35.979760885 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.017925978 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.021879911 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.024421930 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.039280891 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.039419889 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.041318893 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.085864067 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.092849016 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.092936993 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.092962027 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.093007088 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.093014956 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.093056917 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.094255924 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.094302893 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.094333887 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.094355106 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.095581055 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.095639944 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.095691919 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.095732927 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.096920967 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.096968889 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.097013950 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.098203897 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.098237038 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.098273993 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.098297119 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.098299980 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.099505901 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.099538088 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.099569082 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.099587917 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.100780010 CEST	443	49187	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.100842953 CEST	49187	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.125981092 CEST	443	49189	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.126245022 CEST	49189	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.132136106 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.132342100 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.136944056 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.137130976 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.157824039 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.157879114 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.157959938 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.159846067 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.164410114 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.187098026 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.193480015 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.193633080 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.209131956 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.217576027 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.232038975 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.259135008 CEST	49190	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.262991905 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.305708885 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.318191051 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.318259954 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.318371058 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.318782091 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.318826914 CEST	443	49186	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.318856955 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.318891048 CEST	49186	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.352511883 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.352545977 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.352555990 CEST	443	49188	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.352859020 CEST	49188	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.368931055 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.368962049 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.369132996 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.369555950 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.369582891 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.369658947 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.370834112 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.370863914 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.370923042 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.372167110 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.372184992 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.372260094 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.373488903 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.373507977 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.373575926 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.374820948 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.374841928 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.374916077 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.376132965 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.376152992 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.376251936 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.377470970 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.377495050 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.377580881 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.378806114 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.378828049 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.378871918 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.380098104 CEST	443	49232	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.380160093 CEST	49232	443	192.168.2.22	13.226.169.24
Apr 13, 2021 17:39:36.411632061 CEST	443	49190	13.226.169.24	192.168.2.22
Apr 13, 2021 17:39:36.411835909 CEST	49190	443	192.168.2.22	13.226.169.24

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 13, 2021 17:37:26.678884029 CEST	52197	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:26.737647057 CEST	53	52197	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:28.538772106 CEST	53099	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:28.646919966 CEST	53	53099	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:30.086622953 CEST	52838	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:30.135772943 CEST	61200	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:30.159277916 CEST	53	52838	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:30.175677061 CEST	49548	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:30.200001955 CEST	53	61200	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:30.208498955 CEST	55627	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:30.237185955 CEST	53	49548	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:30.270998955 CEST	53	55627	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:32.633934975 CEST	56009	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:32.644654036 CEST	49548	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:32.661407948 CEST	61865	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:32.663750887 CEST	55171	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:32.668757915 CEST	52496	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:32.671240091 CEST	57564	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:32.676074028 CEST	63009	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:32.696254969 CEST	53	56009	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:32.710105896 CEST	53	49548	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:32.717278004 CEST	53	52496	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:32.718313932 CEST	53	61865	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:32.728718042 CEST	53	55171	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:32.733338118 CEST	53	57564	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:32.750011921 CEST	53	63009	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:33.287211895 CEST	59319	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:33.338939905 CEST	53	59319	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:33.619843006 CEST	53070	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:33.677005053 CEST	53	53070	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:37.998157024 CEST	59770	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:38.070590019 CEST	53	59770	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:57.885875940 CEST	61523	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:57.934639931 CEST	53	61523	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:57.960015059 CEST	62791	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:58.017174006 CEST	53	62791	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:58.893093109 CEST	61523	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:58.949901104 CEST	53	61523	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:58.971065044 CEST	62791	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:59.034408092 CEST	53	62791	8.8.8.8	192.168.2.22
Apr 13, 2021 17:37:59.953943968 CEST	61523	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:37:59.987288952 CEST	62791	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:00.013740063 CEST	53	61523	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:00.044300079 CEST	53	62791	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:03.004673004 CEST	61523	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:03.004935026 CEST	62791	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:03.053291082 CEST	53	61523	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:03.053498983 CEST	53	62791	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:05.771576881 CEST	50667	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:05.838373899 CEST	53	50667	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:07.006160975 CEST	61523	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:07.006346941 CEST	62791	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:07.057245016 CEST	53	62791	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:07.058006048 CEST	53	61523	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:49.005299091 CEST	54129	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:49.100181103 CEST	53	54129	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:51.028285027 CEST	65329	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:51.094017029 CEST	53	65329	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:51.346478939 CEST	60718	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:51.351878881 CEST	49157	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:51.395221949 CEST	53	60718	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:51.400609970 CEST	57391	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:51.444817066 CEST	53	49157	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:51.460114956 CEST	53	57391	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:52.104582071 CEST	61858	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:52.167088032 CEST	53	61858	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:56.606880903 CEST	62500	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:56.692657948 CEST	53	62500	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:57.585875988 CEST	51652	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:57.635529995 CEST	53	51652	8.8.8.8	192.168.2.22
Apr 13, 2021 17:38:57.988244057 CEST	62762	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:38:58.052541018 CEST	53	62762	8.8.8.8	192.168.2.22
Apr 13, 2021 17:39:00.983897924 CEST	56905	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:39:01.014990091 CEST	54609	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:39:01.040110111 CEST	58101	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:39:01.055013895 CEST	53	56905	8.8.8.8	192.168.2.22
Apr 13, 2021 17:39:01.066914082 CEST	53	54609	8.8.8.8	192.168.2.22
Apr 13, 2021 17:39:01.105257988 CEST	53	58101	8.8.8.8	192.168.2.22
Apr 13, 2021 17:39:06.780910015 CEST	64329	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:39:06.790235996 CEST	64881	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:39:06.848330975 CEST	53	64329	8.8.8.8	192.168.2.22
Apr 13, 2021 17:39:06.857075930 CEST	53	64881	8.8.8.8	192.168.2.22
Apr 13, 2021 17:39:20.587256908 CEST	55327	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:39:20.660142899 CEST	53	55327	8.8.8.8	192.168.2.22
Apr 13, 2021 17:39:24.787085056 CEST	59150	53	192.168.2.22	8.8.8.8
Apr 13, 2021 17:39:24.922920942 CEST	53	59150	8.8.8.8	192.168.2.22

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class
Apr 13, 2021 17:37:28.538772106 CEST	192.168.2.22	8.8.8.8	0xd575	Standard query (0)	covid-19.ontario.ca	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:49.005299091 CEST	192.168.2.22	8.8.8.8	0x64c2	Standard query (0)	covid-19.ontario.ca	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:51.028285027 CEST	192.168.2.22	8.8.8.8	0x7c48	Standard query (0)	www.ontario.ca	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:51.351878881 CEST	192.168.2.22	8.8.8.8	0xce3b	Standard query (0)	files.ontario.ca	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:51.400609970 CEST	192.168.2.22	8.8.8.8	0x21ad	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:56.606880903 CEST	192.168.2.22	8.8.8.8	0x9672	Standard query (0)	api.ontario.ca	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:57.585875988 CEST	192.168.2.22	8.8.8.8	0xf95	Standard query (0)	cdn.jsdelivr.net	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:57.988244057 CEST	192.168.2.22	8.8.8.8	0x20ed	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)
Apr 13, 2021 17:39:00.983897924 CEST	192.168.2.22	8.8.8.8	0xac13	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)
Apr 13, 2021 17:39:01.014990091 CEST	192.168.2.22	8.8.8.8	0x2d5a	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)
Apr 13, 2021 17:39:06.780910015 CEST	192.168.2.22	8.8.8.8	0xb3c2	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)
Apr 13, 2021 17:39:06.790235996 CEST	192.168.2.22	8.8.8.8	0xbef0	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)
Apr 13, 2021 17:39:20.587256908 CEST	192.168.2.22	8.8.8.8	0xe641	Standard query (0)	www.phdapps.health.gov.on.ca	A (IP address)	IN (0x0001)
Apr 13, 2021 17:39:24.787085056 CEST	192.168.2.22	8.8.8.8	0x57e2	Standard query (0)	covid19.ontariohealth.ca	A (IP address)	IN (0x0001)

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class
Apr 13, 2021 17:37:28.646919966 CEST	8.8.8.8	192.168.2.22	0xd575	No error (0)	covid-19.ontario.ca	covid-19.ontariogovernment.ca		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:37:28.646919966 CEST	8.8.8.8	192.168.2.22	0xd575	No error (0)	covid-19.ontariogovernment.ca	d1yhecx6e3wyn1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:37:28.646919966 CEST	8.8.8.8	192.168.2.22	0xd575	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.100	A (IP address)	IN (0x0001)
Apr 13, 2021 17:37:28.646919966 CEST	8.8.8.8	192.168.2.22	0xd575	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.124	A (IP address)	IN (0x0001)
Apr 13, 2021 17:37:28.646919966 CEST	8.8.8.8	192.168.2.22	0xd575	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.101	A (IP address)	IN (0x0001)
Apr 13, 2021 17:37:28.646919966 CEST	8.8.8.8	192.168.2.22	0xd575	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.38	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:49.100181103 CEST	8.8.8.8	192.168.2.22	0x64c2	No error (0)	covid-19.ontario.ca	covid-19.ontariogovernment.ca		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:38:49.100181103 CEST	8.8.8.8	192.168.2.22	0x64c2	No error (0)	covid-19.ontariogovernment.ca	d1yhecx6e3wyn1.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:38:49.100181103 CEST	8.8.8.8	192.168.2.22	0x64c2	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.101	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:49.100181103 CEST	8.8.8.8	192.168.2.22	0x64c2	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.124	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:49.100181103 CEST	8.8.8.8	192.168.2.22	0x64c2	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.100	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:49.100181103 CEST	8.8.8.8	192.168.2.22	0x64c2	No error (0)	d1yhecx6e3wyn1.cloudfront.net		143.204.11.38	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:51.094017029 CEST	8.8.8.8	192.168.2.22	0x7c48	No error (0)	www.ontario.ca	www.ontariogovernment.ca		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:38:51.094017029 CEST	8.8.8.8	192.168.2.22	0x7c48	No error (0)	www.ontariogovernment.ca	d36pom45p27o8j.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:38:51.094017029 CEST	8.8.8.8	192.168.2.22	0x7c48	No error (0)	d36pom45p27o8j.cloudfront.net		13.226.169.24	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:51.094017029 CEST	8.8.8.8	192.168.2.22	0x7c48	No error (0)	d36pom45p27o8j.cloudfront.net		13.226.169.36	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:51.094017029 CEST	8.8.8.8	192.168.2.22	0x7c48	No error (0)	d36pom45p27o8j.cloudfront.net		13.226.169.100	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:51.094017029 CEST	8.8.8.8	192.168.2.22	0x7c48	No error (0)	d36pom45p27o8j.cloudfront.net		13.226.169.33	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:51.444817066 CEST	8.8.8.8	192.168.2.22	0xce3b	No error (0)	files.ontario.ca	files.ontariogovernment.ca		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:38:51.444817066 CEST	8.8.8.8	192.168.2.22	0xce3b	No error (0)	files.ontariogovernment.ca	d2khazk8e83rdv.cloudfront.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:38:51.444817066 CEST	8.8.8.8	192.168.2.22	0xce3b	No error (0)	d2khazk8e83rdv.cloudfront.net		143.204.11.64	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:51.444817066 CEST	8.8.8.8	192.168.2.22	0xce3b	No error (0)	d2khazk8e83rdv.cloudfront.net		143.204.11.28	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:51.444817066 CEST	8.8.8.8	192.168.2.22	0xce3b	No error (0)	d2khazk8e83rdv.cloudfront.net		143.204.11.53	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:51.444817066 CEST	8.8.8.8	192.168.2.22	0xce3b	No error (0)	d2khazk8e83rdv.cloudfront.net		143.204.11.15	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:51.460114956 CEST	8.8.8.8	192.168.2.22	0x21ad	No error (0)	cdnjs.cloudflare.com		104.16.19.94	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:51.460114956 CEST	8.8.8.8	192.168.2.22	0x21ad	No error (0)	cdnjs.cloudflare.com		104.16.18.94	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:56.692657948 CEST	8.8.8.8	192.168.2.22	0x9672	No error (0)	api.ontario.ca	api.ontariogovernment.ca		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:38:56.692657948 CEST	8.8.8.8	192.168.2.22	0x9672	No error (0)	api.ontariogovernment.ca	productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:38:56.692657948 CEST	8.8.8.8	192.168.2.22	0x9672	No error (0)	productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com		34.198.74.185	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:56.692657948 CEST	8.8.8.8	192.168.2.22	0x9672	No error (0)	productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com		52.71.121.103	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:56.692657948 CEST	8.8.8.8	192.168.2.22	0x9672	No error (0)	productio-nodeelas-1po85c440amc1-224777076.us-east-1.elb.amazonaws.com		3.224.191.206	A (IP address)	IN (0x0001)
Apr 13, 2021 17:38:57.635529995 CEST	8.8.8.8	192.168.2.22	0xf95	No error (0)	cdn.jsdelivr.net	dualstack.f3.shared.global.fastly.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:38:58.052541018 CEST	8.8.8.8	192.168.2.22	0x20ed	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:39:01.055013895 CEST	8.8.8.8	192.168.2.22	0xac13	No error (0)	googleads.g.doubleclick.net		172.217.23.34	A (IP address)	IN (0x0001)
Apr 13, 2021 17:39:01.066914082 CEST	8.8.8.8	192.168.2.22	0x2d5a	No error (0)	static.doubleclick.net	static-doubleclick-net.l.google.com		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:39:06.848330975 CEST	8.8.8.8	192.168.2.22	0xb3c2	No error (0)	i.ytimg.com		172.217.22.246	A (IP address)	IN (0x0001)
Apr 13, 2021 17:39:06.857075930 CEST	8.8.8.8	192.168.2.22	0xbef0	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:39:06.857075930 CEST	8.8.8.8	192.168.2.22	0xbef0	No error (0)	photos-ugc.l.googleusercontent.com		172.217.23.33	A (IP address)	IN (0x0001)
Apr 13, 2021 17:39:20.660142899 CEST	8.8.8.8	192.168.2.22	0xe641	No error (0)	www.phdapps.health.gov.on.ca		204.41.3.217	A (IP address)	IN (0x0001)
Apr 13, 2021 17:39:24.922920942 CEST	8.8.8.8	192.168.2.22	0x57e2	No error (0)	covid19.ontariohealth.ca	covax.azurefd.net		CNAME (Canonical name)	IN (0x0001)
Apr 13, 2021 17:39:24.922920942 CEST	8.8.8.8	192.168.2.22	0x57e2	No error (0)	covax.azurefd.net	star-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)

HTTPS Packets

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Apr 13, 2021 17:37:28.787437916 CEST	143.204.11.100	443	192.168.2.22	49166	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:37:28.788871050 CEST	143.204.11.100	443	192.168.2.22	49165	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:37:33.476855040 CEST	143.204.11.100	443	192.168.2.22	49171	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:37:33.495132923 CEST	143.204.11.100	443	192.168.2.22	49173	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:37:33.496412992 CEST	143.204.11.100	443	192.168.2.22	49172	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:37:33.502901077 CEST	143.204.11.100	443	192.168.2.22	49174	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:48.716222048 CEST	143.204.11.100	443	192.168.2.22	49184	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:48.716419935 CEST	143.204.11.100	443	192.168.2.22	49183	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:51.199331999 CEST	13.226.169.24	443	192.168.2.22	49187	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:51.201241016 CEST	13.226.169.24	443	192.168.2.22	49186	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:51.428680897 CEST	13.226.169.24	443	192.168.2.22	49188	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:51.519992113 CEST	13.226.169.24	443	192.168.2.22	49189	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:51.527255058 CEST	13.226.169.24	443	192.168.2.22	49190	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:51.530602932 CEST	13.226.169.24	443	192.168.2.22	49191	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:51.584839106 CEST	143.204.11.64	443	192.168.2.22	49194	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:51.597486973 CEST	143.204.11.64	443	192.168.2.22	49195	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:51.598572016 CEST	104.16.19.94	443	192.168.2.22	49196	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Oct 21 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Oct 21 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:38:51.598572016 CEST	104.16.19.94	443	192.168.2.22	49196	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:38:51.599118948 CEST	104.16.19.94	443	192.168.2.22	49197	CN=sni.cloudflaressl.com, O="Cloudflare, Inc.", L=San Francisco, ST=CA, C=US CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Wed Oct 21 02:00:00 CEST 2020 Mon Jan 27 13:48:08 CET 2020	Thu Oct 21 01:59:59 CEST 2021 Wed Jan 01 00:59:59 CET 2025	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:38:51.599118948 CEST	104.16.19.94	443	192.168.2.22	49197	CN=Cloudflare Inc ECC CA-3, O="Cloudflare, Inc.", C=US	CN=Baltimore CyberTrust Root, OU=CyberTrust, O=Baltimore, C=IE	Mon Jan 27 13:48:08 CET 2020	Wed Jan 01 00:59:59 CET 2025		7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:38:56.951251030 CEST	34.198.74.185	443	192.168.2.22	49203	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:56.952672005 CEST	34.198.74.185	443	192.168.2.22	49202	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:57.588958979 CEST	143.204.11.100	443	192.168.2.22	49206	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:57.591905117 CEST	143.204.11.100	443	192.168.2.22	49204	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:57.592259884 CEST	143.204.11.100	443	192.168.2.22	49207	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:38:57.593218088 CEST	143.204.11.100	443	192.168.2.22	49205	CN=covid-19.ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Apr 06 21:31:44 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Wed Apr 06 22:01:43 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030
Apr 13, 2021 17:39:01.158274889 CEST	172.217.23.34	443	192.168.2.22	49214	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:28:05 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:28:04 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:39:01.158274889 CEST	172.217.23.34	443	192.168.2.22	49214	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:39:01.158406019 CEST	172.217.23.34	443	192.168.2.22	49215	CN=*.g.doubleclick.net, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:28:05 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:28:04 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:39:01.158406019 CEST	172.217.23.34	443	192.168.2.22	49215	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:39:06.964034081 CEST	172.217.23.33	443	192.168.2.22	49222	CN=*.googleusercontent.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:32:57 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:32:56 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:39:06.964034081 CEST	172.217.23.33	443	192.168.2.22	49222	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:39:06.964189053 CEST	172.217.23.33	443	192.168.2.22	49223	CN=*.googleusercontent.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:32:57 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:32:56 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:39:06.964189053 CEST	172.217.23.33	443	192.168.2.22	49223	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:39:06.964595079 CEST	172.217.22.246	443	192.168.2.22	49220	CN=edgestatic.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:13:20 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:13:19 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:39:06.964595079 CEST	172.217.22.246	443	192.168.2.22	49220	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:39:06.965059042 CEST	172.217.22.246	443	192.168.2.22	49221	CN=edgestatic.com, O=Google LLC, L=Mountain View, ST=California, C=US CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GTS CA 1O1, O=Google Trust Services, C=US CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Tue Mar 16 20:13:20 CET 2021 Thu Jun 15 02:00:42 CEST 2017	Tue Jun 08 21:13:19 CEST 2021 Wed Dec 15 01:00:42 CET 2021	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:39:06.965059042 CEST	172.217.22.246	443	192.168.2.22	49221	CN=GTS CA 1O1, O=Google Trust Services, C=US	CN=GlobalSign, O=GlobalSign, OU=GlobalSign Root CA - R2	Thu Jun 15 02:00:42 CEST 2017	Wed Dec 15 01:00:42 CET 2021		7dcce5b76c8b17472d024758970a406b
Apr 13, 2021 17:39:21.100017071 CEST	204.41.3.217	443	192.168.2.22	49226	CN=www.phdapps.health.gov.on.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	Wed Apr 15 16:50:31 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Mon Sep 22 19:14:57 CEST 2014 Mon Nov 27 21:23:42 CET 2006	Sun Apr 24 17:20:30 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Mon Sep 23 03:31:53 CEST 2024 Fri Nov 27 21:53:42 CET 2026	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	Mon Sep 22 19:14:57 CEST 2014	Mon Sep 23 03:31:53 CEST 2024
					CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	Mon Nov 27 21:23:42 CET 2006	Fri Nov 27 21:53:42 CET 2026
Apr 13, 2021 17:39:21.109054089 CEST	204.41.3.217	443	192.168.2.22	49225	CN=www.phdapps.health.gov.on.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	Wed Apr 15 16:50:31 CEST 2020 Mon Oct 05 21:13:56 CEST 2015 Mon Sep 22 19:14:57 CEST 2014 Mon Nov 27 21:23:42 CET 2006	Sun Apr 24 17:20:30 CEST 2022 Thu Dec 05 20:43:56 CET 2030 Mon Sep 23 03:31:53 CEST 2024 Fri Nov 27 21:53:42 CET 2026	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	Mon Sep 22 19:14:57 CEST 2014	Mon Sep 23 03:31:53 CEST 2024
					CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority, OU="(c) 2006 Entrust, Inc.", OU=www.entrust.net/CPS is incorporated by reference, O="Entrust, Inc.", C=US	Mon Nov 27 21:23:42 CET 2006	Fri Nov 27 21:53:42 CET 2026
Apr 13, 2021 17:39:32.663588047 CEST	13.226.169.24	443	192.168.2.22	49232	CN=ontario.ca, OU=Government of Ontario, O=Government of Ontario, L=Toronto, ST=Ontario, C=CA CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Nov 26 13:45:55 CET 2019 Mon Oct 05 21:13:56 CEST 2015 Tue Jul 07 19:25:54 CEST 2009	Fri Nov 26 14:15:53 CET 2021 Thu Dec 05 20:43:56 CET 2030 Sat Dec 07 18:55:54 CET 2030	771,49192-49191-49172-49171-159-158-57-51-157-156-61-60-53-47-49196-49195-49188-49187-49162-49161-106-64-56-50-10-19,0-10-11-13-23-65281,23-24,0	7dcce5b76c8b17472d024758970a406b
					CN=Entrust Certification Authority - L1K, OU="(c) 2012 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Mon Oct 05 21:13:56 CEST 2015	Thu Dec 05 20:43:56 CET 2030
					CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	CN=Entrust Root Certification Authority - G2, OU="(c) 2009 Entrust, Inc. - for authorized use only", OU=See www.entrust.net/legal-terms, O="Entrust, Inc.", C=US	Tue Jul 07 19:25:54 CEST 2009	Sat Dec 07 18:55:54 CET 2030

Code Manipulations

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

High Level Behavior Distribution

Click to dive into process behavior distribution

Behavior

Click to jump to process

System Behavior

Analysis Process: WINWORD.EXE PID: 1796 Parent PID: 584

General

Start time:	17:36:29
Start date:	13/04/2021
Path:	C:\Program Files\Microsoft Office\Office14\WINWORD.EXE
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Microsoft Office\Office14\WINWORD.EXE' /Automation -Embedding
Imagebase:	0x13f0d0000
File size:	1424032 bytes
MD5 hash:	95C38D04597050285A18F66039EDB456
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	high

Chronological Activities

Analysis Process: iexplore.exe PID: 2616 Parent PID: 584

General

Start time:	17:36:59
Start date:	13/04/2021
Path:	C:\Program Files\Internet Explorer\iexplore.exe
Wow64 process (32bit):	false
Commandline:	'C:\Program Files\Internet Explorer\iexplore.exe' -Embedding
Imagebase:	0x13fda0000
File size:	814288 bytes
MD5 hash:	4EB098135821348270F27157F7A84E65
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Analysis Process: iexplore.exe PID: 2728 Parent PID: 2616

General

Start time:	17:36:59
Start date:	13/04/2021
Path:	C:\Program Files (x86)\Internet Explorer\iexplore.exe
Wow64 process (32bit):	true
Commandline:	'C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE' SCODEF:2616 CREDAT:275457 /prefetch:2
Imagebase:	0x1140000
File size:	815304 bytes
MD5 hash:	8A590F790A98F3D77399BE457E01386A
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	moderate

Chronological Activities

Disassembly

Reset < >

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	API monitoring, DLL monitoring, File monitoring, Named Pipes, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Binary file metadata, File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	File monitoring, Process command-line parameters, Process monitoring
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	AWS CloudTrail logs, Azure activity logs, Process command-line parameters, Process monitoring, Stackdriver logs
Platforms:	AWS, Azure, GCP, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Malware reverse engineering, Netflow/Enclave netflow, Packet capture, Process monitoring, Process use of network, SSL/TLS inspection
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use a non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Host network interface, Netflow/Enclave netflow, Network intrusion detection system, Network protocol analysis, Packet capture, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	DNS records, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Files may be copied from an external adversary controlled system through the command and control channel to bring tools into the victim network or through alternate protocols with another tool such as FTP. Files can also be copied over on Mac and Linux with native tools like scp, rsync, and sftp.
Tactics:	Command and Control
Data Sources:	File monitoring, Netflow/Enclave netflow, Network protocol analysis, Packet capture, Process command-line parameters, Process monitoring, Process use of network
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading ...

Warning!

Analysis Report COVID-19 Vaccine Locations Booking Sites_April 12 (8eb60eb7-3115-41f6-bcc5-3e70c62319dd).docx

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

Startup

Malware Configuration

Yara Overview

Sigma Overview

Signature Overview

Compliance:

Networking:

System Summary:

Hooking and other Techniques for Hiding and Protection:

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

Contacted IPs

Public

General Information

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASN

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

File Icon

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTPS Packets

Code Manipulations

Statistics

CPU Usage

Memory Usage

High Level Behavior Distribution

back

Behavior

System Behavior

Analysis Process: WINWORD.EXE PID: 1796 Parent PID: 584

General

Chronological Activities

Analysis Process: iexplore.exe PID: 2616 Parent PID: 584

General

Chronological Activities

Analysis Process: iexplore.exe PID: 2728 Parent PID: 2616

General

Chronological Activities

Disassembly